Seeking a long-term remote or global opportunity in Cloud Architecture, DevSecOps, or SRE, where I can leverage my 20 years of IT experience to design secure, scalable, and resilient cloud solutions. I value innovation, automation, continuous improvement, and collaborative teams, with opportunities to contribute strategically, solve complex technical challenges, and grow professionally.

Alan Goncalves Borges
@borgesalan
I'm a Senior Cloud & DevSecOps Engineer working at the intersection of DevSecOps, SRE and Cloud Security.
What I'm looking for
I join engineering teams to leave platforms better than I found them: faster releases, lower cloud costs, fewer recurring incidents, and integrated security, not improvised. Standardized CI/CD, infrastructure as code, SLO-driven reliability, and governance aligned to CIS, OWASP, NIST and Well-Architected standards, and teams stay self-sufficient through documentation.
My background spans 12+ years across AWS, Azure, GCP and OCI, from on-premises VMware estates to multicloud platforms. I specialize in turning delivery into governed platforms: standardized CI/CD, Terraform-based IaC, AppSec gates on every build, centralized secrets, tokens and sensitive data, edge protection and SLO-driven observability.
The outcomes I repeat in every engagement: faster pipeline setup, fewer critical vulnerabilities, zero secrets exposure, faster incident detection and lower cloud coat. My path includes reliability engineering for customer-experience platforms at Santander, full-lifecycle DevSecOps for a national bank at NAVA, and Blue Team cloud security at Natura &Co - plus DXC, SKY and Tidexa across VMware, OCI and multicloud estates.
A self-directed learner by habit, keeping knowledge current and applying AI-assisted development in daily delivery.I deliver standardization over bureaucracy: every change passes automated quality and security checks before production, and security evidence comes out as a natural side effect of delivery.
What I do best:
• CI/CD & Platform Engineering: Azure DevOps, GitLab CI, Jenkins, GitHub Actions, reusable templates, GitFlow
• Infrastructure as Code: Terraform (intelligent modules), Ansible, environment versioning
• DevSecOps & AppSec: shift-left: Veracode SAST/SCA, SonarQube, Fortify, Checkov, secret scanning, OWASP Top 10 / API Top 10
• Containers & Kubernetes: AKS/EKS, OpenShift, Docker, Helm, admission policy, CIS hardening, least-privilege RBAC
• SRE: SLOs, error budgets, RCA/postmortems, toil automation, chaos engineering
• Cloud Security: IAM least privilege, Zero Trust, policy as code, Key Vault, CSPM/CNAPP, CrowdStrike
• Observability & FinOps: Datadog, Grafana, Dynatrace, Splunk, ELK, SLO-based alerting, rightsizing (−30% cost)
Experience
Work history, roles, and key accomplishments
DevSecOps Consultant
FTD Educação (Grupo Marista)
May 2024 - Aug 2026 (2 years 3 months)
Redesigned CI/CD for 30+ microservices with standardized Azure DevOps YAML templates, cutting pipeline configuration time by 40%. Built cross-cloud IaC using Terraform modules, integrated Veracode SAST/SCA, and implemented observability and governance frameworks.
IT Engineer Specialist – CXRE Platform
Santander - F1rst Digital Services
May 2023 - Feb 2024 (9 months)
Led infrastructure and systems resilience (SRE) initiatives across AWS and Azure, designing SLIs/SLOs/Error Budgets for critical services. Standardized RCA practices and worked with Dynatrace, Splunk, Grafana, ELK, Kubernetes, Terraform, and Ansible.
DevSecOps Engineer
NAVA - Technology for Business
Aug 2022 - Mar 2023 (7 months)
Led DevSecOps pipeline implementation for a major national bank's cloud modernization journey. Standardized GitFlow versioning and Quality Gates with SonarQube and Fortify, and automated test execution and validation at scale.
Cloud Cybersecurity Blue Team
Natura &Co
Sep 2021 - Aug 2022 (11 months)
Operated cloud security blue-team functions across AWS, Azure, OCI, and GCP, including risk management and threat monitoring. Built Lambda-based auto-remediation pipelines and continuous compliance scanning with Prowler.
Cloud DevOps Specialist
SKY Brazil
Jun 2021 - Sep 2021 (3 months)
Served on the Infrastructure Committee, driving cloud best-practice adoption. Migrated on-demand workloads to OCI using GitLab, Jenkins, Ansible, Terraform, and Kubernetes/Helm.
Cloud DevOps Specialist
TIDEXA Software / WeConnect Group
Mar 2020 - May 2021 (1 year 2 months)
Replaced manual setup with standardized installation scripts and documentation, reducing client-reported configuration tickets. Introduced Infrastructure as Code across multicloud and on-prem environments, and improved security posture.
