Francisco Marques

During this experience, the consultant was responsible for the following activities: . Development and standardization of pipelines in Azure DevOps and Github Actions to work healthily in Production, Staging, and Development environments, integrating build tools (Maven, React), testing tools (Jacoco, Junit, Selenium, Cumber, etc.) , actively participating in defining code coverage levels and implementing Quality Profile and Quality Gate on SonarQube at the enterprise level, along with testing teams. . Uses cybersecurity tools such as SonarQube for SAST verification, as well as implementing the use of Trivy, a tool for checking vulnerabilities in Docker images integrated into the pipeline. Highlights:

• Knowledge on azure features as Virtual Machines, Cloud Functions, Spring Apps, Web Apps, Static Apps, Storage accounts, Entra ID. . Implementation of DevOps in technical and cultural scope . Conducting client assessments to identify DevOps maturity levels . Administration and provisioning of infrastructure in Azure Cloud using terraform (WebApps, SpringApps, WebStaticapps, Postgres DB, Virtual Machines, Container Apps/Environments) . Troubleshooting cloud applications, network and log analysis . Administration of repositories in Azure and Bitbuccket . Bash and Python scripting to automate DevSecOps proccess

During this experience, the consultant was responsible for the following activities: . Responsible for pipeline resources on Gitlab and operation on the Google Cloud Platform (GCP), ensuring proper functioning with scalability and growth plans. . Continuous development and improvement of the pipeline with new technologies, assisting programmers in the use and implementation of their code in CI/CD, solving problems, and supporting their tasks, providing all resources to implement urgent fixes (hotfix) and new features in the production environment as quickly as possible. . Working with bash script pipelines to build and test NodeJS code, as well as deploying to the Google Kubernetes Engine (GKE). Worked with bash script pipeline to build and test NodeJS code and deploy on GKE.

Responsible for the implantation of the DevOps culture and for directing the best practices in terms of technology.

• Developed and maintains the DevSecOps pipeline on Gitlab and Jenkins running healthly in Production, Homologation and Development enviroments with Jenkins and

Gitlab-CI, integrating build tools (maven, gradel, go ... ), unit testing tools (jacoco, junit, etc.) and integrated tests (cucumber for example), as well actively participated in defining the code coverage level and implementing of Quality Gate in SonarQube at the company level together with the test teams. . Run information cyber tools such as OWASP ZAP for DAST verification, OWASP Dependency Check for scanning code dependencies and SonarQube for SAST verification, in addition to implementing the use of Trivy, a tool for scanning vulnerabilities in Docker images integrates with pipeline too. . Excute other pipeline integrations with tools like Nexus for recording artifacts and Harbor as Docker Registry. . Manages the orchestration of the Kubernetes clusters by Rancher, provides support to the microservice teams in activities such as: adaptation of Gitlab repositories for the execution of pipeline, support in the construction of Dockerfiles and .YML's files to deploy in the Kubernetes develop, homologation and production environment. . Cloud Administration of the GCP environment and knowledge in services as GKE, GCR, Cloud Build, Cloud Function, etc ..