Rafael Ferreira

I work as a Senior Azure Platform Engineer in a global Cloud & DevOps team focused on Enterprise-scale Azure platforms and Platform Engineering. I contribute to the design and evolution of a secure, scalable, and automated cloud platform, enabling multiple engineering teams to provision and operate cloud workloads in a standardized, efficient, and secure way. • Design and implement Enterprise-scale Azure infrastructure using Terraform (Infrastructure as Code), enabling standardized and reusable environments. • Build, maintain and optimize CI/CD pipelines using GitHub Actions, enabling automated deployments across multiple environments. • Drive the evolution of Azure Landing Zones and governance frameworks, including policy enforcement and environment standardization. • Operate and optimize AKS-based Kubernetes platforms, implementing GitOps practices with ArgoCD and Helm to support scalable microservices architectures. • Implement observability and monitoring solutions using Prometheus, Alertmanager, Thanos and Grafana, ensuring platform reliability and proactive incident detection. • Define and implement FinOps and cloud cost optimization strategies, identifying unused and oversized resources and improving operational efficiency. • Lead self-service automation initiatives, reducing manual operations and improving engineering productivity. • Design and implement automation solutions using Python, Bash and PowerShell, leveraging AI tools to accelerate development and reduce manual tasks. • Drive Cloud Governance and DevSecOps practices, collaborating with Architecture, Engineering and Data teams to define technical solutions and evolve the platform while promoting Azure and DevOps best practices and continuous improvements in reliability and scalability.

I work within a global platform engineering team focused on Platform as a Product, operating in one of the largest Microsoft environments at a global scale. I am currently assigned to a multinational client in the auditing industry (Big Four), operating within a highly complex, enterprise-scale ecosystem. I am responsible for driving the evolution, maintenance, and governance of a robust and highly standardized platform, built on Azure Cloud’s PaaS and Serverless solutions, supporting globally distributed technical teams. My role ensures continuous operational excellence, compliance, and adherence to best practices in Cloud Governance and Cloud Security. My core activities include infrastructure development and management using Infrastructure as Code (IaC) with Bicep, ensuring scalability, immutability, and consistency. I design, optimize, and maintain CI/CD pipelines using GitHub Actions, facilitating agile, secure, and automated deployments from development through production. Additionally, I define and implement guardrails and corporate policies using Azure Policy, RBAC, and Azure Blueprints, enabling automated governance, continuous compliance, and risk mitigation. I automate operational and administrative tasks using PowerShell scripts and Azure CLI to increase efficiency and minimize human errors. Furthermore, I manage complex enterprise network infrastructure, including VNets, NSGs, VPNs, Application Gateways, Azure Front Door, Private DNS, and Private Endpoints. I also lead Cloud Cost Optimization (FinOps) initiatives focused on ongoing resource optimization and operational cost reduction.

Atuei em um ambiente enterprise para um cliente global líder em food service, presente em mais de 90 países, por meio de uma empresa de consultoria, being responsible for building and automating scalable and highly available infrastructures on the Azure cloud, supporting the migration of services from the on-premise environment, which will later be modernized into containerized microservices. In an environment with over 1,200 VMs and more than 50 clusters distributed across more than 100 subscriptions, Azure Landing Zones and a Hub-Spoke network are used to ensure high availability both in the cloud and in a hybrid environment (on-premise) with Azure Arc. For the deployment and updating of infrastructures, Terraform is used as IaC (Infrastructure as Code), ensuring the consistency and reliability of configurations. CI/CD pipelines with GitHub Actions are used to automate deployments, guaranteeing the efficiency and quality of releases, with post-deployment tasks handled by Jenkins. Configuration management of Linux machines is performed using Puppet. In the context of AKS (Azure Kubernetes Service), GitOps with FluxCD is used for deploying components in clusters, and Helm Charts are developed to facilitate and standardize application deployment. Monitoring and observability of the environment are conducted using Grafana, Prometheus, and Splunk. I update modules and component codes in GitHub and Bitbucket repositories to maintain the integrity and accuracy of information. I conduct Proofs of Concept (PoCs) to evaluate new technologies and solutions, proposing continuous improvements and adopting the best market tools, including FinOps practices, to optimize costs and efficiency in the cloud environment.

Faced with the challenge of restructuring the Azure Cloud environment at enterprise scale for one of the largest global telecommunications companies, with a focus on scalability, operational efficiency, and security. I conducted detailed analyses for the standardization of reference architectures and acted as a strategic consultant in the development of documentation for migrating applications to the cloud, based on designs of landing zone architectures and hub-spoke networks, with the aid of frameworks such as the Cloud Adoption Framework (CAF) and Well-Architected, it was possible to enable robust architectures. I prepared technical documentation, guided the choice of resources, and strategic backlog decisions. Implemented FinOps practices to balance performance vs. costs. I contributed to the creation of a platform to standardize and optimize the developer experience (DevEx), integrating tools like Backstage to build product catalogs, resource provisioning with Terraform in Azure DevOps CI/CD pipelines, ensuring a continuous and automated delivery process. My actions resulted in significant improvements in scalability, security, and governance, driving growth and innovation, and reinforcing the resilience of the systems. Additionally, I strengthened the DevOps culture and the adoption of agile methodologies, improving the adaptability and delivery speed of teams in response to market changes.

