Ulysses Costa

Currently I'm leading and orchestrating mission-critical cloud transformation programs with strategic projects with our awesome team: 🔹 Enterprise-Wide Infrastructure Automation Leading migration of legacy deployment workflows to Atlantis.io-powered pipelines (Terraform), ArgoCD (Kubernetes) and Sempahore (automated tasks), establishing standardized CI/CD processes across 50+ cloud accounts and championing organization-wide Terraform standardization as a critical component of our enterprise platform engineering vision. 🔹 Governance Framework Modernization Modernizing multi-cloud governance models with embedded FinOps/SecOps guardrails across AWS/Azure/Huawei Cloud environments. 🔹 Multi-Cloud Resilience Architecture Architecting an hybrid infrastructure framework at AWS/Azure/Huawei Cloud environments, aiming to reach 99.97% system uptime SLAs. 🔹 DevOps Culture Transformation 💎 Strategic Achievements 🔹 Large-Scale Cloud Migration Leadership ✓ Directed overnight migration of 750+ production servers from Equinix SP2/RJ2 datacenters to Microsoft Azure with low downtime, enabling decommissioning of $4M+ in EOL hardware (80% aged >5 years). ✓ Migrated 5 analytics platforms from AWS/Azure to Huawei Cloud achieving 40% cost savings. 🔹 Enterprise Infrastructure Modernization ✓ Multi-Cloud Framework Design: Built Huawei/Azure/AWS foundation with unified tagging & resource policies. 🔹 Security & Compliance Excellence ✓ Designed decoupled load balancing/WAF architecture ✓ Established vendor-neutral security policies with an edge border solution ✓ Protected 120+ customer portals with WAF integration 🔹 DevOps Culture Transformation ✓ Introduced Agile/OKR frameworks across 3 teams, reducing cycle time by 25%. 🔹 Asynchronous Collaboration Framework ✓ Reduced meetings by 40%, improving focus time for engineers work. ✓ Built dashboards integrating to visualize score productivity, metrics and KPIs, implementing async OKR follow-ups.

Terraform | Security | Public Cloud | Networking | Infrastructure as Code | Infrastructure Architecture | Azure | AWS | GCP 🔹Pioneered IaC Adoption ✓ Championed Terraform-driven infrastructure culture by creating modular plans for DNS (Route53/Azure DNS), security groups/firewalls (AWS Security Hub + Azure NSGs), and site-to-cloud VPNs – reduced deployment errors by 60% and accelerated provisioning from days to hours. 🔹Hybrid Cloud Networking ✓ Designed Azure ExpressRoute connectivity between Equinix SP2 (São Paulo) and Azure East US 2 using PTT BGP communities for route prioritization – reduced cross-platform latency by 40% for 500+ global users. 🔹High-Speed Core Upgrades ✓ Modernized spine-leaf architecture with HP 5900+ switches/VXLAN-EVPN protocols – boosted inter-DC throughput from 40G →80Gbps, enabling real-time analytics for 50TB/day data pipelines. 🔹 Cryptographic Security Overhaul ✓ Upgraded Dinamo Networks HSM clusters across São Paulo and Rio de Janeiro environments – achieved compliance with customers private keys signing at Sefaz Brasil invoice with APIs processing. 🔹Cloud Migration Leadership ✓ Migrated Joinville/Chicago/Sterling legacy datacenters (~250 servers) to Microsoft Azure via Terraform IaC templates – with zero service disruptions.

Security infrastructure, infra as code, networking and integration architeture. 🔹 Modernized Security Infrastructure ✓ Upgraded end-of-life Checkpoint firewalls (SPLAT 77.10) at Washington and Telefonica Barueri datacenters security gateways and to R80.40 Gaia OS with zero downtime, resolving 15+ CVEs and improving threat prevention by 35% and security throughput to 20 Gbps. 🔹Cloud & Disaster Recovery Architecture ✓ Built Neogrid’s first disaster recovery (DR) datacenter in Joinville (Avato), reducing RTO by 70% via automated failover testing. ✓ Migrated DR operations to Equinix RJ2 (Rio de Janeiro) using VMware SRM automations, cutting latency between São Paulo/Rio clusters by 50% and the RTO to 4 hours. 🔹Large-Scale DC Migration ✓ Relocated 100% of production environments from Telefônica CIS Barueri to Equinix SP2 (São Paulo), consolidating 200+ physical servers into a new infrastructure with 40% lower OPEX. 🔹Secure Remote Access ✓ Deployed OpenVPN/pfSense road warrior VPN for 100+ remote users, reducing problems with loss of connection to 60%. 🔹WAN Optimization ✓ Engineered a public ASN (AS265235) multi-homed network with BGP load balancing across 5 ISPs (10 Gbps total), achieving 99.999% uptime for SAP/ERP systems. 🔹Core Network Overhaul ✓ Architected L3 HP 5900 switching fabric connecting SP2/RJ2 datacenters via VXLAN-EVPN, boosting inter-site and VMware enclosure throughput to 40 Gbps.

Managed backbone IP infrastructure for Oi Telecom (Brazil’s largest carrier), supporting 3,000+ network devices across Rio Grande do Sul state. ✓ Optimized multi-vendor environments (50+ hardware vendors) including Cisco routers/switches and Alcatel-Lucent/NEC and Huawei SDH/ATM platforms. ✓ Reduced network downtime by 25% through proactive monitoring of TCP/IP/MPLS protocols and rapid troubleshooting of Layer 2/3 issues. ✓ Automated routine tasks using Perl scripting for Unix-based systems to improve workflow efficiency by 30%. ✓ Spearheaded Huawei GPON deployment – the first fiber-to-the-home (FTTH) initiative in Rio Grande do Sul – expanding broadband coverage to 15k+ households.

Worked as solution consultant for IBM Lotus, Content Manager & Rational produtcs, implementing and managing several in-house clients and performing security assessments with IBM Appscan. ✓ Deployed IBM Lotus Notes/Domino collaboration tools for enterprise clients across Brazil’s retail and financial sector (serving 15+ corporate clients). ✓ Conducted security audits using IBM AppScan for critical infrastructure like Content Manager databases and Rational development environments. ✓ Reduced client vulnerabilities by 40% through firewall rule optimization and Linux/Windows Server hardening practices. ✓ Improved the company's internal infrastructure with DNS, Microsoft Active Directory, E-mail services, Firewall and Network total refactoring, bringing to another level of maturity.

Worked as networking analyst inside the Brazil's biggest telecom carrier company at that time. ✓ Supported core management IP networks for Brazil’s largest telecom carrier Oi/Telemar (former Brasil Telecom), ensuring 99.99% uptime. ✓ Streamlined routing protocols (OSPF/BGP/EIGRP) across enterprise scale multivendor devices to improve data center and telecom stations interconnect performance by 20%. ✓ Designed shell/Python scripts to automate network health checks for critical systems ✓ Managed 150+ mission-critical Solaris servers hosting billing platforms and mobile switching centers (MSCs) for 2M+ subscribers.