{"$schema":"https://raw.githubusercontent.com/jsonresume/resume-schema/v1.0.0/schema.json","basics":{"email":"interviews@mrosse.com","label":"Site Reliability and Platform Engineer","location":{"city":"Lisbon","countryCode":"PT","region":"Lisbon"},"name":"Marcos Rosse","profiles":[{"network":"LinkedIn","url":"https://www.linkedin.com/in/marcosrosse/","username":"marcosrosse"},{"network":"GitHub","url":"https://github.com/marcosrosse","username":"marcosrosse"}],"summary":"Site Reliability Engineer in Lisbon with six years in DevOps and SRE and six before that as a Linux sysadmin. At Sky I keep streaming applications reliable for services across Europe and the US, including Peacock, SkyShowtime and NOW TV. Before that I built CI/CD and moved banks and telecom operators onto OpenShift. My focus is platform engineering: infrastructure as code, CI/CD, observability and edge delivery, and making releases and traffic peaks routine.","url":"https://mrosse.com/"},"certificates":[{"date":"2023","issuer":"The Linux Foundation","name":"Certified Kubernetes Administrator (CKA)","note":"expired","url":"https://ti-user-certificates.s3.amazonaws.com/e0df7fbf-a057-42af-8a1f-590912be5460/a05ae92a-8874-457e-8ab4-19802c1cde96-marcos-rosse-moreira-0ca203dc-c4e8-4e9a-9e0b-9b5f155acf67-certificate.pdf"},{"date":"2022","issuer":"Microsoft","name":"Microsoft Azure Fundamentals (AZ-900)","url":"https://www.credly.com/badges/73634373-5730-4f8c-8e50-7928382ba220"}],"education":[{"area":"Computer Science","endDate":"2018-12","institution":"Universidade Nove de Julho (UNINOVE)","location":"São Paulo, Brazil","startDate":"2015-01","studyType":"Bachelor's degree"}],"languages":[{"fluency":"Native","language":"Portuguese"},{"fluency":"Professional working proficiency","language":"English"}],"meta":{"canonical":"http://www.mrosse.com/resume.json","lastModified":"2026-11-12T01:37:44Z"},"skills":[{"keywords":["Kubernetes","Amazon EKS","OpenShift","k3s","Helm","Kustomize","Docker"],"name":"Containers and Kubernetes"},{"keywords":["AWS","Azure","Akamai (Property Manager, GTM, Cloudlets, WAF, certificates)","OpenStack","Hetzner"],"name":"Cloud and edge"},{"keywords":["Terraform","OpenTofu","Terragrunt","Ansible"],"name":"Infrastructure as code"},{"keywords":["GitHub Actions","GitLab CI","Jenkins","Azure DevOps","Flux CD"],"name":"CI/CD and GitOps"},{"keywords":["Prometheus","Thanos","Alertmanager","Grafana","Datadog","Elasticsearch","SLIs and SLOs"],"name":"Observability"},{"keywords":["HashiCorp Vault","SOPS","vulnerability remediation"],"name":"Security"},{"keywords":["Go","Python","Bash"],"name":"Languages"},{"keywords":["Ubuntu","RHEL","Incus","XenServer"],"name":"Linux and virtualisation"},{"keywords":["Amazon Aurora","MongoDB Atlas","Elastic Cloud","Couchbase","Kafka"],"name":"Managed data services"}],"work":[{"highlights":["Assessed how a load balancer change by the EKS platform team would affect our edge configuration, and updated origin settings (SNI) across more than 30 Akamai properties ahead of the cutover.","Wrote a Python Prometheus exporter for GitHub service health (Git operations, Actions, pull requests, issues), with dashboards and alerts, after GitHub outages kept disrupting the team's work.","Automated credentials for new RDS and DocumentDB instances: admin and user passwords are generated and stored in HashiCorp Vault, and Terragrunt reads them at creation time, so nobody handles a secret by hand.","Support the applications through releases, incidents and live sports peaks such as NFL games, and share the on-call rotation.","Own their observability and alerting with Prometheus, Thanos, Grafana and Alertmanager, including SLOs, certificate expiry checks, and alert routing to Slack and incident tooling.","Manage the Akamai configuration they use: delivery properties, Global Traffic Management (GTM), Cloudlets, WAF security policies and TLS certificates.","Deploy and run the AWS resources they need as code with Terraform and Terragrunt, maintain the GitHub Actions and Jenkins pipelines onto the shared EKS clusters, scale non-production down outside traffic windows to cut cost, and patch vulnerabilities on hosts and in code."],"location":"Lisbon, Portugal","name":"Sky","position":"Site Reliability Engineer","startDate":"2023-10","summary":"Comcast NBCUniversal's Global Streaming Technology group, behind Sky UK, Sky Deutschland, Sky Italia, Peacock (US), SkyShowtime and NOW TV. My team sits in the middle: we run on the shared EKS clusters and Akamai CDN owned by other platform teams, and the application teams we support run on what we provide."},{"endDate":"2023-10","highlights":["Led the migration of monolithic applications from legacy infrastructure to OpenShift for a telecom operator in the Middle East.","Helped design its disaster recovery environment.","Unblocked a stalled Kubernetes upgrade for a European telecom operator."],"location":"Lisbon, Portugal","name":"Velv","position":"DevOps Engineer","startDate":"2022-08","summary":"Consultancy for telecom operators."},{"endDate":"2022-08","highlights":["Moved the bank's workloads from Azure to an on-premises OpenShift platform.","Standardised CI/CD for more than 50 microservices.","Built environments as code with Terraform, Helm and Kustomize, and ran the platform's secrets, messaging and data services.","Mentored development teams on DevOps practices; promoted for the results."],"location":"São Paulo, Brazil","name":"Avanade","position":"DevOps Engineer","startDate":"2021-03","summary":"Consultancy for a Swiss private bank."},{"endDate":"2021-02","highlights":["Automated developer onboarding, from repositories and pipelines to dashboards, monitoring and infrastructure.","Built CI/CD pipelines for digital banking services.","Provisioned and maintained API gateways.","Automated OpenStack provisioning with Terraform for an internal platform as a service."],"location":"São Paulo, Brazil","name":"NTT DATA (Everis)","position":"DevOps Engineer","startDate":"2019-08","summary":"Consultancy for one of Brazil's largest banks."},{"endDate":"2019-07","highlights":["Ran Linux servers on XenServer and managed more than 100 Ubuntu desktops with Ansible.","Set up central logging and monitoring for the unit's network.","Ran the firewall, web proxy, backups and directory services (LDAP and Samba)."],"location":"São Paulo, Brazil","name":"Brazilian Air Force (São Paulo Support Group)","position":"IT Analyst and Systems Administrator","startDate":"2013-08","summary":"Enlisted IT role during military service."}]}