elciocastro.com

Infrastructure · Cloud · Reliability

Elcio Castro

Cloud Engineer | SRE | Platform Engineering

Technology professional with 14+ years of experience in infrastructure, cloud and operations, supporting and improving production-critical environments. Hands-on experience with AWS, Azure and Kubernetes, focused on reliability, observability, automation, troubleshooting and environment optimization.

⌖ Salvador, Brazil ◉ Remote work
42 → 5 minAnti-fraud platform startup time after optimization
18+Kubernetes clusters across EKS and AKS
99.98%SLO for an anti-fraud API
~20%Fewer critical incidents with proactive monitoring

14 years of professional experience

Working in infrastructure, cloud and operations since September 2012.

  • Dock Tech 2021–present
  • Hospital Aliança 2019–2021
  • ZCR Informática 2015–2019
  • MRM Construtora 2012–2015

About

My work combines the operation of critical environments with infrastructure and platform improvements. I enjoy investigating issues, understanding system behavior and turning what I learn into improvements that teams can maintain.

Throughout my career, I have contributed to infrastructure modernization, platform evolution, incident response and automation. I also build personal projects and labs to explore technologies, test approaches and improve my skills in Cloud, SRE and Platform Engineering.

Cloud EngineeringSRE & ReliabilityPlatform EngineeringKubernetesObservabilityAutomationTroubleshootingFinOps

Experience

Dock Tech

10/2021 – present

SRE / Cloud Engineer · Specialist

Work in critical payment environments, covering cloud infrastructure, Kubernetes, reliability, observability, automation and platform evolution.

Reliability and observability

  • Work on the management and improvement of a 99.98% SLO for an anti-fraud API.
  • Built dashboards, data collection and proactive alerts to improve visibility of a platform that had no centralized monitoring.
  • Monitoring of services and processing, including SLI, SLO, error budget, MTTR and incident response.
  • Proactive monitoring initiatives associated with an approximately 20% reduction in critical incidents.

Platform and results

  • Optimized components of a critical anti-fraud platform, reducing one startup process from about 42 minutes to 4–5 minutes.
  • Improved a rules deployment workflow, increasing capacity from 4 to 8 and reducing execution time from about 20 to 10–11 minutes.
  • Owned the infrastructure side of the anti-fraud platform version upgrade, including validation and production rollout.

Cloud, Kubernetes and IaC

  • Management and support of more than 18 Kubernetes clusters on AWS EKS and Azure AKS.
  • EKS upgrades, node groups and add-ons using Terraform and Ansible, with GitOps delivery through ArgoCD.
  • Work with Helm, Docker, AWS CloudFormation, Azure Key Vault, External Secrets and managed Kafka services.

Automation and collaboration

  • Developed Python, Flask and Bash bots and automations for health checks, operational tasks, reports and self-service.
  • Technical leadership in the implementation of a solution integrated with identity, messaging and database services.
  • Technical support for team members, knowledge sharing and use of generative AI in engineering activities.

Stack: AWS, Azure, EKS, AKS, Kubernetes, Docker, Helm, ArgoCD, Terraform, Ansible, CloudFormation, Jenkins, Harness, Datadog, Splunk, Prometheus, Grafana, Python, Flask, Bash, Kafka/MSK, Couchbase, Keycloak and Azure Key Vault.