Application & Infrastructure Architect
Central IT - Corporate Governance
Jun 2019 - Dec 2019 (6 months)
Architected Hyper-V virtualized environments hosting Citsmart ITSM, JBoss/WildFly, and PostgreSQL/MariaDB. Implemented vulnerability assessments, penetration testing, and introduced Docker-based containerization and monitoring.
Senior IT Analyst – GIS (ASURIS Outsourcing)
CSC Computer Science Corporation / DXC Technology
Sep 2015 - May 2019 (3 years 8 months)
Administered on-premises and cloud infrastructure on the Midrange Engineering team, applying ITIL processes. Automated Disaster Recovery test procedures, cutting the required DR team from ~20 to fewer than 5 people.
Senior IT Support Analyst (NOC)
MSTech Education & Technology
Mar 2015 - Sep 2015 (6 months)
Provided senior-level IT support in a NOC environment, handling network administration and infrastructure support.
Junior IT Support Analyst
Integrasis
Mar 2014 - Jan 2015 (10 months)
Provided junior-level IT support, assisting with infrastructure and technical issues.
Technical Support Level 1
Penso Technology
Jul 2013 - Feb 2014 (7 months)
Provided first-level technical support to customers.
IT Support Assistant
Top Therm
Mar 2012 - Jun 2013 (1 year 3 months)
Assisted with IT support tasks and infrastructure maintenance.
Support Analyst Level 1
All Net Group
Jul 2011 - Oct 2011 (3 months)
Provided first-level support and assistance to users.
Technical Support
Rhealeza IT Services
Jan 2011 - May 2011 (4 months)
Provided technical support services.
Trainee Support Analyst
Cody Consultancy
Sep 2010 - Jan 2011 (4 months)
Trainee support analyst role, assisting with IT support tasks.
Technical Support Level 2 – Service Desk Telefonica LATAM
Atento Brazil
Mar 2009 - Sep 2010 (1 year 6 months)
Provided second-level technical support for Telefonica LATAM service desk.
Education
Degrees, certifications, and relevant coursework
FullCycle College of Technology
AI for Devs Immersion Course, Artificial Intelligence
2026 -
AI for Devs Immersion Course, ongoing as of 2026.
AWS
AWS Certified Solutions Architect – Associate, Cloud Architecture
2024 - 2027
AWS Certified Solutions Architect – Associate (SAA-C03) certification, valid from 2024 to 2027.
Microlins
Computer & Network Installation, Computer & Network Installation
2005 -
Computer & Network Installation course, completed in 2005.
AWS
Containers on AWS (Technical), Containers
2023 -
AWS Containers on AWS (Technical) course, completed in 2023.
(ISC)²
Official (ISC)² Certified in Cybersecurity (CC) Self-Paced Training, Cybersecurity
2022 -
Official (ISC)² Certified in Cybersecurity (CC) Self-Paced Training, completed in 2022.
Microsoft
AZ-900 Microsoft Certified - Azure Fundamentals, Cloud Fundamentals
2022 -
AZ-900 Microsoft Certified - Azure Fundamentals course, completed in 2022.
Trainning
AZ-104 Microsoft Azure Administrator, Cloud Administration
2022 -
AZ-104 Microsoft Azure Administrator course, completed in 2022.
Trainning
CISSP Certified Information Systems Security Professional (ISC)², Cybersecurity
2022 -
CISSP Certified Information Systems Security Professional (ISC)² course, completed in 2022.
Hashtag Treinamentos
Zero to Hero Python Program, Programming
2022 -
Zero to Hero Python Program, completed in 2022.
Trainning
Certified Ethical Hacker v11, Ethical Hacking
2022 -
Certified Ethical Hacker v11 course, completed in 2022.
ESTABILIS
DevOps Professional (by EXIN), DevOps
2020 -
DevOps Professional (by EXIN) certification, completed in 2020.
ESTABILIS
DevOps Foundation (by EXIN), DevOps
2020 -
DevOps Foundation (by EXIN) certification, completed in 2020.
TIEXAMES
How security tools can contribute with data protection (LGPD), Data Protection
2020 -
How security tools can contribute with data protection (LGPD) course, completed in 2020.
SENAC EAD
LGPD (Brazilian Data Protection Law), Data Protection
2020 -
LGPD (Brazilian Data Protection Law) course, completed in 2020.
TIEXAMES
DPO Data Protection Officer roles and responsibilities for LGPD/GDPR, Data Protection
2020 -
DPO Data Protection Officer roles and responsibilities for LGPD/GDPR course, completed in 2020.
RTGC
MPT9 (Master Penetration Testing) Offensive Security and Ethical Hacking, Penetration Testing
2019 -
MPT9 (Master Penetration Testing) Offensive Security and Ethical Hacking course, completed in 2019.
BFBIZ Business for Business
Microsoft Windows Server 2012 - MCSA, Windows Server
2015 -
Microsoft Windows Server 2012 - MCSA course, completed in 2015.
