Lisbon, Portugal

Marcos Rosse

Site Reliability and Platform Engineer

Summary

Site Reliability Engineer in Lisbon with six years in DevOps and SRE and six before that as a Linux sysadmin. At Sky I keep streaming applications reliable for services across Europe and the US, including Peacock, SkyShowtime and NOW TV. Before that I built CI/CD and moved banks and telecom operators onto OpenShift. My focus is platform engineering: infrastructure as code, CI/CD, observability and edge delivery, and making releases and traffic peaks routine.

Experience

Site Reliability Engineer

Sky · Lisbon, Portugal

Oct 2023 – Present

Comcast NBCUniversal's Global Streaming Technology group, behind Sky UK, Sky Deutschland, Sky Italia, Peacock (US), SkyShowtime and NOW TV. My team sits in the middle: we run on the shared EKS clusters and Akamai CDN owned by other platform teams, and the application teams we support run on what we provide.

  • Assessed how a load balancer change by the EKS platform team would affect our edge configuration, and updated origin settings (SNI) across more than 30 Akamai properties ahead of the cutover.
  • Wrote a Python Prometheus exporter for GitHub service health (Git operations, Actions, pull requests, issues), with dashboards and alerts, after GitHub outages kept disrupting the team's work.
  • Automated credentials for new RDS and DocumentDB instances: admin and user passwords are generated and stored in HashiCorp Vault, and Terragrunt reads them at creation time, so nobody handles a secret by hand.
  • Support the applications through releases, incidents and live sports peaks such as NFL games, and share the on-call rotation.
  • Own their observability and alerting with Prometheus, Thanos, Grafana and Alertmanager, including SLOs, certificate expiry checks, and alert routing to Slack and incident tooling.
  • Manage the Akamai configuration they use: delivery properties, Global Traffic Management (GTM), Cloudlets, WAF security policies and TLS certificates.
  • Deploy and run the AWS resources they need as code with Terraform and Terragrunt, maintain the GitHub Actions and Jenkins pipelines onto the shared EKS clusters, scale non-production down outside traffic windows to cut cost, and patch vulnerabilities on hosts and in code.

DevOps Engineer

Velv · Lisbon, Portugal

Aug 2022 – Oct 2023

Consultancy for telecom operators.

  • Led the migration of monolithic applications from legacy infrastructure to OpenShift for a telecom operator in the Middle East.
  • Helped design its disaster recovery environment.
  • Unblocked a stalled Kubernetes upgrade for a European telecom operator.

DevOps Engineer

Avanade · São Paulo, Brazil

Mar 2021 – Aug 2022

Consultancy for a Swiss private bank.

  • Moved the bank's workloads from Azure to an on-premises OpenShift platform.
  • Standardised CI/CD for more than 50 microservices.
  • Built environments as code with Terraform, Helm and Kustomize, and ran the platform's secrets, messaging and data services.
  • Mentored development teams on DevOps practices; promoted for the results.

DevOps Engineer

NTT DATA (Everis) · São Paulo, Brazil

Aug 2019 – Feb 2021

Consultancy for one of Brazil's largest banks.

  • Automated developer onboarding, from repositories and pipelines to dashboards, monitoring and infrastructure.
  • Built CI/CD pipelines for digital banking services.
  • Provisioned and maintained API gateways.
  • Automated OpenStack provisioning with Terraform for an internal platform as a service.

IT Analyst and Systems Administrator

Brazilian Air Force (São Paulo Support Group) · São Paulo, Brazil

Aug 2013 – Jul 2019

Enlisted IT role during military service.

  • Ran Linux servers on XenServer and managed more than 100 Ubuntu desktops with Ansible.
  • Set up central logging and monitoring for the unit's network.
  • Ran the firewall, web proxy, backups and directory services (LDAP and Samba).

Education

Bachelor's degree in Computer Science

Universidade Nove de Julho (UNINOVE) · São Paulo, Brazil

Jan 2015 – Dec 2018