>
Lucas Barbosa Silva
Platform Engineer
Resume Email
Platform Engineer • Cloud Security • GRC • Observability

Platform engineering
for secure, reliable systems.

IaC automation, IAM/SSO guardrails, and observable operations—designed for least privilege, compliance, and fast delivery.

Featured case studies

View all →
FinOps

60% AWS cost reduction (Casai)

60% cost reduction in 3 months via infra optimization—without compromising operations.

AWS FinOps ECS/EKS
Casai • 2022–2023
IaC

EKS foundations with Karpenter (Apura)

EKS platform foundations with Karpenter autoscaling, Bottlerocket nodes, and workload isolation.

EKS Terraform Security
Apura • 2024–Present
GRC

GitHub org controls as code (Apura)

Terraform-managed org standards with approval flows, least privilege, and auditable access.

GitHub Terraform Compliance
Apura • ongoing
Stack: Terraform • AWS/GCP • EKS/ECS • IAM Identity Center (SSO) • GitHub Actions • Grafana Cloud • OpenTelemetry • ECR/Inspector

Experience

Open full resume →
2024–now
Platform Engineer
Apura Cyber Corp • Remote
Guardrails: IAM/SSO (Identity Center) via Terraform • least privilege • secrets & vuln scanning • auditable access
EKS rebuilt as IaC

Rebuilt/migrated EKS + supporting infra into a reproducible Terraform-managed foundation.

  • GitHub Enterprise governance as code (repos/users/teams/permissions)
  • AWS IAM Identity Center lifecycle automation
  • Central observability with Grafana/Prometheus/Loki + APM
2022–2023
Site Reliability Engineer
Casai • Remote
Guardrails: least privilege • SSO • Secrets Manager • WAF • SIEM
60% AWS cost savings

Optimized infrastructure and delivered 60% AWS cost savings within the first three months.

  • Multi-cloud/multi-region: AWS/GCP, ECS/EKS/Elastic Beanstalk
  • Security controls: least privilege, SSO, Secrets Manager, WAF, SIEM
2017–2021
Site Reliability Engineer
Vamo • Remote
Guardrails: PCI DSS compliance • security audits • monitoring & alerting
PCI DSS recertification leadership

Led compliance recertification efforts while modernizing infra toward containers and managed services.