Designed cloud-native architectures using core GCP services including Compute Engine, GKE, Cloud Run, Cloud Functions, VPC, Cloud SQL. Ensured alignment with Google Cloud best practices and GCP Architecture Framework. Delivered secure, high-availability, cost-optimized solutions for production and development environments. Developed and managed CI/CD pipelines with GitHub Actions, Azure DevOps, and Cloud Build. Automated infrastructure deployment with Terraform and reusable IaC modules. Maintained Git repositories and applied DevOps best practices including trunk-based development and automated testing. Implemented and enforced security controls using IAM, VPC Service Controls, firewall rules, and encryption. Applied Zero Trust principles and environment segregation. Maintained compliance with ISO 27001, CIS Benchmarks, and GCP security blueprints. Defined and applied organizational policies including Org Policy, IAM roles, quotas, budgets, tagging standards. Enabled monitoring, auditing, and logging with Cloud Monitoring, Cloud Logging, Security Command Center, and Cloud Audit Logs. Collaborated cross-functionally with development, security, and operations teams to support secure and scalable deployments. Advocated DevSecOps practices integrating security from development lifecycle start.

Managed network and security infrastructure in AWS and Azure cloud environments. Assisted DevOps teams with environment automation using CDK (Python). Managed security layers for core applications with WAF, Security Groups, GuardDuty, AWS Inspector. Implemented and administered pfSense firewall and Bitdefender endpoint security. Administered monitoring and integrity services in Docker containerized structure. Conducted security assessments of main application. Led security and infrastructure projects including API creation and firewall implementation. Automated processes to reduce costs and increase security using Python and Shell scripting. Achieved 30% cloud infrastructure cost reduction in one year. Achieved LGPD compliance in record time. Implemented pfSense firewall in AWS with DR architecture for client-to-site VPN (~100 users) and 30 site-to-site VPNs. Deployed AWS multi-account environment with Control Tower (12 accounts), SCP control, SSO with Google Workspace, and group/role-based permissions.

Managed cloud security team focusing on configuration and maintenance of cloud environments and Office 365 tools. Managed services including front door, LB as a service, NSGs, WAF, cloud app security, and Azure AD security features.

Led L2 SOC teams providing support and improvements for Check Point, Palo Alto, Fortigate firewalls. Planned cloud infrastructure (Azure and AWS) and conducted security assessments with Office 365, Intune, Security Center. Provided primary support for TBG with Check Point, Azure Firewall, Microsoft ATP, Intune. Administered endpoint security (Cylance, SEP). Performed 24/7 L2 on-call duty 10 days/month. Prepared improvement reports. Led full migration of on-premises environment to Azure including AD DS to Azure AD, virtual desktop via RDP, security policies, routing for 60-70 employees. Implemented Microsoft Intune for BYOD and mobile devices.

Monitored and protected client environments in banking, financial, telecom, and hospital sectors (Genial Investimentos, Rede D'Or, IRB). Provided L1 SOC support. Primary support for Genial Investimentos with SEP and Fortigate management. Implemented improvements in alerts and network asset monitoring.

Provided L1 support with Check Point, Palo Alto, Fortigate, F5 Big-IP firewalls, and Zabbix monitoring.

Shadowed specialists in project management meetings. Supported project execution with F5 BIG-IP (LTM) and Palo Alto.

Managed high volume of tickets via Freshdesk. Resolved issues with ERP, system compatibility, digital certificates, and network asset configuration.