Douglas Costa

- International Executive Oversight: Direct the Cloud and Runtime Security departments, spearheading the strategic protection of a global financial ecosystem serving 120M+ customers. - Regulatory Authority (BR, MX, CO, US): Accountable leader for international cloud governance, ensuring strict adherence to PCI-DSS, SOX, and SOC 2 requirements across multi-cloud environments. Serve as the primary technical liaison for cloud security regulatory matters across all operating regions. - Strategic Global Leadership: Lead two specialized engineering teams (10+ reports), defining a security architecture that supports hyper-growth while maintaining continuous audit readiness. Vendor Management: Lead technical stakeholder for global cloud providers, managing infrastructure budgets and optimizing global SLAs. - Vendor Management: Lead technical stakeholder for global cloud providers, managing infrastructure budgets and optimizing global SLAs.

Tech manager of the Cloud Security, API Security, and Network Security teams, ensuring the security and resilience of Nubank’s platforms and internal infrastructure. • Cloud Security: governance and protection of workloads across multi-cloud environments (AWS, GCP). • API Security: safeguarding runtime platforms with protections for APIs and services. • Network Security: implementing the Zero Trust model for internal users and ensuring security across the network layer for both services and employees. Driving innovation, reliability, and trust to support Nubank’s hyper-growth.

Member of initiative do support hyper-growth from Nubank infrastructure to start to be a Global company with high scalability, security and availability. - Project: Hyper-growth - Abstract: We start to development internal concepts to allow different teams to provide infrastructure in an easy way, to deploy a global infra using different cloud providers and regions to allow low latency and efficiency. To hit this target, we development different automatic tools to manage accounts lifecycle. - Main tools: Terraform (AWS, Azure, GCP and Oracle Cloud), AWS Stacksets, Kubernetes (EKS/GKE), Github Actions, Tekton - Project: Security Baseline - Abstract: As a member of security, we create a basic baseline to always be implemented in different cloud providers to ensure this initial layer of security ensuring the visibility to security team and implement ways to ensure controls in account and projects. - Main Tools: AWS Security Hub, AWS Config, AWS Shield Advanced, AWS GuardDuty, GCP Security Command Center (SCC). - Project: Multi-account - Abstract: To increase the power of Nu products, we start to implement a multi-account strategy in Nubank, following the best practices in each provider following by global engineer team to ensure the best efficiency. To that, we implement a more granular billing process at Google Cloud, for example, and Landing Zone concept in AWS, creating specific service account. - Main Tools: Terraform, Clojure, GCP, AWS, Azure, OCI - Project: Cloud Network - Abstract: Review all network aspects to ensure a high availability and security controls in network layer in different cloud providers. - Main Tools: Transit Gateway, Direct Connect, WAF

Globo (https://globo.com) is the largest media company in Brazil and one of the largest in the world. Its mains products consist of an online news platform, a large presence on open television with live transmissions via internet of several live events and many other products with large presence into Brasilian culture. I had the opportunity to participate in incredible projects, the main being: - Project: Cloud Foundation - Main Tools: Cloudformation, Terraform, Python, Serverless, Lambda, Golang, NodeJS, GCP, Azure, AWS. - Abstract: Integration and availability of the main clouds to be used by internal products. I participated directly in the definitions of networks, VPNs, DNS, Authentications and automations in all process to make account available. The definitions of best practices and instructions for internal use have been write based on this whole process called Cloud Foundation. - Project: Disaster Recovery - Main Tools: Kubernetes, Tsuru (PAAS), Cloudformation, Terraform, GCP, AWS, Azure, Python. - Abstract: Structuring the plan and technical definitions for action for cloud-based disaster recovery. - Project: Kubernets as a Service - Main Tools: Kubernetes, Rancher, Golang, ArgoCD. - Abstract: With the intense use of 3 principals public clouds (AWS, GCP and Azure) and On Premise environment, it was necessary to structure a more unitary administration of Kubernetes Clusters to manage security policies, and best practices. The project use Rancher as the main tool for orchestration and keep all clusters compliance with company rules, in addition to ArgoCD as the main tool for GitOps. - Common Tools: All systems are based on Linux. To automate all Continuou Delivery and Integration process, we use Gitlab-CI, i have some projects with Github Action and Azure DevOps with external experiences too. I'm using Terraform and Ansible in normal cases like deployment tools with ~5 years of experience in each. More project, in Linkedin project area!

- Project: Log aggregator - Abstract: Aggregate all application logs for both sides, infrastructure and product, to facilitate the identification of errors and performance to operations teams. In addition, to serving as a large database for future implementations of AiOPs. Starting with Graylog and Elasticsearch and in middle of the time changed to full ELK stack. The project it’s implemented with success managing 10TB of data per day with more than 700.000 messages per second. - Main Tools: Graylog, Elasticsearch, MongoDB, Kibana, Logstash.

Startup with culture and incredible people, is the summary of Hurb. An online travel agency with employees who are fanatical about growing the company together is their biggest goal. I started working like a Helpdesk guy and the company gave me the opportunity to evolve into the DevOps area. Was a major and incredible transformation and has made it possible for me to be involved in many different projects. Look my LinkedIn project area to check specific tools and my experiences!