carneirofc

carneirofc // about

Cláudio Ferreira Carneiro

DevSecOps & Platform Engineer working the full delivery chain — from low-level control systems and backend services to internal developer platforms, CI/CD pipelines, and the corporate automation that ships software at scale.

BrazilDevSecOps / Platform Engineer · Full-Stack & Backend Developer

Hi, I'm Cláudio

I'm a DevSecOps / Platform Engineer and full-stack developer who works across the whole delivery chain — from low-level control systems and backend services all the way up to internal developer platforms, CI/CD pipelines, and corporate automation (IDP, Ansible, Terraform) that get software shipped. I'm just as comfortable writing product code as I am building the paved roads and infrastructure that let other developers move faster.

My path is a wide one. I started out writing real-time control software for a particle accelerator, grew into enterprise DevSecOps and platform engineering across an environment of 1200+ CI/CD pipelines, and today I build cloud-native, AI-augmented applications and the infrastructure they run on. I bring deep, hands-on experience with Databricks, Azure, AWS, and OpenShift, and application development in Go, .NET, Python, C, and C++.

What I do

Platform Engineering & Developer Experience

  • Founding member of the Platform Engineering team, building an Internal Developer Platform (IDP) on the Backstage framework with TechDocs and custom MkDocs plugins to standardize documentation-as-code.
  • Custom CI/CD tooling: I've authored extensions for Azure DevOps (both on-prem Server and Services), pipeline tasks, GitHub Actions, and centralized-config scaffolders in .NET.
  • Helm charts and paved-road deployment patterns for teams; deployment and operation of Red Hat Build of Keycloak (RHBK) as the identity platform.

DevSecOps & Secure Software Supply Chain

  • Owned and scaled an environment of 1200+ CI/CD pipelines at Energisa, working in solutions architecture and DevSecOps within the Architecture and DevSecOps Department.
  • End-to-end software supply-chain security: SAST, DAST, and SCA gates, SonarQube quality gates, and JFrog Artifactory + JFrog Xray for artifact management and vulnerability scanning.
  • MLOps and DataOps pipelines feeding data and model workflows.

Cloud Infrastructure & Orchestration

  • Containers and orchestration: OpenShift (Red Hat), Kubernetes, and Docker, with Helm-templated deployments.
  • Deep, hands-on cloud experience across Databricks, Azure, AWS (Lambda / SAM / S3), and Google Cloud.
  • Infrastructure as Code with Ansible and Terraform.

Software Development (polyglot)

  • Go — services, media/streaming servers, and infrastructure tooling.
  • TypeScript / JavaScript — React front-ends, Express APIs, CLIs, and personal products.
  • C# / .NET — CLI utilities, code scaffolders, and ANTLR-based parsing.
  • Python — automation, data pipelines, and APIs (FastAPI / Flask).
  • C / C++ — embedded and control-system software and hardware interfaces.

Data & AI Engineering

  • Data lakehouse pipelines with Apache Airflow and Databricks.
  • Emerging AI/LLM work: Model Context Protocol (MCP) servers, vector databases (Qdrant), and AI assistant applications.

Where I've been

  • DevSecOps Engineer · EnergisaEnergy / Utilities sector · Solutions Architecture & DevSecOps, Architecture and DevSecOps Department — Engineered and secured a delivery environment of 1200+ CI/CD pipelines: SAST / DAST / SCA gates, SonarQube, and JFrog Artifactory + Xray across the software supply chain, plus MLOps/DataOps pipelines. A founding member of the Platform Engineering team, I helped stand up the Backstage-based IDP, authored Azure DevOps extensions (on-prem and Services), built Helm charts, and deployed the RHBK identity platform.
  • Control & Scientific Systems — Built and operated control-system software for the Sirius synchrotron light source (CNPEM/LNLS): EPICS IOCs, hardware interfaces, archiver tooling, and a full EPICS-to-email alerting stack spanning Python, TypeScript, and Ansible-provisioned Docker infrastructure.
  • Cloud-Native & AI (current) — Building products in Go and TypeScript, self-hosting on OpenShift/Kubernetes, and working hands-on with MCP, vector search, and LLM-assisted development.

Education & Certifications

  • Postgraduate Specialization in Software Projects for the Era of Data, Sensors and AIUFJF.
  • Postgraduate Specialization in Software EngineeringPUC.
  • Control and Automation Engineering (bachelor's) — CEFET-MG.
  • Technician in Industrial InformaticsCEFET-MG.
  • IA006C — Machine Learning — a standalone graduate discipline at UNICAMP (FEEC), taken as a special student (not a degree).
  • Docker Certified Associate (DCA) track — Docker, Swarm, Kubernetes.
  • Amazon EKS and Google Kubernetes Engine (GKE) — container orchestration on managed Kubernetes.
  • Google Cloud — Core Infrastructure Fundamentals; Big Data & Machine Learning.
  • Linux Essentials and Infrastructure as Code with Ansible.

Selected publications

In short

I'm a T-shaped engineer with deep roots in DevOps and platform engineering and broad, production-tested reach across backend, full-stack, control systems, and AI-native tooling — someone who can build the product and the platform it runs on.

Off the clock, I'm learning game development from scratch — a C++23 sidescroller on raylib, no engine — for the pure craft of it.

Want to talk? Reach me on GitHub, LinkedIn, or by email.

Skills

Languages

GoC#/.NETPythonC/C++TypeScriptJavaScriptJava

Web & Frameworks

Next.jsReactNode.jsExpressFastAPI

Platform

OpenShiftKubernetesDockerDocker SwarmHelmBackstageRHBKTechDocs/MkDocsAnsibleTerraformEPICS Control System

DevSecOps

Azure DevOpsGitHub ActionsJFrog ArtifactoryJFrog XraySonarQubeSASTDASTSCA

Cloud

AzureAWSGoogle CloudDatabricks

Data & AI

MLOpsDataOpsAirflowDatabricksAzure Data FactoryConfluent KafkaQdrantMCP