09/04/2026 updated
100 % available
Freelance Azure Infrastructure & Platform Engineer | Microsoft Certified Azure Solutions Architect
Fordyce, United Kingdom
Only remote
Electronic Engineering, Bachelor's degree (discontinued) - Universidade de BrasiliaAbout me
Freelance Azure Infrastructure & Platform Engineer, Microsoft-certified AZ-305, running enterprise Azure estates across networking, AKS, IaC, security, DR and AI platforms. Available remotely across UK/EU for short projects or longer engagements, via SOLIDPLUS LTD.
Microsoft AzureCloud EngineeringDevOpsInfrastructure ManagementMicrosoft Certified Solutions AssociateInfrastructure as Code (IaC)KubernetesTerraform
Microsoft Azure Cloud & Infrastructure
Expertise in managing multi-subscription Azure estates including vWAN hub-spoke topology, Azure Firewall, Front Door/WAF, AKS, Key Vault, Defender for Cloud, Azure Monitor, Azure AI Foundry, Azure Functions, and API Management. Proven delivery of availability-zone resilience, disaster recovery, and platform automation across production environments.
Infrastructure as Code (Terraform & Bicep)
Extensive use of Terraform and Bicep for infrastructure automation, including hybrid migrations, CI/CD pipeline integration, AZ-failure recovery patterns, Front Door migrations, and certificate lifecycle automation. Terraform deployments have achieved around 60% reduction in deployment time and 25% cost reduction.
Azure DevOps & CI/CD Automation
Design and maintenance of Azure DevOps pipelines for CI/CD across AKS platforms, certificate rotation, cost reporting, and infrastructure deployments. Automation of monthly vulnerability remediation into DevOps work items and integration with tools such as Helm, Python, and PowerShell.
Azure Kubernetes Service (AKS)
Maintenance of CI/CD for AKS platforms across 87 Azure DevOps pipelines with Helm and Terraform, including node-pool rebuilds and Kubernetes version upgrades. Container tooling includes AKS, Helm, and Docker.
Networking & Firewall
Deep knowledge of vWAN hub-spoke networking, ExpressRoute, S2S/P2S VPN, Azure Firewall, NSGs, DNS, and private endpoints. Hands-on experience resolving complex network, DNS, and firewall faults remotely and on site.
Security & Vulnerability Management
Vulnerability management using Rapid7 InsightVM and Microsoft Defender for Cloud. Experience with certificate lifecycle/PKI, Entra ID, GDPR compliance, and security incident investigation across client environments.
Python & PowerShell Automation
Scripting and automation using Python and PowerShell for infrastructure tasks, certificate rotation pipelines, cost dashboards, and KPI data collection from Azure, Rapid7, ServiceNow, and OpManager.
Monitoring & Observability
Use of Azure Monitor/Log Analytics, ManageEngine OpManager, Power BI, and React dashboards for infrastructure KPI tracking and operational visibility across multi-subscription estates.
AWS & Multi-Cloud
Experience deploying and troubleshooting hybrid and cloud environments across Azure and AWS, including AWS Certificate Manager integration and AWS Certified Cloud Practitioner certification.
Data & Operating Systems
Proficiency with SQL Server, PostgreSQL, Windows Server administration, and Linux administration in cloud and on-premises environments.
Expertise in managing multi-subscription Azure estates including vWAN hub-spoke topology, Azure Firewall, Front Door/WAF, AKS, Key Vault, Defender for Cloud, Azure Monitor, Azure AI Foundry, Azure Functions, and API Management. Proven delivery of availability-zone resilience, disaster recovery, and platform automation across production environments.
Infrastructure as Code (Terraform & Bicep)
Extensive use of Terraform and Bicep for infrastructure automation, including hybrid migrations, CI/CD pipeline integration, AZ-failure recovery patterns, Front Door migrations, and certificate lifecycle automation. Terraform deployments have achieved around 60% reduction in deployment time and 25% cost reduction.
Azure DevOps & CI/CD Automation
Design and maintenance of Azure DevOps pipelines for CI/CD across AKS platforms, certificate rotation, cost reporting, and infrastructure deployments. Automation of monthly vulnerability remediation into DevOps work items and integration with tools such as Helm, Python, and PowerShell.
Azure Kubernetes Service (AKS)
Maintenance of CI/CD for AKS platforms across 87 Azure DevOps pipelines with Helm and Terraform, including node-pool rebuilds and Kubernetes version upgrades. Container tooling includes AKS, Helm, and Docker.
Networking & Firewall
Deep knowledge of vWAN hub-spoke networking, ExpressRoute, S2S/P2S VPN, Azure Firewall, NSGs, DNS, and private endpoints. Hands-on experience resolving complex network, DNS, and firewall faults remotely and on site.
Security & Vulnerability Management
Vulnerability management using Rapid7 InsightVM and Microsoft Defender for Cloud. Experience with certificate lifecycle/PKI, Entra ID, GDPR compliance, and security incident investigation across client environments.
Python & PowerShell Automation
Scripting and automation using Python and PowerShell for infrastructure tasks, certificate rotation pipelines, cost dashboards, and KPI data collection from Azure, Rapid7, ServiceNow, and OpManager.
Monitoring & Observability
Use of Azure Monitor/Log Analytics, ManageEngine OpManager, Power BI, and React dashboards for infrastructure KPI tracking and operational visibility across multi-subscription estates.
AWS & Multi-Cloud
Experience deploying and troubleshooting hybrid and cloud environments across Azure and AWS, including AWS Certificate Manager integration and AWS Certified Cloud Practitioner certification.
Data & Operating Systems
Proficiency with SQL Server, PostgreSQL, Windows Server administration, and Linux administration in cloud and on-premises environments.
Experience
Professional experience5 - 10 years
Freelancer since2022
Languages
EnglishFluentPortugueseNative speaker
Project history
Sole engineer for a 7-subscription Azure estate of roughly 51 VMs across West and North Europe on a vWAN hub-spoke topology with Azure Firewall, serving four shipping and logistics business units against a 99%+ core-availability target. Designed AZ failure recovery patterns, automated SSL/TLS certificate rotation, migrated Azure Front Door Classic to Standard/Premium, led Azure AI Foundry platform infrastructure, shipped a Power BI cost dashboard, and maintained CI/CD for AKS across 87 Azure DevOps pipelines. Technologies: Azure, Terraform, Bicep, Azure DevOps, AKS, Helm, Python, PowerShell, Rapid7 InsightVM, Defender for Cloud.
Delivered 2nd and 3rd line engineering in a global MSP for clients across creative industries and financial services. Deployed and troubleshot on-premises, hybrid and cloud environments across VMware, Azure and AWS. Resolved complex network, DNS and firewall faults remotely and on site, and led security incident investigation across client environments. Technologies: Azure, AWS, VMware, Windows Server, Linux, Networking.
Ran an independent cloud consultancy for Brazil-based financial-services clients, invoicing directly and owning scope, delivery and client relationships. Built Terraform infrastructure-as-code that cut deployment time by around 60%, and ran hybrid migrations sustaining 99.9% uptime with roughly 25% cost reduction. Technologies: Azure, AWS, Terraform, SQL, TypeScript, JavaScript.