Senior IT Solutions Architect | SANS SEC540 Certified | Cloud Security & DevSecOps Specialist
20+ years building enterprise IT infrastructure and cloud security solutions across Angola's banking and energy sectors. Currently designing critical systems at Angola LNG that power 24/7 energy operations with 99.9% reliability.
current_role:
title: "IT Solutions Architect"
company: "Angola LNG OPCO"
location: "Luanda, Angola"
focus:
- "Cloud security architecture (Azure)"
- "DevSecOps automation"
- "Enterprise systems integration"
- "IT/OT convergence"
- "Digital transformation"const achievements2025 = {
certification: "SANS SEC540: Cloud Security & DevSecOps Automation ✅",
architectureAssessments: 11,
implementationCompliance: "91%",
criticalIncidents: 0,
intuneAutomation: {
timeReduction: "90%",
before: "2-3 hours per workstation",
after: "15-20 minutes per workstation",
status: "Enterprise template adopted"
},
entraIDProvisioning: {
manualHoursEliminated: "~40 hours/month",
benefit: "Improved security compliance"
},
mentorshipProgram: {
skillImprovement: "47.5%",
participants: ["Server Team", "End User Support"],
format: "Bi-weekly sessions with documented milestones"
},
uptime: "99.9%"
};Translation: Designed 11 production architectures with zero critical failures, automated deployments saving 90% of installation time, and eliminated 40+ hours of monthly manual work—all while mentoring team members to 47.5% skill improvement.
- 🏗️ Enterprise Architecture & Strategic Planning — Designing scalable, secure solutions for industrial operations
- 🔒 Cloud Security & DevSecOps — Implementing Zero Trust architecture and security automation
- ☁️ Cloud Governance — Azure architecture, hybrid infrastructure, IAM at scale
- 🏭 IT/OT Convergence — Bridging information technology and operational technology in energy sector
- 🎓 Knowledge Sharing — Mentoring emerging IT professionals and contributing to Angola's tech community
timeline
title Career Progression - From Helpdesk to Enterprise Architecture
1999-2004 : IT Helpdesk Support @ ECIL
: Foundation in troubleshooting & customer service
2004-2010 : System Administrator @ BFA (Banking)
: Infrastructure management in regulated environment
2010-2013 : Senior IT Technician @ Menshen
: Advanced support & infrastructure optimization
2013-2018 : Server Administrator @ Angola LNG
: Critical infrastructure for 24/7 energy operations
: AD cleanup, RAP remediation, 95%+ application availability
: WannaCry emergency response, Windows 10 pilot, SCCM 2016 migration
: LAD virtualization, patch management automation
2018-2020 : IT Architect Transition @ Angola LNG
: Digital Signatures (100% org adoption, 2020)
: MIM Stabilization & Wave 2 (2020)
: First ALNG Cybersecurity Training (2019)
: Chevron mentorship program (2019-2020)
2021-2022 : Performance Development Period
: Structured improvement through PIP, weekly reporting
: Architecture process formalization
2023-2024 : Sustained Turnaround
: "Visible improvements" noted in PPAP
: ISO 27001, AZ-500, BCS Architecture certifications
2025 : Excellence Achieved
: SANS SEC540 certified
: 11 assessments, 91% compliance, 0 critical incidents
: 90% deployment time reduction, mentorship program
Click to view active certifications
- ✅ SEC540: Cloud Security and DevSecOps Automation (Jun 2025)
- Credential:
29720485 - Focus: Cloud-native security, DevSecOps pipelines, infrastructure-as-code security
- Credential:
- ✅ Certified in Cybersecurity (CC) — Domains 1-3 (Sep 2024 – Sep 2027)
- Credential:
8cb11164-8d1c-4421-b5df-220339732fca - Security Principles — Fundamental security concepts and controls
- Incident Response, Business Continuity & Disaster Recovery — Response planning and resilience
- Access Control Concepts — IAM, authentication, authorization
- Credential:
- ✅ ISO/IEC 27001 Foundation (Dec 2023, no expiry)
- Credential:
