ResumeCurrículo
Backend engineer with 4+ years at Brazil's largest independent ISP, owning platform-level infrastructure across a distributed Java/Spring Boot microservices stack serving millions of customers. Operates with end-to-end feature ownership — requirements gathering, stakeholder alignment, technical refinement, and implementation — without dedicated PM support. Led cross-cutting framework migrations, proactively identified and remediated a critical LGPD violation exposing customer PII, and integrated payment, CRM, and field-ops systems at scale. Builds at the frontier of AI infrastructure security with Arbitus (Rust-based MCP security proxy). C2 English.
Experience
Alloha Fibra Jul. 2023 – present · 2 years 10 months Backend Engineer · São Paulo (remote) Platform-level infrastructure across 8+ Java/Spring Boot microservices — led JDBC migration, remediated LGPD violation, authored Java 17 migration assessment.
- Maintained and evolved
air-spring-boot-starter, the internal Java library used across all 8+ microservices — led zero-downtime JDBC migration (MySqlRepository → JdbcTemplate), fixed IN-list expansion bug in shared layer, coordinated phased rollout across 8 repos via GMUDs. - Proactively identified and remediated a critical LGPD violation: 9 distinct attack surfaces exposing customer PII (password, CPF, RG, name) via unauthenticated endpoint — implemented AES-256-GCM encryption with zero-downtime key rotation, migration job for 554k records, across 3 microservices.
- Authored architectural assessment for Java 8→17 + Spring Boot 1.5→3.x migration of the core commercial service — mapped 301 files, identified critical blockers, defined 4-phase rollout plan.
- Developed and maintained Java/Spring Boot microservices covering commercial operations, billing, CRM, telephony, customer support, and device management.
- Integrated payment gateway CycloPay into the financial microservice, handling invoice generation and refund flows.
- Integrated RADIUS session extraction via
radius-regAPI, replacing legacy polling with accurate session data and disconnect causes. - Integrated the CRM platform with Salesforce to automatically trigger the Welcome & Activation Journey on contract creation and service activation, replacing manual operations.
- Migrated invoice delivery (individual and batch) from Infobip to Salesforce, adding email and SMS channels and decommissioning the legacy integration.
- Developed features across commercial, internet, and logistics Vue.js frontends — contract management, OTT provisioning flows, async RADIUS status, WFM scheduling, and field operations interfaces.
- Built voice channel monitoring system in Python/Flask tracking inbound/outbound calls and IVR interactions across all brand channels.
- Stack: Java, Spring Boot, Maven, Vue.js, Node.js, TypeScript, Python, Flask, PostgreSQL, MySQL, Redis, Docker, Kubernetes, GitLab CI, New Relic, Grafana, Sentry, AWS, GCP
LIGUE (acquired by Alloha Fibra) May 2022 – Jul. 2023 · 1 year 3 months Mid-level Full-stack Developer · Maringá, PR Multi-layer service platform (TDA) covering address transfers, payment agreements and installment flows — async queues, fiber coverage APIs.
- Built and maintained TDA — a multi-layer service platform (React frontend, Node.js BFF, features API) covering address transfers, payment agreements and installment flows.
- Implemented asynchronous queue management with Arena + Redis to process telecom service operations at scale.
- Developed a financial negotiation flow for overdue invoices in the customer portal hybrid mobile app.
- Built REST APIs integrated with the GeoGrid geographic system to determine fiber optic availability, installation costs and coverage by address.
- Contributed to Ares, a DDD-architecture API for voice operations and address transfers.
- Stack: Node.js, NestJS, React, Vue.js, Nuxt.js, TypeScript, PostgreSQL, Redis, Docker, Kubernetes
Kinebot Feb. 2022 – May 2022 · 4 months Junior Full-stack Developer · Curitiba, PR (remote) Web applications with Node.js, React, Redux and AWS.
- Developed features with Node.js, React, Redux and AWS (Lambda, S3, RDS).
GetHash Oct. 2021 – Feb. 2022 · 5 months Junior Full-stack Developer · São Paulo (remote) Solutions for multiple clients with Node.js, React, TypeScript — cloud infra with Docker, Kubernetes, DigitalOcean.
- Built solutions for multiple clients with Node.js, React, TypeScript and Next.js.