Hospital AliançaSenior IT Analyst12/2019 – 07/2021
  • Updated and tuned the system used to store and deliver medical imaging exams, achieving about 15% better performance and reducing result delivery time by 20%.
  • Supported the Office 365 email migration and integrations with Azure AD and internal systems.
  • Administered Linux, Windows Server and VMware environments, as well as Apache, WildFly, Tomcat, Oracle and MySQL.
  • Worked with security and network tools including Trend Micro, Fortinet, Check Point, Palo Alto and Aruba.
ZCR InformáticaIT Analyst05/2015 – 11/2019
  • Consolidated PostgreSQL from 6 to 2 servers and reduced the web-hosting environment from 215 to 135 hosts by adopting CWP.
  • Updated Linux servers, Debian systems and BIND on FreeBSD.
  • Implemented GLPI and integrated Docker/Docker Swarm with GitLab CI/CD pipelines.
  • Worked with Prometheus, Grafana, Zabbix, ELK and Rundeck for monitoring, logs and operational automation.
MRM ConstrutoraSupport Analyst09/2012 – 05/2015
  • Worked between IT and the Finance department on technical evaluations, POCs, software benchmarking, TCO analysis and invoice validation.
  • Administered Windows Server, Linux, Hyper-V, VMware, SQL Server and MySQL.
  • Monitored infrastructure and networks with Zabbix, Cacti, PRTG and Ntop.
  • Provided N1/N2 support, managed service requests with GLPI and supported corporate systems, including TOTVS RM.

Projects

KubeCare

v2.3.1 · in development

An observability, governance and FinOps platform for Kubernetes.

A personal project to centralize cluster information, track resource usage, identify optimization opportunities and support incident management. The architecture combines lightweight Go agents with a FastAPI hub, metrics integrations and notifications.

  • Cost analysis by namespace and workload, in USD and BRL.
  • Rightsizing recommendations and an EKS node scenario simulator.
  • Incident lifecycle tracking, cause classification and MTTR.
  • Security checks, RBAC and deprecated Kubernetes APIs.
304automated tests
22Prometheus metrics
9dashboard pages

Technologies: Go, Python, FastAPI, SQLite, PostgreSQL, Helm, Kubernetes, Prometheus, Pluto and oauth2-proxy.

Labs & technical notes

Hands-on labs, troubleshooting, automation and technical decisions. Each note covers the context, environment, investigation, solution and lessons learned, with reproducible examples where possible and no confidential information.

In progress

Infrastructure labs

HAProxy and Keepalived in an Azure lab; health checks and metrics with Prometheus and Grafana Cloud; automation and recovery scenarios.

In progress

Cloud and Kubernetes

EKS upgrades with Terraform and add-ons; GitOps rollout strategies; resource efficiency and FinOps.

Every note follows the same structure: problem, environment, investigation, solution, result and code when available.

Technical skills

Cloud
AWS, Azure, EC2, EKS, AKS, ELB, Route 53, API Gateway and Azure Key Vault.
Containers & platform
Kubernetes, Docker, Helm, ArgoCD, Jenkins, Harness and GitOps.
IaC & configuration
Terraform, Ansible and CloudFormation.
Observability
Datadog, Splunk, Prometheus, Grafana, Zabbix and ELK.
Automation
Python, Flask, Bash, PowerShell and operational automation.
Reliability
SLI, SLO, error budgets, incident response, troubleshooting, RCA, postmortems and Disaster Recovery.
Data & messaging
Couchbase, PostgreSQL, Oracle, Kafka/MSK, Redis OSS and Cosmos DB.

Education

Academic background

  • MBA in CybersecurityIGTI / XP Educação · 2021–2022
  • Postgraduate Specialization in IT Quality and GovernanceFaculdade Ruy Barbosa · 2013–2015
  • Bachelor's Degree in Computer EngineeringÁrea1 – Faculdade de Ciência e Tecnologia · completed in 2012

Certifications

  • AWS Certified Solutions Architect – Associate
  • AWS Certified Developer – Associate
  • AWS Certified Cloud Practitioner
  • Microsoft Certified: Azure Administrator Associate (AZ-104)
  • Microsoft Certified: Azure Fundamentals (AZ-900)
  • Linux and securityLPIC-1, LPIC-2, CompTIA Linux+, Fortinet NSE 1 and NSE 2
  • Currently studyingCertified Kubernetes Administrator (CKA)

View credentials on Credly ↗

Contact

Let's talk about an opportunity, a project or engineering in practice.