ISFO1107883-2023-12 - Information Security Management Systems (ISMS)
- Credential:
- ✅ Cloud Security Knowledge (CCSK) Foundation (Dec 2023)
- Credential:
CNO-192799(via Koenig Solutions) - Cloud security architecture fundamentals
- Credential:
Click to view architecture certifications
- ✅ BCS Foundation Certificate in Architecture Concepts and Domains (Jun 2024)
- Credential:
CNO-234540(British Computer Society via Koenig Solutions)
- Credential:
- ✅ SFIA Fundamentals (Jun 2024)
- Skills Framework for the Information Age
- ✅ Enterprise Architecture Foundations — LinkedIn Learning (May 2025)
- ✅ Introduction to IT Architecture (2020) — LinkedIn Learning (Jan 2025)
Click to view cloud certifications
- ✅ AZ-500: Microsoft Azure Security Technologies (Nov 2023)
- ✅ Azure for Architects: Design for Identity and Security — LinkedIn Learning (Dec 2023)
- ✅ Migrating Storage to Azure — LinkedIn Learning (Jan 2025)
- 📚 AZ-305T00: Designing Microsoft Azure Infrastructure Solutions — Training completed (Jul 2022)
- Credential:
CNO-80291
- Credential:
- 📚 AZ-303: Microsoft Azure Architect Technologies — Training completed (Sep 2021)
- Credential:
CNO-32662
- Credential:
- ✅ Introduction to Cloud Computing — IBM via Coursera (Feb 2025)
- Credential:
X00TJ7C3DYXI
- Credential:
Click to view development certifications
- ✅ JavaScript Algorithms and Data Structures (Beta) (Mar 2024)
- ✅ JavaScript Algorithms and Data Structures (Jun 2023)
- ✅ Responsive Web Design (Jun 2023)
- HTML/CSS, responsive design, accessibility (a11y)
- View Certificate
- ✅ Excel: Creating a Basic Dashboard (Dec 2023)
- ✅ Building Your Team (Jun 2024)
- ✅ BE A DIGITAL CREATOR — GiraMondo Aprendizagem Criativa (Jun 2024)
- Digital storytelling, brand design, content creation
Click to view project management training
- 📚 CAPM Preparation Course — Koenig Solutions (Jun 2024)
- Credential:
CNO-234541 - Project management fundamentals, Agile methodologies, stakeholder management
- Credential:
- ✅ Building Your Team — LinkedIn Learning (Jun 2024)
Click to view Portuguese-language training
- ✅ Gestão dos Riscos de Cibersegurança nas Organizações (Oct 2023, 10 hours)
- Credential:
1103f50798fa4e13b5eeb0d8bbb1fea7 - Verify Certificate
- Credential:
- ✅ Privacidade e Segurança em Ambientes Digitais - Nível Avançado (Oct 2023, 25 hours)
- Credential:
0add1d3139474597a93348c101503034 - Verify Certificate
- Credential:
Click to view historical certifications
-
📌 Certified Ethical Hacker (CEH)
- Credential:
ECC12283994833 - Issued: Nov 2016 | Expired: Nov 2019
- Skills: Penetration testing, vulnerability assessment, ethical hacking
- Note: Current security knowledge maintained through ISC2 CC and SANS SEC540
- Credential:
-
📌 Computer Hacking Forensic Investigator (CHFI) v8
- Credential:
ECC95472310648 - Issued: Nov 2016 | Expired: Nov 2019
- Skills: Digital forensics, incident response, data recovery
- Note: Forensic capabilities maintained through continuous security training
- Credential:
- ✅ Exam 410: Installing and Configuring Windows Server 2012 (May 2013)
- Active Directory, virtualization, Windows Server administration
| Project | Description | Tech Stack |
|---|---|---|
| PowerShell Scripts | Security automation & infrastructure management scripts for hybrid Azure/on-prem environments | PowerShell, Azure, Active Directory |
| NetworkScannerProject | Network discovery, scanning, and monitoring tools for enterprise infrastructure | Python, Network Protocols |
| Project | Description | Tech Stack |
|---|---|---|
| nzila-gym-manager | Multi-tenant Gym Management SaaS platform with membership tracking, billing, and analytics | React, Node.js, MongoDB |
| Moduluxe | Full-stack real estate management platform with property listings and CRM | TypeScript, React, Node.js |
💡 Tip: These repositories showcase the intersection of enterprise security expertise and full-stack development capabilities.