- Provisioned and maintained cloud infrastructure with DigitalOcean, Docker, Kubernetes and Rancher; implemented CI/CD pipelines.
- Led client meetings in Portuguese and English for expectation alignment and progress presentations.
Personal projects
PKMS (Personal Knowledge Management System) built to reduce cognitive load and externalize thinking into structured, retrievable notes. The system goes beyond capture: native Neovim integration for vault editing and navigation, custom Claude Code commands for knowledge management operations directly from the terminal, and cohesive styling of the entire environment (Obsidian, Neovim, terminal) with the same visual theme as Mate Creations. Automation pipeline: voice recording → Whisper transcription → structured notes; YouTube/article ingestion with AI summarization; git hooks generating contextual notes in the background. Transcription also applied to meeting recordings for automatic summary and action item generation.
Cross-application theme ecosystem (Obsidian, Neovim, VS Code, Zen Browser) with automated release pipeline via GitHub Actions. Two variants with automatic light/dark switching based on time via systemd.
Open-source security proxy for AI agents and MCP servers. Enforces per-agent policies: auth (API key, JWT/OIDC, mTLS), rate limiting, payload filtering, Human-in-the-Loop approval and audit log with CloudEvents support.
CLI that parses Java and Vue.js source code to generate dependency graphs and visual dev portals — maps service relationships, controller routes, and component trees across a multi-repo codebase.
Keyboard-first RSS reader and podcast player as a new tab replacement. Published on Firefox Add-ons. Also available as a terminal UI built with Ratatui.
Mobile HITL companion for AI coding agents. Python HTTP server intercepts Claude agent tool calls via pre-tool-use hook; native Android app (no Gradle) approves or denies from the notification shade. Long-poll architecture, no push infrastructure needed.
Firmware-style security lab console for Android. Module catalog for security research on owned and authorized devices — each module maps to a Termux script, results returned via Android broadcasts. Active modules: Wi-Fi recon (iproute2, bettercap).
Distributed dev platform across three nodes: Arch Linux (orchestration),
Android/Termux (LineageOS + root) and Kubernetes (k3s on Contabo). Go CLI
(deck) bridges all three. Three native Android apps: Field Console (ops),
Amphora Zero (security lab), Agent Code Buddy (mobile HITL). Full k8s setup:
cert-manager, Cloudflare DNS, Uptime Kuma, systemd backups.
Education
Skills
Certifications
AI & Engineering
- Introduction to LLMs and Prompt Engineering — LinkedIn / Pearson, Mar. 2026
- The Missing Semester of your CS Education — MIT, Feb. 2026
Entrepreneurship
- MIT 15.390 New Enterprises — MIT, Nov. 2025
- Startup Secrets — Harvard Innovation Labs, Jan. 2026
- How to Start a Startup — Y Combinator, Dec. 2025
Software Architecture
- Microservices-based Architecture — Full Cycle, Mar. 2025
- EDA - Event Driven Architecture — Full Cycle, Aug. 2024
- Hexagonal Architecture — Full Cycle, Aug. 2023
- Domain Driven Design (DDD) — Full Cycle, Aug. 2022
- SOLID — Full Cycle, Jul. 2022
- Software Architecture Fundamentals — Full Cycle, Jul. 2022
- Communication Between Systems — Full Cycle, Aug. 2023
- Event Storming — Full Cycle, Aug. 2022
- Authentication and Keycloak — Full Cycle, Mar. 2025
DevOps & Infrastructure
- Terraform — Full Cycle, Oct. 2023
- Kubernetes — Full Cycle, Mar. 2022
- Docker — Full Cycle, Feb. 2022
- Ansible — Full Cycle, Oct. 2022
- GitOps — Full Cycle, Sep. 2022
- Continuous Integration — Full Cycle, Jul. 2022
- API Gateway with Kong and Kubernetes — Full Cycle, Jan. 2023
- Service Mesh with Istio — Full Cycle, Jul. 2023
- GitOps Fundamentals — Codefresh, Apr. 2022
- Advanced Patterns and Techniques with Git and Github — Full Cycle, Feb. 2022
- Foundations of Git — GitKraken, Oct. 2022
