Platform Engineer / DevOps Engineer

Siemens | Jan 2022 – Present | Lisbon, Portugal (Remote)

Platform & VM Lifecycle Automation

  • Built VM image pipelines on Tekton with KubeVirt — ISO-based installation driven by cloud-init, plus cloud-image customization with libvirt/guestfs to meet internal partitioning requirements — for Ubuntu, Debian, and RHEL
  • Developed a self-service VM provisioning workflow: requests arrive as GitHub Issues, and GitHub Actions deploys through a custom Helm chart that templates the VM and its disks on OpenShift Virtualization, registers the IP via the phpIPAM API, and hands off to Ansible for post-deployment configuration
  • Manage the full lifecycle of hundreds of Linux servers across multiple international datacenters — provisioning, patching, compliance, credential rotation, and decommissioning

Log Management Platform

  • Built and operate the team’s centralized logging for its managed servers: Beats agents ship to Logstash nodes, which route streams to OpenSearch — and selected log types also to a company-wide Kafka platform
  • Developed the Ansible role for automated OpenSearch/Logstash/Dashboards deployment with TLS, OIDC authentication, and ISM retention policies
  • Onboarded logs from 10+ services the team runs — monitoring, backup, DHCP, IPAM, file servers, antivirus mirrors, terminal servers, Ansible Automation Platform — into the central platform

Security & Compliance Automation

  • Maintain CIS-derived hardening roles for Ubuntu, Debian, and RHEL — translating company-wide measure plans (built on CIS, NIST, and other published standards) into Ansible, with per-measure tagging for selective execution
  • Built automated compliance checking: an Ansible role that emails compliance reports and raises Icinga2 alarms for non-compliant hosts, with remediation coordinated with the teams owning each VM
  • Implemented credential rotation automation with HashiCorp Vault
  • Manage fleet-wide antivirus infrastructure — mirror server, Ansible deployment role, monitoring, and exception handling

Ansible Automation Platform (AAP)

  • Administer AAP across 60+ inventory groups — execution nodes, OIDC authentication, and Grafana monitoring dashboards
  • Author and maintain, with my team, 10+ Ansible roles on GitHub Enterprise with CI/CD linting pipelines and automated release drafting

Infrastructure Operations

  • Deliver and run the VMs behind the team’s internal services — ALM tooling, artifact repositories, build agents, load balancers, monitoring — handling incidents and service requests across access management, storage, networking, patching, and service recovery

Key Technologies: Ansible, AAP, OpenShift Virtualization (KubeVirt), Tekton, Helm, GitHub Actions, HashiCorp Vault, OpenSearch, Logstash, Grafana, Icinga2, VMware ESXi, Python, Bash

Junior System Administrator

PDMFC | Apr 2021 – Sep 2021 | Lisbon, Portugal

  • Managed virtualization infrastructure across VMware ESXi, Proxmox, and Hyper-V for Dev, QA, and Production environments
  • Installed and maintained GitLab CI runners and helped development teams troubleshoot application deployments
  • Configured Zabbix monitoring with custom metrics and alarm thresholds for proactive incident detection
  • Assisted with maintenance of firewall policies and VPN configurations supporting network segmentation

Key Technologies: VMware ESXi, Proxmox, Hyper-V, GitLab CI, Zabbix, BIND DNS, pfSense, OpenVPN, Active Directory

Operational Support Systems Trainee

Claranet Portugal | Jun 2020 – Aug 2020 | Lisbon, Portugal

  • Worked on the fleet-wide migration from SNMPv2 to SNMPv3 with new proxy infrastructure — a multi-hundred-asset effort, carried out with a fellow trainee and still in progress when the traineeship ended
  • Built a custom Zabbix template to monitor UPS units via SNMP

Key Technologies: Zabbix, SNMP, ITIL

Skills Overview

Automation & IaC: Ansible (roles, AAP), Tekton, Helm, GitHub Actions, CI/CD pipelines

Containers & Orchestration: OpenShift 4.x, OpenShift Virtualization (KubeVirt), Kubernetes, Helm, container image pipelines

Observability & Logging: OpenSearch, Logstash, Filebeat, Grafana, Icinga2, Zabbix

Security & Compliance: CIS benchmarks, credential rotation, SSH hardening, fleet antivirus management

Secrets & Identity: HashiCorp Vault, Active Directory/SSSD, OIDC (Microsoft Entra ID), Kerberos, LDAP

Infrastructure: VMware ESXi, Proxmox, Hyper-V, QEMU/KVM, Pure Storage (FC), Portworx, Multus CNI

Networking: phpIPAM, day-to-day TCP/IP troubleshooting; foundational training in OSPF, VRRP, IPSec, OpenVPN, OPNsense, VyOS

Core Services: Nginx, HAProxy, Bind (DNS), DHCP

Languages & Tools: Bash, Python, Jinja2, YAML, Git, GitHub Enterprise, GitLab, MkDocs