BM&FBOVESPA
How to invest in stocks, Investing
2011 -
How to invest in stocks course, completed in 2011.
CIEE
Cisco IT Essentials v4.0, IT Essentials
2010 -
Cisco IT Essentials v4.0 course, completed in 2010.
Coursera
AWS Building Serverless, Serverless
2021 -
AWS Building Serverless course on Coursera, completed in 2021.
Coursera
AWS Migrating to the Cloud, Cloud Migration
2021 -
AWS Migrating to the Cloud course on Coursera, completed in 2021.
Amazon
AWS Technical Essentials 3.7 ILT + Certification Exam Readiness Workshop, Cloud Fundamentals
2016 -
AWS Technical Essentials 3.7 ILT + Certification Exam Readiness Workshop, completed in 2016.
Infinity Cursos de Informatica
Office 2003 / Windows 98–XP, Computer Skills
2004 -
Office 2003 / Windows 98–XP course, completed in 2004.
FIAP University
MBA, Cloud Computing
MBA in Cloud Computing from FIAP University, completed in 2019.
Carlos Drummond de Andrade University
Associate Degree, Computer Networking
Associate Degree in Computer Networking from Carlos Drummond de Andrade University, completed in 2012.
Digital Expert Training
Analysis and Forensic Examination of Digital Contracts, Digital Forensics
2026 -
Analysis and Forensic Examination of Digital Contracts course by Osvaldo Janeri, completed in 2026.
Udemy
AWS Certified Solutions Architect Associate, Cloud Architecture
2024 -
AWS Certified Solutions Architect Associate preparation course on Udemy, completed in 2024.
AWS
Security Best Practices (Technical), Cloud Security
2023 -
AWS Security Best Practices (Technical) course, completed in 2023.
AWS
Exam Prep AWS Certified Cloud Practitioner, Cloud Fundamentals
2023 -
AWS Exam Prep AWS Certified Cloud Practitioner course, completed in 2023.
Hacker Investigator
Hacker Investigator X, Cybersecurity
2026 -
Hacker Investigator X course by Bruno Fraga, completed in 2026.
(ISC)²
Certified in Cybersecurity (CC), Cybersecurity
2023 - 2026
Certified in Cybersecurity (CC) certification from (ISC)², valid from 2023 to 2026.
Microsoft
Microsoft Certified: Azure Fundamentals (AZ-900), Cloud Fundamentals
2023 - 2025
Microsoft Certified: Azure Fundamentals (AZ-900) certification, valid from 2023 to 2025.
Oracle
Oracle Cloud Infrastructure Foundations 2021 Associate, Cloud Infrastructure
2022 - 2024
Oracle Cloud Infrastructure Foundations 2021 Associate certification, valid from 2022 to 2024.
AWS
Well-Architected Best Practices (Technical), Cloud Architecture
2023 -
AWS Well-Architected Best Practices (Technical) course, completed in 2023.
Harness
Harness Chaos Engineering Practitioner, Chaos Engineering
2023 -
Harness Chaos Engineering Practitioner course, completed in 2023.
Hacker Investigator
Hacker Investigator Workshop, Cybersecurity
2026 -
Hacker Investigator Workshop by Bruno Fraga, completed in 2026.
Certiprof
Cyber Security Foundation Professional Certificate, Cybersecurity
2021 - 2023
Cyber Security Foundation Professional Certificate from Certiprof, valid from 2021 to 2023.
Coursera
AWS Addressing Security Risk, Cloud Security
2021 -
AWS Addressing Security Risk course on Coursera, completed in 2021.
Amazon
Security Engineering on AWS, Cloud Security
2021 -
Security Engineering on AWS course, completed in 2021.
Coursera
AWS Cloud Technical Essentials, Cloud Fundamentals
2021 -
AWS Cloud Technical Essentials course on Coursera, completed in 2021.
Coursera
AWS Fundamentals, Cloud Fundamentals
2021 -
AWS Fundamentals course on Coursera, completed in 2021.
Alura
HashiCorp Certified Terraform Associate; Certified Kubernetes Administrator (CKA), DevOps
2020 -
HashiCorp Certified Terraform Associate and Certified Kubernetes Administrator (CKA) courses, completed in 2020.
Certiprof
DevOps Essentials Professional Certificate, DevOps
2019 - 2022
DevOps Essentials Professional Certificate from Certiprof, valid from 2019 to 2022.
Ka Solution
SAP ABAP Academy, SAP ABAP
2014 -
SAP ABAP Academy course, completed in 2014.
Tech stack
Software and tools used professionally
Availability
Location
Authorized to work in
Salary expectations
Social media
Job categories
Interested in hiring Alan?
You can contact Alan and 90k+ other talented remote workers on Himalayas.
Message AlanGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
