Backend Engineer · Java & Spring Boot · DevOps
Backend engineer with a background in embedded systems at Siemens and Nortel Networks and IT coordination and systems integration at TIM Brasil. I build secure Java/Spring Boot services and the infrastructure that runs them, from OAuth2/PKCE flows to Terraform-provisioned AWS environments.
- Maintaining spring-config-guard, a static analysis CLI for Spring Boot security misconfigurations
- Deepening my work in application security, infrastructure as code, and cloud deployment (AWS · Azure)
| Project | Description | Stack |
|---|---|---|
| spring-config-guard | Static analysis CLI that catches Spring Boot security misconfigurations (exposed Actuator endpoints, hardcoded credentials, insecure DB/broker transport, CORS wildcards) before deployment. 17 rules, CI-gatable exit code, Spring Cloud Config Server mode. Validated against real-world repositories, including Spring Boot itself. | Java · Spring Boot · CLI |
| FiberGuardian | Quality control and traceability for incoming yarn in textile mills (🏆 3rd place, Blusoft Evolution Labs 2025). Supplier invoices with PDF upload, lab test reports with real spinning-mill metrics, JasperReports PDFs, and an audit trail. Security built on OWASP guidance: session hardening, CSRF, HTTPS enforcement, and least-privilege roles. Deployed on Azure behind Caddy. | Java 21 · Spring Boot 3.5 · Spring Security · MySQL · Flyway · Azure |
| DeslocaFácil | Corporate mobility MVP (🏆 4th place, Hackathon +Devs2Blu 2025). Full AWS infrastructure via Terraform (EC2, IAM, SSM), Docker multi-stage build, end-to-end TLS, and automated provisioning from zero to running containers via user-data. Built on the FiberGuardian codebase. | Java 21 · Spring Boot 3.5 · Terraform · AWS · NGINX |
| ds-catalog | Spring Security showcase covering legacy 2.x auth, password grant, and modern Authorization Code + PKCE flows with Keycloak. | Spring Boot 3 · OAuth2 · Keycloak |
| angular-rachid | Group expense splitting app with standalone components, signals, reactive forms, and automated tests. Algorithm ported from a validated Java version. Live demo | Angular · RxJS · Angular Material |
jobfinder  |
Generates optimized LinkedIn Jobs search URLs with seniority, work mode, and posting-date filters, including automatic exclusion of unwanted seniority levels. No backend. | HTML · CSS · JavaScript |
More: gerador_series_temporais_arima (ARMA time series generator in Java, Box-Jenkins methodology) · beecrowd_sql_solutions (advanced SQL challenges) · prompts-customizados-ia (AI prompts for software development personas)
Backend
Data
DevOps & Cloud
Frontend & Other
- Siemens: embedded software engineering (Assembly, C++), including on-site collaboration with Siemens engineering in Germany
- Nortel Networks: embedded software development, with technical communication in English with development teams in the United States
- TIM Brasil: IT coordination and systems integration
- Higher education teaching: Statistics, Numerical Computation, and Logic (UFPR, Bagozzi, SENAI-SC)
- 3rd Place, Blusoft Evolution Labs 2025 (startup pre-incubation): FiberGuardian, textile quality control system. Responsible for backend, frontend, and cloud deployment on Azure
- 4th Place, Hackathon +Devs2Blu 2025: DeslocaFácil, corporate mobility MVP
- M.Sc. Production Engineering, UFPR
- B.Sc. Electrical Engineering, UDESC
- Postgraduate Program in Java Development, UTFPR (2025)
- Java Professional Qualification Program, Entra21 / Blusoft, 400+ hours (2025)
- DevOps Professional Qualification Program, +Devs2Blu / Blusoft, 400+ hours (2025)
- Oracle Cloud Infrastructure Generative AI Certified Professional, Oracle (2024)
- Java Foundations & Java Programming, Oracle Academy (2024)
- CCNA1 Introduction to Networks, Cisco (2024)