I was part of the team responsible for the cloud transformation of one of the largest global beverage companies, with the challenge of enhancing user experience in Azure environments while maximizing operational efficiency. Responsible for planning and implementing solutions aligned with business objectives, with a special focus on cost optimization through FinOps and efficient resource management. Provisioned new resources using Terraform and Terragrunt in CI/CD pipelines with Azure DevOps and developed process automation with PowerShell and Python scripts. Implemented Azure Workbooks to provide detailed insights into FinOps and cost optimization (orphaned resources, disproportionate resource sizes), which were important for stakeholders' decision-making regarding resource management. My initiatives contributed to significant annual savings of over $5 million, optimizing cloud investments and significantly enhancing resource management and team collaboration.

I joined the operations team in charge of the Azure cloud environment, serving over 100 million active users. Tasked with planning high-availability solutions and implementing industry best practices to ensure resilience, security, and performance of resources, focusing on DevOps, including services like Azure Kubernetes, VMs, and tools such as Jenkins, Nexus, and Sonarqube. I developed security strategies by conducting vulnerability analyses to protect the environment. Participated in crisis situations and cloud scenario planning for structuring, migration, and pricing. Monitored and observed applications, microservices, and servers using Prometheus, Zabbix, Grafana, and log analysis with Elasticsearch. I implemented Azure Kubernetes Services, VMs, Application Gateways, and API Management, among others, promoting DevOps practices. My contributions led to improvements in security, performance, and resilience of the Azure cloud environment, ensuring stability for a large user base.

I was part of an international team at one of the largest global companies in the agricultural sector, collaborating with professionals from several countries in the administration, maintenance, and improvement of the global On-Premises and Azure Cloud infrastructure. Responsible for troubleshooting high-availability clusters, involving technologies such as Windows Server (AD, File Server, DHCP, DNS), SQL Server, virtualization (VMware, Hyper-V), as well as server monitoring with advanced tools and management of Microsoft Azure and Office 365. I performed security reviews and process automation with PowerShell and Terraform scripts, adapting to various cultures and working methodologies to ensure the efficiency and effectiveness of implemented solutions. The international collaboration enriched my project experience, resulting in a more resilient, secure, and efficient infrastructure, improving environment management and operations through interaction between teams from different cultures.

I was tasked with leading migration and replication projects of Windows on-premises servers to the Microsoft Azure Cloud, tackling the challenge of modernizing the infrastructure for small and medium-sized clients. Responsible for conducting complex migrations using S2S VPN, DFS replication between servers, migration to SharePoint, and comprehensive virtual environment provisioning. I led File Server migrations to the cloud, leveraging Azure File Sync for optimized file sharing and synchronization. Provisioned virtual environments, including VMs, Azure SQL, storage accounts, virtual and backup vaults, and executed "Lift and Shift" migrations with Azure Site Recovery. Managed the Microsoft 365 Admin Portal and Microsoft Endpoint Manager (Microsoft Intune), enhancing device protection and management in the cloud, and improved Azure Active Directory with conditional access policies, with or without hybrid identities. My actions ensured a secure cloud transition, establishing a more optimized, secure, and efficient Azure infrastructure, strengthening the organization's operational capacity in the cloud environment.

I provided level 3 remote and onsite support for Sesi/Senai users, handling various incidents and requests. I was responsible for diagnosing and resolving issues across the entire network infrastructure (WAN, LAN, Wi-Fi, TCP/IP), servers (AD, DNS, DHCP, Hyper-V), network devices (switches, access points, routers, firewalls), and peripherals. Network and server troubleshooting ensured operational continuity. Installed and configured Windows operating systems and Windows Servers, enhancing infrastructure. Consulted on optimizing system and equipment use, improving user efficiency. By directly engaging with end-users and applying ITIL best practices, I efficiently resolved tickets within agreed SLAs, enhancing user satisfaction and optimizing IT resources.

I addressed incidents and requests from Sesi/Senai users, providing level 3 remote and on-site support. I was tasked with diagnosing and resolving issues in the network infrastructure (WAN, LAN, Wi-Fi, TCP/IP), servers (AD, DNS, DHCP, Hyper-V), network devices (switches, access points, routers, firewalls), and peripherals, along with installing and configuring Windows operating systems. I conducted diagnostics and solved network and server problems to ensure operational continuity, installed and configured Windows operating systems, and offered consultancy to optimize the use of systems and equipment. Using ITIL best practices, I efficiently resolved tickets, adhering to agreed SLAs. My efforts ensured effective ticket resolution, enhancing user satisfaction and optimizing IT resources, while maintaining a stable and secure IT infrastructure.

I was responsible for monitoring, maintaining, and developing automations and their databases (MySQL and SQL Server), using Java and Python on Linux and Windows operating systems. My contribution led to the optimization of internal processes and strengthened the company's IT automations with effective solutions.