Open to opportunities

Guilherme Tonelotti

@guilhermetonelotti

Message

I build secure full-stack applications, integrations, and APIs with PHP, Laravel, Java, Angular, and React.

Brazil

Message

What I'm looking for

I'm looking to build secure, reliable full-stack products and integrations, contribute to practical improvements in complex systems, and support teammates through code review and technical collaboration.

I'm currently building and maintaining PHP, Java, and Angular solutions at Vitru Educação, where I analyze application flows and access controls, remediate vulnerabilities such as IDOR, and investigate security incidents.

At Be Aliant, I built five Python crawlers, maintained RabbitMQ workflows and Laravel APIs handling approximately 100,000 requests per month, and developed an AI-assisted legal and sanctions news-search proof of concept.

At Shift, I built around 10 laboratory-equipment integration drivers for brands including Roche, Shimadzu, Waters, and Siemens. I worked with HL7, FHIR, ASTM, XML, REST, SOAP, and InterSystems Caché and Ensemble, reducing reopened driver-delivery tickets by 30%.

I've also delivered Laravel, React, Next.js, Flutter, and AWS solutions for ecommerce and freelance clients, including a warehouse mobile app that increased picking and packing productivity by 70%. I regularly review code and support developers, interns, and stakeholders in applying secure, practical fixes.

Experience

Work history, roles, and key accomplishments

Current

Full Stack Developer, PHP, Java and Angular

Current

Vitru Educação

Jul 2026 - Present (2 months)

Develops and maintains PHP, Java, and Angular features within a cybersecurity team, focusing on access control and vulnerability remediation. Conducts daily peer code reviews and supports developers and stakeholders in understanding system flows and applying secure fixes.

PHP Java Angular Cybersecurity Access Control Vulnerability Remediation Code Review IDOR

Full Stack Developer

Be Aliant

Mar 2026 - Jun 2026 (3 months)

Built Python crawlers for compliance data collection and maintained RabbitMQ workflows and Laravel APIs handling approximately 100,000 requests per month. Developed an AI-assisted web search proof of concept for sanctions and legal proceedings, improving search precision in internal tests.

Python Crawlers RabbitMQ Laravel REST APIs AI MCP Datadog

Full Stack Developer

Shift

Aug 2024 - Mar 2026 (1 year 7 months)

Built approximately 10 integration drivers for laboratory equipment from brands including Roche, Shimadzu, Waters, and Siemens, supporting around 9 clients. Implemented interoperable workflows with InterSystems Caché and Ensemble using HL7, FHIR, ASTM, XML, REST, and SOAP, reducing reopened tickets by 30%.

HL7 FHIR ASTM XML REST SOAP InterSystems Caché Integration Laboratory

Freelance Full Stack Developer

Workana and direct projects

Jan 2022 - Jan 2026 (4 years)

Delivered 3 end-to-end web projects from requirements discovery through production deployment, building applications, REST and GraphQL APIs, and payment gateway integrations using Laravel, React, Next.js, MySQL, and Docker. Reduced hosting costs by 20% for one client by reorganizing AWS deployment and monitored applications with Sentry.

Laravel React Next.js MySQL Docker REST APIs GraphQL Payment Gateways AWS Sentry

Full Stack Developer

Raízes Tech

Aug 2022 - Aug 2024 (2 years)

Increased productivity by 70% in picking and packing by building a Flutter application connected to a Laravel backend, used by approximately 9 employees on Android scanners. Migrated approximately 8 modules from PHP 5.3 to PHP 8.1 with Laravel and reduced CNAB integration errors by 70% through legacy code refactoring.

Flutter Laravel PHP MySQL WMS Refactoring