Observability
- OpenTelemetry — Full Cycle, Nov. 2022
- Observability — Full Cycle, Mar. 2023
Apache Kafka & Messaging
- Apache Kafka — Full Cycle, Oct. 2023
- RabbitMQ — Full Cycle, Jul. 2022
Web & JavaScript Development
- NLW Expert — Node.js — Rocketseat, Feb. 2024
- TestJS Summit 2023 — GitNation, Dec. 2023
- React Summit US 2023 — GitNation, Nov. 2023
- Codecon 2023 / 2022 — Codecon
- Discover Especializar / Fundamentar / Conectar — Rocketseat, 2022
- TypeScript Full-stack — OneBitCode, Oct. 2021
Go
- Video Encoder Microservice with GoLang — Full Cycle, Nov. 2022
- Advanced Go / Getting Started with Go — School of Net, 2022
Web3 & Blockchain
- Bankless Circuit: The Future of DeFi — Bankless Brasil DAO, Sep. 2023
- How does Ethereum work? A deepdive — Metaschool, Aug. 2023
- The Web3 Rabbit Hole Course — Web3 Academy, Jul. 2023
- Intro to Push Protocol — Push Chain, Jul. 2023
Security
- Introduction to Pentesting in Practice — Desec Security, May 2022
- Cybersecurity Fundamentals — IBSEC, May 2022
- Cybersecurity Best Practices — IBSEC, Apr. 2022
Soft Skills & Leadership
- Smart Productivity — Escola Conquer, Feb. 2023
- Building Champions: Leadership F.C. — Escola Conquer, Jan. 2023
- Emotional Intelligence 2.0 — Escola Conquer, Apr. 2022
- Agile Mindset — wBrain, Mar. 2022
Languages
- English Certificate C2 Proficient — EF SET, Apr. 2022
Engenheiro de software backend com 4+ anos no maior ISP independente do Brasil, responsável por infraestrutura de plataforma em um stack distribuído de microsserviços Java/Spring Boot servindo milhões de clientes. Atua com ownership completo de features — levantamento de requisitos, alinhamento com stakeholders, refinamento técnico e implementação — sem suporte dedicado de PM. Liderou migrações cross-cutting, identificou e remediou proativamente uma violação crítica de LGPD expondo PII de clientes, e integrou sistemas de pagamento, CRM e operações de campo em escala. Constrói na fronteira de segurança para infraestrutura de IA com Arbitus (proxy MCP em Rust). Inglês C2.
Experiência
Alloha Fibra jul. 2023 – presente · 2 anos e 10 meses Engenheiro de Software Backend · São Paulo (remoto) Infraestrutura de plataforma em 8+ microsserviços Java/Spring Boot — migração JDBC, remediação de violação LGPD, avaliação arquitetural Java 17.
- Mantive e evoluí o
air-spring-boot-starter, biblioteca Java interna usada por todos os 8+ microsserviços — liderei migração JDBC zero-downtime (MySqlRepository → JdbcTemplate), corrigi bug de expansão de IN-list na camada compartilhada, coordenei rollout faseado via GMUDs. - Identifiquei e remedirei proativamente uma violação crítica de LGPD: 9 vetores de ataque expondo PII de clientes (senha, CPF, RG, nome) via endpoint não autenticado — implementei criptografia AES-256-GCM com rotação de chave zero-downtime, job de migração para 554k registros, em 3 microsserviços.
- Elaborei avaliação arquitetural para migração Java 8→17 + Spring Boot 1.5→3.x do serviço comercial principal — mapeei 301 arquivos, identifiquei blockers críticos, defini plano de 4 fases.
- Desenvolvi e mantive microsserviços Java/Spring Boot cobrindo operações comerciais, faturamento, CRM, telefonia, suporte ao cliente e gestão de dispositivos.
- Integrei gateway de pagamento CycloPay ao microsserviço financeiro, cobrindo geração de faturas e fluxos de reembolso.
- Integrei extração de sessões RADIUS via API
radius-reg, substituindo polling legado por dados precisos de sessão e causas de desconexão. - Integrei a plataforma CRM ao Salesforce para disparar automaticamente a Jornada de Boas-Vindas e Ativação, substituindo operações manuais.
- Migrei envio de faturas da Infobip para Salesforce, adicionando canais de e-mail e SMS e desativando a integração legada.
- Desenvolvi features nos frontends Vue.js comercial, internet e logística — gestão de contratos, fluxos de provisionamento OTT, status RADIUS assíncrono, agendamento WFM e interfaces de operações de campo.
