IT Consultant & Fullstack WEB Developer

I supervised a Professional Training at Universal Serv, for a trainee finishing it's 12th grade, on his
project final graduation project, at which he had to develop a WEB interfaced application using
PHP and OOP paradigm, with several databases as data storage (different databases for the
WEB application itself and the application data).

Although not as an emploee but under contract, I keep my previous functions, while taking a
Master of Science in IT (Information Security) at University of Liverpool (through e-learning),
which started in July 2008.

ES Viagens is a market leader in the travel business, in Portugal, having it's own travell operator
(ES Operadores) and being present with various brands (Top Atlântico, CWT Portugal, Viagens
Tagus, Net Viagens).

Reporting directly to the IT department director, I had the responsability of all infrastructure
providing access to the Internet, internal servers (Intranet) and external servers (Internet).

Achievements:
* I designed and implemented the whole physical infrastructure for the hosting of the internal
Intranet web-site.
* I restructured the whole email system to a system having internal mail accounts (Intranet) and
external email accounts (visible on the Internet).
* I designed and implemented a ring-segmented structure in the access path to the Internet,
with contention zones for the internal servers, external servers and several physical access to
the Internet, through different ISPs.
* I implemented an anti-virus system in the e-mail servers (both in the internal mail servers and
in the external mail servers).
* I have concieved and implemented the access infrastructure for the ES Viagens travel
operator site, with controlled access to the internal travel reservation system (a proprietary
system) and to the internal business database (Oracle).
* I designed and collaborated in the implementation of the access network, designed as a
ringed access structure, providing access from the internal network to the Internet (through
several Internet accesses, from different ISPs) having on it's access path 3 pairs of
Checkpoint firewalls (full redundant, with load balancing - both firewalls were operating
simultaneously during normal operation), with the inner one implemented with 2 HP DL-360
G3 servers, the middle one with 2 middle range Nokia appliances and the outer one with 2
smaller Nokia appliances.
All of them with Checkpoint Firewall-1 (the inner one over Linux, and the others over Nokia
version of unix (BSD unix). The Checkpoint supervision and management was implemented
with a dedicated and separated management network.
This was, back in 2003, the first Checkpoint instalation with redundant nodes implemented
with the multicast load balancing feature of Checkpoint Firewall-1, over Linux, in Portugal.
* I designed and implemented a SPAM classification and filtering system, for email SPAM
filtering, with SPAM retention on quarenteen and WEB based monitoring, with Mail Scanner
and and other Open Source software, and mail log on MySQL database, on a mail system
with av average of 90000 to 100000 incomming mails / day.
* I designed and implemented a system for controlled access to inner resources and systems,
from the Internet, through a OpenVPN VPN Server, without direct network access but using
specific point-to-point IP-tunnels, from the external OpenVPN server to each internal acessed
service (IP:port from the outer ring to the correspondent IP:port on the inner network) with
service's access defined point-to-point.