Pedro Souza

I'm a DevOps and DevSecOps Engineer based in Brazil. I've spent about five years in tech: first as a front-end developer, then moving into information security and, since 2023, DevSecOps and DevOps roles. I hold a bachelor’s degree in Computer Science from the University of São Paulo (USP) and a few certifications, such as:

• Certified DevSecOps Engineer (Practical DevSecOps)

• Certified in Cybersecurity (ISC2)

• AWS Certified SysOps Administrator – Associate (AWS)

I currently work as a DevOps engineer at Inoa, a financial market software company. Day to day, that means infrastructure maintenance, monitoring, security, incident response and implementing other automations within AWS. Some highlights from my work at Inoa:

• Onboarded and maintained SaaS environments for multiple clients on AWS, using Terraform, EC2 instances and Docker.

• Took part in designing a modern tiered SaaS architecture, migrating clients from EC2 instances with Docker Compose to Kubernetes Clusters.

• Deployed and maintained internal tools such as Sonatype Nexus and DefectDojo on Kubernetes (AWS EKS), using ArgoCD for GitOps.

• Built automated patch management with AWS SSM Patch Manager and Automation Documents.

• Developed GitHub Actions pipelines for build, deploy, and security automation, standardizing build environments across 60+ repositories.

• Created a reusable alerting solution with Terraform, EventBridge, and Lambda.

Before that, I worked as a DevSecOps Engineer at Zup IT and Monks. Some highlights from those jobs:

• At Zup IT, I built an internal AI-powered pull request summarization system (ECS Fargate, SQS, StackSpot AI) used across 800+ repositories. It helps developers with code reviews and security feedback, and costs under $50/month on AWS.

• At Monks, I worked with a globally distributed security team and leveraged FOSS tools such as Semgrep, OWASP Zap, Renovate and DefectDojo to build entire Secure SDLC automation pipelines at a low cost.

Currently, I’m looking for remote DevOps, DevSecOps, or Cloud Engineering roles where I can work on infrastructure as code, CI/CD automation, and security. I enjoy automating repetitive work and building practical solutions that keep teams fast without sacrificing security. I'm fluent in English and comfortable working with distributed teams.