Hugo Santos on Hugo Santos | Platform Engineerhttp://hugoqs.pt/Recent content in Hugo Santos on Hugo Santos | Platform EngineerHugo Santos | Platform Engineerhttp://hugoqs.pt/images/profile.pnghttp://hugoqs.pt/images/profile.pngHugo -- 0.163.3en-usFri, 03 Jul 2026 00:00:00 +0000Education & Certificationshttp://hugoqs.pt/education/Fri, 03 Jul 2026 00:00:00 +0000http://hugoqs.pt/education/<h2 id="-education">🎓 Education</h2> <h3 id="technological-specialization-in-network-and-system-administration">Technological Specialization in Network and System Administration</h3> <p><strong>CINEL – Center of Education in Electronics, Energy, Telecommunications and IT</strong> <em>Nov 2018 – Aug 2020</em></p> <ul> <li><strong>Final Grade:</strong> 17/20</li> <li><strong>Qualification Level:</strong> EQF Level 5 (74.5 ECTS Credits)</li> <li><strong>Core Competencies:</strong> Heterogeneous environments (Windows/Unix), server virtualization, network device management (switching, routing, VPN), security hardening, monitoring systems</li> <li><strong>Capstone:</strong> <a href="http://hugoqs.pt/projects/capstone/">Enterprise High-Availability Network</a> — dual-vendor WAN edge with VRRP failover, multi-area OSPF, Windows AD/Exchange and Samba AD domains, ZFS/iSCSI storage, Bareos backups, Zabbix monitoring</li> </ul> <h3 id="bachelors-degree-in-musicology">Bachelor&rsquo;s Degree in Musicology</h3> <p><strong>NOVA FCSH (Universidade Nova de Lisboa)</strong> <em>2013 – 2017</em></p>Get in Touchhttp://hugoqs.pt/contact/Fri, 03 Jul 2026 00:00:00 +0000http://hugoqs.pt/contact/<h3 id="contact">Contact</h3> <ul> <li><strong>Email:</strong> <a href="mailto:me@hugoqs.pt">me@hugoqs.pt</a></li> <li><strong>LinkedIn:</strong> <a href="https://www.linkedin.com/in/hugoqueirozsantos">linkedin.com/in/hugoqueirozsantos</a></li> <li><strong>GitHub:</strong> <a href="https://github.com/vicktorhugoqs">github.com/vicktorhugoqs</a></li> <li><strong>Location:</strong> Lisbon, Portugal</li> </ul>Professional Experiencehttp://hugoqs.pt/experience/Fri, 03 Jul 2026 00:00:00 +0000http://hugoqs.pt/experience/<h2 id="platform-engineer--devops-engineer">Platform Engineer / DevOps Engineer</h2> <p><strong>Siemens</strong> | Jan 2022 – Present | Lisbon, Portugal (Remote)</p> <h3 id="platform--vm-lifecycle-automation">Platform &amp; VM Lifecycle Automation</h3> <ul> <li>Built VM image pipelines on <strong>Tekton with KubeVirt</strong> — ISO-based installation driven by cloud-init, plus cloud-image customization with libvirt/guestfs to meet internal partitioning requirements — for Ubuntu, Debian, and RHEL</li> <li>Developed a <strong>self-service VM provisioning workflow</strong>: requests arrive as GitHub Issues, and GitHub Actions deploys through a custom <strong>Helm chart</strong> that templates the VM and its disks on OpenShift Virtualization, registers the IP via the phpIPAM API, and hands off to <strong>Ansible</strong> for post-deployment configuration</li> <li>Manage the full lifecycle of hundreds of Linux servers across multiple international datacenters — provisioning, patching, compliance, credential rotation, and decommissioning</li> </ul> <h3 id="log-management-platform">Log Management Platform</h3> <ul> <li>Built and operate the team&rsquo;s centralized logging for its managed servers: <strong>Beats</strong> agents ship to <strong>Logstash</strong> nodes, which route streams to <strong>OpenSearch</strong> — and selected log types also to a company-wide <strong>Kafka</strong> platform</li> <li>Developed the Ansible role for automated OpenSearch/Logstash/Dashboards deployment with TLS, OIDC authentication, and ISM retention policies</li> <li>Onboarded logs from 10+ services the team runs — monitoring, backup, DHCP, IPAM, file servers, antivirus mirrors, terminal servers, Ansible Automation Platform — into the central platform</li> </ul> <h3 id="security--compliance-automation">Security &amp; Compliance Automation</h3> <ul> <li>Maintain <strong>CIS-derived hardening roles</strong> for Ubuntu, Debian, and RHEL — translating company-wide measure plans (built on CIS, NIST, and other published standards) into Ansible, with per-measure tagging for selective execution</li> <li>Built automated compliance checking: an Ansible role that emails compliance reports and raises <strong>Icinga2</strong> alarms for non-compliant hosts, with remediation coordinated with the teams owning each VM</li> <li>Implemented <strong>credential rotation automation with HashiCorp Vault</strong></li> <li>Manage fleet-wide antivirus infrastructure — mirror server, Ansible deployment role, monitoring, and exception handling</li> </ul> <h3 id="ansible-automation-platform-aap">Ansible Automation Platform (AAP)</h3> <ul> <li>Administer AAP across 60+ inventory groups — execution nodes, OIDC authentication, and Grafana monitoring dashboards</li> <li>Author and maintain, with my team, 10+ Ansible roles on GitHub Enterprise with CI/CD linting pipelines and automated release drafting</li> </ul> <h3 id="infrastructure-operations">Infrastructure Operations</h3> <ul> <li>Deliver and run the VMs behind the team&rsquo;s internal services — ALM tooling, artifact repositories, build agents, load balancers, monitoring — handling incidents and service requests across access management, storage, networking, patching, and service recovery</li> </ul> <p><strong>Key Technologies:</strong> Ansible, AAP, OpenShift Virtualization (KubeVirt), Tekton, Helm, GitHub Actions, HashiCorp Vault, OpenSearch, Logstash, Grafana, Icinga2, VMware ESXi, Python, Bash</p>Enterprise High-Availability Network (Capstone)http://hugoqs.pt/projects/capstone/Fri, 31 Jan 2020 00:00:00 +0000http://hugoqs.pt/projects/capstone/Final project of my CET in Network &amp; Systems Management at CINEL: a fully working multi-site corporate network — dual-vendor VRRP WAN edge, 3-area OSPF, Windows AD + Exchange, Samba AD, segmented firewalls with a VPN mesh, Bareos backups and Zabbix monitoring — defended live.