Kaleby

Responsible for creating all the security policies as well as installing and configuring tools needed to enforce those. Created the Information Security Awareness program where security-related topics are discussed with employees using online lectures, marketing material, phishing tests, etc. Built the IaC Architecture for the company application using Terragrunt and Terraform to deploy the application into the Digital Ocean. Developing the ISMS for the company. Created automated pipelines using GitHub actions to create, update and destroy environments.

• Build IaC Infrastructure.
• Implement ISMS (Information Security Management System).
• IaaS (Terraform, Terragrunt, Ansible).
• Administer Digital Ocean environment.
• DevOps team lead.
• Information Security team lead.

Working for the Clevertech client Core (Financial Services) as DevOps senior consultant for the client’s team. Helped migrate very large (more than 55k revisions) SVN repositories to BitBucket. Migrated git repositories from a hosted server to BitBucket cloud configuring mirroring to allow a smooth transition. Migrated hosted  GoCD server to AWS restoring a backup and reconfiguring CI/CD pipelines to run from the cloud server. Created yeoman generator to create patterns for repositories helping the company to accomplish compliance rules.

• DevOps.
• Senior Consultant.
• IaaS (Terraform, Vagrant, Puppet).
• Build Pipelines.

Working for the BairesDev client Brightinsight a global regulated IoT SaaS platform for biopharma and Medtech. Working as DevOps Engineer in the core platform team responsible for creating IaaS resources on GCP like GKE cluster, Redis, BigQuery, Airflow, etc, for the company microservices using Terraform and Terragrunt, creating  CI/CD pipelines on GitLab and Jenkins. Responsible for deploying all terraform modules to build the client’s core infrastructure on GCP. Responsible for deploying client’s tenants’ infrastructure on GCP. Responsible for deploying some of the client’s microservices to the infrastructure created on GCP. Worked for the BairesDev client RangeForce a cybersecurity training and cyber skills assessment company. I was responsible for creating courses related to DevOps creating more than 20 Kubernetes-related courses, covering from the basics to advanced topics including Kubernetes and containers security features. The courses received great feedback with more than 95% 5 stars ratings for the students. He was the team mentor/team lead helping the new members to keep the team high performance. Mentor for other BairesDev team members as well as technical interviewer of new DevOps/Networking/InfoSec candidates.

• DevOps (Terraform, Terragrunt).
• Mentor/Team Lead.
• Technical Interviewer.
• Information Security.

Implemented security awareness program for both airports, achieving 97% participation rates and 80% increased rate of security incident reporting by users. Implemented an ITSM tool at both airports. Implemented the Information Security Management System (ISMS) for the company. Creation of dashboards with performance indicators of all teams, helping managers with service metrics. Implemented auditing in all company environments enabling compliance areas to investigate complaints via the ethics channel. Led implementation of identity and inventory management, PAM, Antivirus, Patch Management, and Vulnerability Management tools. Acting as a change manager reduced the incidence of maintenance incidents involving IT by 96%. Planned and designed the Google Cloud Platform IAM users and roles and RBAC for Google Kubernetes Engine. Designed and maintained GCP environment site reliability for both airports.

• CISO at all airports managed by Fraport in Brazil
• Governance sector manager at all airports managed by Fraport in Brazil.
• End-user support team manager at Porto Alegre Airport.
• Privacy committee leader.
• GCP site reliability engineering and security definitions

ITS System (specialized in processing and services for the payment market). Planned and designed the AWS structure for group enterprises, implementing security settings (IAM), automation (ANSIBLE, TERRAFORM), and pipelines (Jenkins) in the environment. Migrated 3 clients from an on-premise environment to AWS, creating a scalable structure for storage (S3, EBS), servers (EC2), and applications (ELB). Configured AWS Cloudwatch providing monitoring and alerts for the clients. Created automation scripts using Bash and Python to help with the IaaC automation.

• Site reliability engineering for AWS Environment.
• Technical Leader for security projects.
• NGFW and WAF administration.

Kaleby worked in the infrastructure team with focus on security, servers, and firewall administration for Bank Topázio  He was responsible fa or the entire communication structure between Brazil’s Central Bank.  He maintained a PCI-DSS environment and worked on-site reliability engineering for AWS and Azure Environments.

Achievements:

• Datacenter migration to another site with no downtime
• Creation of the certificate’s environment, used for communication between the company and Brazil’s Central Bank
• Design and implementation of the AWS and Azure cloud infrastructure of the company
• Responsible for the compliance at Brazil’s Central Bank 4.658 resolution, which addresses cyber security policy and the requirements for contracting processing services, data storage, and cloud computing
• Created automation for several Infrastructure tasks like scheduled backups, serverand  updates and automated some other manual stuff using bash and Python.