I am a Principal Security Architect and Cloud Security Architect with 15+ years of experience, working hands-on and architecturally on enterprise cybersecurity solutions across energy, financial services, telecommunications, healthcare, data centers, and large enterprise environments.

My expertise is identity-centric security, with strong hands-on experience in Network Access Control (NAC), IAM, and Zero Trust Architecture (ZTA). I have designed, deployed, and optimized NAC solutions for multiple organizations, especially in the energy and enterprise sectors, using Cisco ISE as a core strategic platform for large and mission-critical environments, often working in partnership with Cisco Brazil technical teams.

I work hands-on with identity and access integrations, including IAM, MFA, SSO, mTLS-based integrations, directory services (LDAP, Kerberos), identity federation, and directory sharing. Although I have not directly implemented Privileged Access Management (PAM) solutions, I have a solid architectural understanding of PAM platforms and how they integrate into Zero Trust and identity governance architectures.

I operate mainly in cloud and hybrid environments, with practical experience in cloud security, application security, and identity-driven access. I have architected and deployed cloud perimeter security, implementing multi-vendor firewalls (Cisco, Palo Alto, Fortinet, Check Point) to ensure segmentation, resilience, high availability, and secure VPN and MFA integrations, both on-premises and cloud-based.

I have hands-on knowledge of core infrastructure services such as DNS, NTP, syslog pipelines, identity stores, and authentication services, ensuring that security architectures are stable, scalable, and operable in production.

Alongside technical delivery, I act as a technical leader and mentor, supporting architectural decisions, improving technical performance, and strengthening documentation and standards. Even within Professional Services and Operations, I remain technically engaged, contributing to troubleshooting, optimization, and continuous improvement.

I hold multiple certifications, including CISSP, CCSP, CCIE Security, CASP+ (SecurityX), CCSK, and CCZT. I am passionate about cyber defense and security architecture, and I actively study offensive security concepts, MITRE ATT&CK / MAD 2.0, threat hunting, and malware analysis to design more resilient security architectures.

My focus is secure digital transformation through identity-driven security, Zero Trust principles, and hands-on technical leadership.