Frederico Almeida — Platform Engineer | Cloud Security Engineer
Lisbon, Portugal (UTC+1) · [email protected] · linkedin.com/in/falmeida93 · CV as PDF
Six years building the layer other people deploy on: multi-account AWS foundations, the services that run there, Kubernetes, and cloud security. Four of those years in a Cloud Center of Excellence, for banks, insurers, public administration, industrial groups and startups. The work that interests me sits between the infrastructure and the people deploying on it.
Experience
Platform Engineer | Cloud Security Engineer — Claranet Portugal · NOS Group
Cloud Center of Excellence, Lisbon · 2022 – present
The same team throughout; the company around it changed three times — NOS, then Ten
Twenty One, now Claranet. Joined through Hexa Consulting, permanent since 2025.
Platform and Cloud Security Engineer responsible for designing, implementing and securing cloud infrastructure across multiple projects. A combined role encompassing both security architecture and general cloud engineering, delivering end-to-end infrastructure solutions in multi-account environments — mainly AWS, with GCP alongside it.
- Cloud security and cloud infrastructure engineering, across two teams within the Cloud Center of Excellence
- Architecture and management of secure infrastructure across AWS and GCP using Infrastructure as Code (Terraform, CloudFormation)
- Management and hardening of Kubernetes environments (EKS, GKE) with focus on security best practices
- Deployment and management of core cloud services including compute (EC2, ECS, GCE), storage (S3, Cloud Storage), networking (VPC, ALB, CloudFront, WAF), and serverless (Lambda, Cloud Functions)
- Implementation of secure CI/CD pipelines with ArgoCD, GitHub Actions and Atlantis
- Deployment and configuration of Wiz CNAPP for cloud security posture management and vulnerability assessment
- Advanced AWS security implementation using Organizations with Service Control Policies (SCPs), IAM policies with least privilege principles, Security Hub, GuardDuty, Config and CloudTrail
- Design and implementation of AWS Landing Zone using AWS Organizations, including account vending, SCPs and centralised logging
- Automation of security processes through Python and Bash scripts
- Incident monitoring and response using centralised security tooling
- Collaboration with development teams to implement DevSecOps practices
Clients: NOS internal platforms · BPI · AMA/ARTE · CINEA (European Commission) · Sovena · Critical Software · Yacooba Labs
Systems Administrator | Cloud Administrator — Celfocus · 2020 – 2022
Management and administration of cloud infrastructure, ensuring availability, performance and security of organisational systems.
- Developed and implemented security baselines for Linux and Windows systems using Ansible, ensuring consistent security posture across the entire infrastructure fleet
- Administration of cloud environments (AWS) and management of computational resources
- Management of Linux (RHEL, Ubuntu, CentOS, Rocky) and Windows servers, including patching and hardening
- Implementation and maintenance of backup and disaster recovery solutions
- Infrastructure monitoring using tools such as Nagios and CloudWatch
- Automation of administrative tasks through scripting (Bash, PowerShell)
- Management of Active Directory, DNS, DHCP and network services
- Technical support for all Celfocus projects, with incident resolution
- Implementation of security policies
Construction Worker — Parajoal Sociedade Construções Lda. · 2017 – 2020
- Construction Worker
- Administrative Tasks (budgeting, billing, etc)
Portuguese Army Paratrooper — Portuguese Army · 2014 – 2017
Regimento de Paraquedistas · Rapid Reaction Brigade
Technical
- AWS — EC2, ECS, EKS, Lambda, RDS, Aurora, S3, SQS, SNS, VPC, Route 53, API Gateway, ALB/NLB, CloudFront, Cognito, CloudWatch, EventBridge, Organizations, SCPs, IAM, GuardDuty, Security Hub, Config, WAF, CloudTrail
- GCP — GKE, Cloud Run, Compute Engine, Pub/Sub, BigQuery, IAM, Security Command Center
- Infrastructure as code — Terraform, reusable modules, Atlantis, CloudFormation, AWS CDK
- Containers — EKS, GKE, Helm, ingress, cert-manager, external-dns, cluster-autoscaler
- Delivery — ArgoCD, GitOps, GitHub Actions, CI/CD, rollback strategy, self-service deploys
- Security — Wiz CNAPP, multi-cloud posture management, vulnerability assessment, least-privilege access, security baselines, incident monitoring and response
- Languages and scripting — Python, Bash, PowerShell, Claude Code and Copilot
- Systems — Linux (RHEL, Ubuntu, CentOS, Rocky), Windows Server, Active Directory, DNS, DHCP, Ansible, Git, GitHub, Nagios, Cloudflare DNS and Pages
Certifications and education
- AWS Certified Solutions Architect – Associate
- AWS Certified Security – Specialty
- AWS Certified AI Practitioner
- AWS Certified Cloud Practitioner
- Certified Kubernetes Administrator (CKA) — CNCF / Linux Foundation
- Google Professional Cloud Architect
- HashiCorp Terraform Associate
- CompTIA Security+
- Business English B1.2 — EasyTalk
- AWS Certified Solutions Architect – Professional (in progress)
- BSc Telecommunications and Computer Engineering — ISCTE-IUL, Lisbon, 2017–2020
Outside work
- Atelier Amarílis — event decoration for weddings, in Cascais. A family business. Website, plus an internal tool that turns a brief into generated images of the arrangement. Invoicing and client correspondence alongside.
- Grupo Desportivo da Malveira da Serra — board member and secretary. A local football club, around 600 registered members and 300 of them active. Subscriptions, registrations and the day-to-day administration, taken off paper and run online.
- Six websites for small businesses, built and deployed from GitHub to Cloudflare: amarilisatelier.com, wildwondersccn.com and psi.joanalmeida.com are live; almadoteuporque.com, almafitstudio.com and maternum.pt are in progress.
- A futsal app: balanced team selection for a weekly game, from a ranking each player carries from their own wins and losses.
Languages
Portuguese — native · English — professional working proficiency, used daily at work · Spanish — basic
This page is also an interactive terminal, which needs JavaScript. Open the CV as a PDF.