- Construí sistema de monitoramento de canais de voz em Python/Flask rastreando chamadas inbound/outbound e interações IVR.
- Stack: Java, Spring Boot, Maven, Vue.js, Node.js, TypeScript, Python, Flask, PostgreSQL, MySQL, Redis, Docker, Kubernetes, GitLab CI, New Relic, Grafana, Sentry, AWS, GCP
LIGUE (adquirida pela Alloha Fibra) mai. 2022 – jul. 2023 · 1 ano e 3 meses Mid-level Full-stack Developer · Maringá, PR Plataforma TDA multi-camada cobrindo transferências de endereço, acordos de pagamento e parcelamento — filas assíncronas, APIs de cobertura de fibra.
- Construí e mantive o TDA — plataforma de atendimento multi-camada (frontend React, BFF Node.js, API de funcionalidades) cobrindo transferências de endereço, acordos de pagamento e fluxos de parcelamento.
- Implementei gerenciamento de filas assíncronas com Arena + Redis para processar operações de serviço de telecom em escala.
- Desenvolvi fluxo de negociação financeira para faturas em atraso no app híbrido mobile do portal do cliente.
- Construí APIs REST integradas ao sistema geográfico GeoGrid para determinar disponibilidade de fibra óptica, custos de instalação e cobertura por endereço.
- Contribuí para o Ares, API com arquitetura DDD para operações de voz e transferência de endereços.
- Stack: Node.js, NestJS, React, Vue.js, Nuxt.js, TypeScript, PostgreSQL, Redis, Docker, Kubernetes
Kinebot fev. 2022 – mai. 2022 · 4 meses Junior Full-stack Developer · Curitiba, PR (remoto) Aplicações web com Node.js, React, Redux e AWS.
- Desenvolvi features com Node.js, React, Redux e AWS (Lambda, S3, RDS).
GetHash out. 2021 – fev. 2022 · 5 meses Junior Full-stack Developer · São Paulo (remoto) Soluções para múltiplos clientes com Node.js, React, TypeScript — infraestrutura com Docker, Kubernetes e DigitalOcean.
- Construí soluções para múltiplos clientes com Node.js, React, TypeScript e Next.js.
- Provisionei e mantive infraestrutura em nuvem com DigitalOcean, Docker, Kubernetes e Rancher; implementei pipelines de CI/CD.
- Conduzi reuniões com clientes em português e inglês para alinhamento de expectativas e apresentação de progresso.
Projetos pessoais
PKMS (Personal Knowledge Management System) construído para reduzir carga cognitiva e externalizar o pensamento em notas estruturadas e recuperáveis. O sistema vai além da captura: integração nativa com Neovim para edição e navegação do vault, comandos customizados no Claude Code para operações de knowledge management diretamente do terminal, e estilização coesa de todo o ambiente (Obsidian, Neovim, terminal) com o mesmo tema visual do Mate Creations. Pipeline de automação: gravação de voz → transcrição via Whisper → notas estruturadas; ingestão de YouTube/artigos com sumarização por IA; git hooks gerando notas contextuais em background. Transcrição também aplicada a gravações de reuniões para geração automática de resumos e action items.
Ecossistema de temas cross-application (Obsidian, Neovim, VS Code, Zen Browser) com pipeline de release automatizado via GitHub Actions. Duas variantes com alternância automática claro/escuro baseada em horário via systemd.
Proxy de segurança open-source para agentes de IA e servidores MCP. Aplica políticas por agente: autenticação (API key, JWT/OIDC, mTLS), rate limiting, filtragem de payload, aprovação Human-in-the-Loop e auditoria com suporte a CloudEvents.
CLI que parseia código Java e Vue.js para gerar grafos de dependência e portais de dev visuais — mapeia relacionamentos entre serviços, rotas de controllers e árvores de componentes em um codebase multi-repo.
Leitor RSS e podcast player keyboard-first como substituto da nova aba. Publicado no Firefox Add-ons. Também disponível como TUI construída com Ratatui.
Companion mobile de HITL para agentes de IA. Servidor Python intercepta tool calls de agentes Claude via hook de pre-tool-use; app Android nativo (sem Gradle) aprova ou nega da aba de notificações. Arquitetura long-poll, sem infra de push.
