Marccio Alcaide Maia da Costa

Senior-level security engineering role driving identity, Zero Trust, and infrastructure security projects for a Brazilian financial market infrastructure company.
- Zero Trust & IAM Architecture: Led the organization-wide rollout of context-based access and least-privilege policies, eliminating legacy admin rights and strengthening identity hygiene across the environment.
- Risk & Compliance Gover

Co-organizer of HumanConf, one of Brazil's leading cybersecurity conferences focused on the human element of security: awareness, culture, and human risk management. Volunteer, nonprofit initiative. Third edition scheduled for September 2026 in São Paulo.
- Program & Content: Coordinate program planning, speaker selection, and content curation, working directly with CISOs, researchers, and communi

Core member of the global security engineering team at a U.S.-based fintech (Atlanta), managing Identity Access Management (IAM) and Privileged Access Management (PAM) for enterprise-scale environments under PCI-DSS and HIPAA.
- Global PAM Administration: Administered BeyondTrust across global server fleets, leading platform upgrades and enforcing privileged access controls to meet strict PCI-DSS

Core member of the global security engineering team at a U.S.-based fintech.

• Administered BeyondTrust (PAM) across global server fleets, leading platform upgrades and enforcing privileged access controls under PCI-DSS and HIPAA.

• Engineered Python-based automation for the "Break Glass/Firecall" privileged provisioning process (Microsoft ARS), cutting manual intervention time by 90% and improv

- Led InfraSec and Support initiatives, strengthening security controls, operational processes, and infrastructure resilience for multiple internal environments.
- Delivered the migration from Movidesk to the Atlassian Jira Suite (JSM, Software, Work Management), including workflow redesign, automation, access controls, and service reliability improvements.
- Implemented security-aligned ITSM prac

Led the global Infrastructure Security, IAM, and IT Operations strategy for a digital commerce platform operating worldwide, combining hands-on architecture with technical leadership across multiple regions during hypergrowth.
- Zero Trust Transformation: Directed the implementation of Netskope (CASB, DLP, Zero Trust) and centralized access governance via Google Workspace (IdP), enforcing SSO/MFA

- Built and led a multidisciplinary division of 50+ professionals (Security, Infrastructure, NOC, and Service Desk) during a period of aggressive hypergrowth, reporting directly to executive leadership.
- Security Program Construction: Designed the company’s first comprehensive GRC and SecOps frameworks, implementing CSPM (Cloud Security), SIEM, and Threat Intelligence to protect cloud-native work

• Built and led a 50+ person division (Security, Infrastructure, NOC, Service Desk) during aggressive hypergrowth, reporting to executive leadership.

• Designed the company's first GRC and SecOps frameworks, implementing CSPM, SIEM, and Threat Intelligence for cloud-native workloads.

• Led LGPD/privacy controls and third-party risk assessments; ensured 99.9% availability for 24/7 critical distri

- Operated and engineered cloud infrastructure on AWS (EC2, RDS, S3, ALB, Autoscaling, SSM, CloudWatch, Image Builder), supporting financial-grade workloads and global production environments.
- Led the migration from on-prem VMware datacenters to AWS, improving scalability, reliability and operational resilience.
- Implemented CIS Benchmark level 1 and 2 for Linux (CentOS 7 / Amazon Linux 2) and

• Engineered AWS cloud infrastructure (EC2, RDS, S3, ALB, SSM, CloudWatch) for financial-grade workloads; led the on-prem VMware to AWS migration.

• Implemented CIS Benchmarks (L1/L2) for Linux and Windows Server images; ran vulnerability management with Tenable.io and Qualys.

• Operated AlienVault SIEM, supported PCI-DSS compliance, and automated security operations with Terraform, Ansible, and

- Management of the complete restructuring of the organization's IT and Telecom infrastructure, promoting cost reduction and agility in problem solving.
- Implementation of new processes in the IT area strongly based on ITIL with emphasis on Incident Management.
- Creation and maintenance of the information security policy.
- Leader of the Alterdata Financial ERP implementation project (Bimer) and

• Led the full restructuring of IT and Telecom infrastructure, created the information security policy, and implemented ITIL-based processes, virtualization, and monitoring (Zabbix, PRTG).

- Management and maintenance of the institutional website.
- Administration of corporate emails.
- Development and maintenance of control systems for the Garage, Laudêmios, Help Desk, Simulation Correction, which can be integrated into the current Academic System.
- Development of reports in Crystal Reports for the Help Desk, Garagem, Laudêmio and Academic system.
- Maintenance of academic, te

- Responsible for updating the institutional website.

- Prevention and treatment of failures in the data and voice network.
- Presentation of new proposals, solutions to improve services and reduce costs.
- Reporting to customers and internally to superiors.
- Updating of the entire Net Coll tool database, considerably improving the pro-activity in the resolution of failures.

Apr 2012

Nov 2011