ruyoliveira

Working as an outsourced SRE/DevOps Engineer for Apple, implementing automated pipelines using customer internal tools and Pulumi for IaC. Maintaining EKS clusters, planning and executing upgrades of packages like Cert-manager, Istio, kube-state-metrics, Prometheus, and cluster control plane and worker nodes with minimal impact on production workloads. Handling incidents, analyzing logs, troubleshooting, identifying the root cause and fixing issues with containerized applications and infrastructure resources.

Working as SRE/DevOps Engineer maintaining automated pipelines in Github Actions, writing Terraform modules to provision infrastructure along with Terragrunt, using Helm and Kustomize to create, tailor and deploy containerized applications. Supporting cloud resources with multi-account and multi-region deployments, maintaining EKS clusters, planning and executing upgrades of packages, cluster control plane and worker nodes with zero impact on production workloads. Handling incidents, analyzing logs, troubleshooting, identifying the root cause and fixing issues with containerized applications and infrastructure resources. Implementing and supporting staking nodes for Avalanche and Polygon networks.

Transform business requirements into infrastructure resources and code the required resources in AWS cloud using terraform and GitHub, implement deployment pipelines using Circleci to deploy applications to EKS clusters, Heroku cloud, lambda, and React SPA to S3 buckets. Infrastructure documentation, handling root causes analysis, incident correction, post-incident reviews and records. Support all cloud infrastructure resources, including VPC, EC2 servers, ELB, RDS, ASG, EKS clusters, security groups, CloudFront, Cognito authentication, route53, Datadog, IAM users, groups and policies, and AWS costs management.

Support all infrastructure of Rock Stage product, including design, validation, plan and implementation of changes, incident correction, post-incident reviews and documentation with root-cause analysis, code reviews, improve infrastructure and process documentation. Everyday tasks include maintaining cloud infrastructure of VPC, EC2 Linux servers, ELB, RDS, Kubernetes, K8s cluster-autoscaler, IaC using terraform and GitHub, security groups, CDN, VPN, route53, monitoring with New Relic One, and troubleshoot web applications.

The Leadership of the network security squad, planning, implementing and monitoring projects to increase the maturity level in CIS Controls Framework and management of SLI/SLO with internal clients. Responsible for network security solutions for on-premises and AWS Cloud environments. Supporting LAN and WLAN environments, Palo Alto Networks firewall, Cisco ISE, WLC and switches, CloudFront, Security Group, AWS VPC and LB, CDN/WAF Akamai, and SecureSphere WAF on EC2 instances.

Playing the role of Principal Network Engineer, in charge of following operational indicators, suppliers' SLA, incidents and root cause analysis reports, action plans, validating and approval of networks related changes and advocating in CAB meetings. Managing IT outsourcing service providers in designing, planning, implementing and maintaining of LAN, WAN and WLAN networks, enhancing existing infrastructure, identifying internal clients’ needs, and remarkably close relation with peers of other towers like middleware and application servers, databases, monitoring/governance, virtualization and OS. Administration of Linux servers, proxy reverse, A10 Networks ADC, FortiADC, Firewall Cisco ASA and Fortigate, Switches Cisco 6500/4500, Brocade and Alcatel, WLC Alcatel (OEM Aruba), routing with OSPF and BGP, VPN, and DX connections to AWS Cloud. Development of Nagios’ plugins using Perl and Python to monitor Network and other IT assets.

Design, implementation and support of LAN, WAN and WLAN infrastructure in critical environments, with a strong focus on performance, redundancy and high availability. Implementation of network security policies, administration and support on Check Point FW-1 NG/NGX and Internet web filtering (WebSense). Implementation of voice-over IP (SIP) on Asterisk platform and integration with Cisco Call Manager. Expertise in analysis and troubleshooting of various network protocols with Ethereal/Wireshark. Support for Linux and network services, Apache web server, Vsftpd, DNS, DHCP, Proxy SQUID, Cacti, and Nagios. Implementation of Perl scripts/plugins for monitoring infrastructure and IT services. Support of routers and switches, from Nortel, Avaya, and Cisco, including routing protocols OSPF and BGP, X.25 connections, IGMP and PIM Multicast for B3 UDMF Market Data.

Design, implementation and support of integrated data and voice networks running IP and IPX protocols over leased lines, X.25, frame-relay and cell-relay technologies, RIPv2 and OSPF routing. Configuration and monitoring of different routers and switches, like Cisco, Wellfleet and Bay Networks. Administration of Internet infrastructure, VPN connections, definition of firewalls security rules, support Check Point Firewall-1 on Solaris platform. Support for Linux and network services like DNS, DHCP, Proxy, SMTP/Sendmail, Apache web server, and SNMP, deep analysis of network protocols and traffic with DominoLAN and DominoWAN. Contracting and management of telecommunications companies’ services.