Console de lab de segurança estilo firmware para Android. Catálogo de módulos para pesquisa de segurança em dispositivos próprios e autorizados — cada módulo mapeia para script Termux, resultados via broadcasts Android. Módulos ativos: recon Wi-Fi (iproute2, bettercap).
Plataforma distribuída em três nós: Arch Linux (orquestração), Android/Termux (LineageOS + root) e Kubernetes (k3s no Contabo). CLI Go (deck) conecta os três. Três apps Android nativos: Field Console (ops), Amphora Zero (lab de segurança), Agent Code Buddy (HITL mobile). K8s completo: cert-manager, Cloudflare DNS, Uptime Kuma, backups systemd.
Formação
Competências
Certificações
IA & Engenharia
- Introduction to LLMs and Prompt Engineering — LinkedIn / Pearson, mar. 2026
- The Missing Semester of your CS Education — MIT, fev. 2026
Empreendedorismo
- MIT 15.390 New Enterprises — MIT, nov. 2025
- Startup Secrets — Harvard Innovation Labs, jan. 2026
- How to Start a Startup — Y Combinator, dez. 2025
Arquitetura de Software
- Arquitetura baseada em microsserviços — Full Cycle, mar. 2025
- EDA - Event Driven Architecture — Full Cycle, ago. 2024
- Arquitetura Hexagonal — Full Cycle, ago. 2023
- Domain Driven Design (DDD) — Full Cycle, ago. 2022
- SOLID — Full Cycle, jul. 2022
- Fundamentos da arquitetura de software — Full Cycle, jul. 2022
- Comunicação entre sistemas — Full Cycle, ago. 2023
- Event Storming — Full Cycle, ago. 2022
- Autenticação e Keycloak — Full Cycle, mar. 2025
DevOps & Infraestrutura
- Terraform — Full Cycle, out. 2023
- Kubernetes — Full Cycle, mar. 2022
- Docker — Full Cycle, fev. 2022
- Ansible — Full Cycle, out. 2022
- GitOps — Full Cycle, set. 2022
- Integração Contínua — Full Cycle, jul. 2022
- API Gateway com Kong e Kubernetes — Full Cycle, jan. 2023
- Service Mesh com Istio — Full Cycle, jul. 2023
- GitOps Fundamentals — Codefresh, abr. 2022
- Padrões e técnicas avançadas com Git e Github — Full Cycle, fev. 2022
- Foundations of Git — GitKraken, out. 2022
Observabilidade
- OpenTelemetry — Full Cycle, nov. 2022
- Observabilidade — Full Cycle, mar. 2023
Apache Kafka & Mensageria
- Apache Kafka — Full Cycle, out. 2023
- RabbitMQ — Full Cycle, jul. 2022
Desenvolvimento Web & JavaScript
- NLW Expert — Node.js — Rocketseat, fev. 2024
- TestJS Summit 2023 — GitNation, dez. 2023
- React Summit US 2023 — GitNation, nov. 2023
- Codecon 2023 / 2022 — Codecon
- Discover Especializar / Fundamentar / Conectar — Rocketseat, 2022
- TypeScript Full-stack — OneBitCode, out. 2021
Go
- Microsserviço de Encoder de Vídeo com GoLang — Full Cycle, nov. 2022
- Avançando com Go / Iniciando com Go — School of Net, 2022
Web3 & Blockchain
- Circuito Bankless: O Futuro do DeFi — Bankless Brasil DAO, set. 2023
- How does Ethereum work? A deepdive — Metaschool, ago. 2023
- The Web3 Rabbit Hole Course — Web3 Academy, jul. 2023
- Intro to Push Protocol — Push Chain, jul. 2023
Segurança
- Introdução ao Pentest na Prática — Desec Security, mai. 2022
- Fundamentos em Cibersegurança — IBSEC, mai. 2022
- Boas práticas de cibersegurança — IBSEC, abr. 2022
Soft Skills & Liderança
- Produtividade Inteligente — Escola Conquer, fev. 2023
- Formando Campeões: Liderança F.C. — Escola Conquer, jan. 2023
- Inteligência Emocional 2.0 — Escola Conquer, abr. 2022
- Mindset Ágil — wBrain, mar. 2022
Idiomas
- English Certificate C2 Proficient — EF SET, abr. 2022