10/30/2026 updated
100 % available
Senior SRE & Cloud Architect | AWS, GCP, Kubernetes, Terraform | 20+ years
Porto, Portugal
Only remote
BSc Electrical Engineering, UFRJ (1996)About me
Senior SRE and cloud architect with 20+ years. Led on-prem-to-AWS migrations (Shell), EKS re-architecture (Colgate), and run reliability for a Swiss fintech. AWS/GCP, Kubernetes, Terraform, SLO-based observability, LLM incident agents. 100% remote from Portugal, B2B via my EU company.
Argo CDHelmKubernetes SecurityAmazon Web ServicesAmazon Elastic Compute CloudCloud EngineeringLinuxDevOpsElasticsearchPython (Programming Language)PostgreSQLAnsiblePrometheusDatadogAWS CDK
Cloud Architecture & Migration
Expertise in cloud migration and modernization on AWS and GCP, covering lift-and-shift approaches, re-platforming, low-downtime cutovers, EKS/GKE design, network policies, IRSA/Workload Identity, multi-AZ failover, and Helm-based deployments.
Reliability & Observability Engineering
Deep knowledge of SLI/SLO frameworks, error budgets, burn-rate alerting, and observability tooling including Datadog, New Relic, Prometheus, Grafana, and Elasticsearch for incident response and platform reliability.
Infrastructure as Code & CI/CD
Proficiency in Terraform, Ansible, AWS CDK (Python), GitHub Actions, and Jenkins for building repeatable, automated infrastructure pipelines and containerized environments with Kubernetes, Helm, Docker, and Argo CD.
AI for Operations (AIOps)
Application of LLM agents for incident investigation using LangGraph, RAG pipelines, BGE-M3 embeddings, cross-encoder reranking, pgvector, and eval-driven development with MCP and Ollama/LM Studio.
Data Layer Operations
Management and performance tuning of HA MySQL, PostgreSQL, MongoDB, Oracle (PL/SQL), Kafka, and RabbitMQ, including WORM-compliant backup pipelines for regulated environments.
Kubernetes Platform Engineering
Design and operation of Kubernetes estates on GCP and AWS, including cluster topology, out-of-band access, Terraform/Ansible provisioning, and security essentials (LFS260 certified).
Programming & Scripting Languages
Practical use of Python, Bash, SQL, PL/SQL, and Java for automation, infrastructure tooling, and backend development across cloud and on-premises environments.
Database & Storage Technologies
Experience with AWS RDS, S3, CloudWatch, and GCP Cloud SQL, Cloud Logging/Monitoring, alongside Oracle, MySQL, PostgreSQL, and MongoDB for enterprise-grade data management.
Networking & Security
Configuration of ALB/NLB, VPC, IAM, WAF, Lambda, and network policies for internal/external traffic segregation, workload identity, and compliance-driven security architectures.
Expertise in cloud migration and modernization on AWS and GCP, covering lift-and-shift approaches, re-platforming, low-downtime cutovers, EKS/GKE design, network policies, IRSA/Workload Identity, multi-AZ failover, and Helm-based deployments.
Reliability & Observability Engineering
Deep knowledge of SLI/SLO frameworks, error budgets, burn-rate alerting, and observability tooling including Datadog, New Relic, Prometheus, Grafana, and Elasticsearch for incident response and platform reliability.
Infrastructure as Code & CI/CD
Proficiency in Terraform, Ansible, AWS CDK (Python), GitHub Actions, and Jenkins for building repeatable, automated infrastructure pipelines and containerized environments with Kubernetes, Helm, Docker, and Argo CD.
AI for Operations (AIOps)
Application of LLM agents for incident investigation using LangGraph, RAG pipelines, BGE-M3 embeddings, cross-encoder reranking, pgvector, and eval-driven development with MCP and Ollama/LM Studio.
Data Layer Operations
Management and performance tuning of HA MySQL, PostgreSQL, MongoDB, Oracle (PL/SQL), Kafka, and RabbitMQ, including WORM-compliant backup pipelines for regulated environments.
Kubernetes Platform Engineering
Design and operation of Kubernetes estates on GCP and AWS, including cluster topology, out-of-band access, Terraform/Ansible provisioning, and security essentials (LFS260 certified).
Programming & Scripting Languages
Practical use of Python, Bash, SQL, PL/SQL, and Java for automation, infrastructure tooling, and backend development across cloud and on-premises environments.
Database & Storage Technologies
Experience with AWS RDS, S3, CloudWatch, and GCP Cloud SQL, Cloud Logging/Monitoring, alongside Oracle, MySQL, PostgreSQL, and MongoDB for enterprise-grade data management.
Networking & Security
Configuration of ALB/NLB, VPC, IAM, WAF, Lambda, and network policies for internal/external traffic segregation, workload identity, and compliance-driven security architectures.
Experience
Professional experience10+ years
Freelancer since2020
Languages
EnglishFluentPortugueseNative speaker
Project history
Delivered a production retrieval-augmented assistant over proprietary programme documentation for call-centre agents, handling thousands of queries per month with multilingual embeddings and observability throughout.
Designed and shipped a LangGraph agent for internal SRE tooling on GCP and AWS that gathers logs, metrics, SLO state, Cloud Run releases and feature-flag changes for each alert and writes a structured triage report. Implemented two-stage retrieval over runbooks with regression eval suite. Also responsible for regulated platform reliability: Kubernetes as common runtime across GCP and AWS, WORM-compliant backup pipelines, HA MySQL and MongoDB tuning on high-throughput paths alongside Kafka.
Set up and led a new SRE function (~20 engineers) for a headless commerce platform on GKE (Adobe Experience Manager + IBM Commerce) serving Selfridges, DFS, Colgate and Sherwin-Williams: on-call, incident handling and SLI/SLO frameworks with New Relic dashboards tied to client objectives. Led the migration of Shell services from on-premises to Kubernetes on AWS (EKS). Supported Colgate's platform on AWS. For Costa Coffee, codified AWS infrastructure in AWS CDK (Python).
Certificates
LFS260 – Kubernetes Security Essentials
The Linux Foundation2023
AWS Certified DevOps Engineer – Professional
Amazon Web Services2021
AWS Certified Solutions Architect – Professional
Amazon Web Services2020