const currentProjects = {
professional: [
"Implementing Zero Trust architecture for Angola LNG infrastructure",
"Automating security compliance reporting with PowerShell",
"Building DevSecOps pipelines for cloud-native applications",
"Designing IT/OT convergence architecture for industrial systems"
],
learning: [
"Advanced cloud security automation patterns (post-SEC540)",
"AI/ML integration in security operations (SOC automation)",
"Multi-cloud architecture strategies (Azure + AWS)",
"Enterprise architecture frameworks (TOGAF, Zachman)"
],
community: [
"Mentoring Server Team and End User Support staff",
"Writing Portuguese-language content on cloud security (infosecconnect.ao)",
"Contributing to Angola's growing technology ecosystem"
]
};"Enterprise architecture isn't just about systems—it's about building organizational capability. Technology transformation succeeds when we combine technical depth with systematic skill development and resilient problem-solving."
- 🔒 Security by Design — Not compliance theatre, but embedded security from architecture phase
- 🤝 Knowledge Over Hoarding — Open sharing creates stronger teams and better solutions
- 📈 Structured Growth — Continuous improvement through documented learning and mentorship
- 🌍 Context Matters — Global best practices adapted for local constraints and opportunities
- 📸 Visual Storytelling — Documentation should tell the story of systems and their business value
- 🎓 Resilience Through Adversity — My 6-year journey from IT Architect transition (2018) to demonstrated excellence (2025) taught me that systematic skill development, transparent communication, and organizational investment in people matter as much as technical certifications. Early wins like Digital Signatures (100% org adoption, 2020) and ALNG's first Cybersecurity Training (2019) proved capability even during performance challenges (2020-2022). Structured mentorship from Chevron architects and commitment to continuous improvement led to sustained turnaround by 2023 and excellence in 2025.
- ☁️ Cloud security architecture in regulated industries (banking, energy)
- 🔧 DevSecOps automation in Windows/Azure environments
- 🏭 IT/OT convergence in industrial and energy operations
- 🏗️ Building enterprise architecture practices from scratch in resource-constrained environments
- 📈 Career growth through structured development — I've navigated performance improvement plans and emerged stronger
- 🇦🇴 Working in Angola's technology sector — unique challenges and opportunities
- 📸 Documentary photography of industrial operations and infrastructure
- 💻 Hybrid cloud architectures balancing on-premises and cloud resources
- 🇵🇹 Portuguese — Native speaker
- 🇬🇧 English — Professional fluency (C2 level: reading, writing, speaking, comprehension)
Visit InfoSec Connect for articles on:
- Cloud security architecture in Portuguese
- DevSecOps automation tutorials
- Enterprise IT strategy for Angola's energy sector
- Documentary photography of industrial operations
2025 🎓 SANS SEC540 Certification | 11 Architecture Assessments | 91% Compliance
📊 90% Deployment Time Reduction | 40+ Hours/Month Automation Savings
👥 Mentorship Program: 47.5% Skill Improvement | 99.9% Uptime
2024 🏗️ BCS Architecture Certification | ISC2 CC Domains | SFIA Fundamentals
📚 6+ LinkedIn Learning Courses | freeCodeCamp Beta Certification
2023 🔐 ISO 27001 Foundation | AZ-500 | CCSK | 2x NAU Portugal Courses
2022 📚 Azure Training (AZ-305, AZ-303) | Structured Development Focus
🔄 Performance Improvement Plan Implementation
2021 🏢 Architecture Process Formalization | MIM DR Planning Goals
📖 Learning Curve Navigation | PIP Continuation
2020 💾 Digital Signatures Implementation (100% org adoption)
🔧 MIM Stabilization (May) & Wave 2 Enhancements
📋 Architecture Reviews: Exchange, SCCM, Call Manager goals
2019 🚀 First Full Year as IT Architect
🎓 First ALNG Cybersecurity Training (90% quality rating)
👨🏫 Chevron Mentorship Started (David Killion, July 22)
🏗️ Architecture Reviews: GIMS, MIM completed
📊 PIP Sessions Began | TOGAF Failed
2018 ⬆️ Promotion to IT Architect (September)
2017 🛡️ WannaCry Emergency Response | SCCM 2016 Migration
💻 Windows 10 Pilot | SafeCom Deployment | DFS Redesign
📊 95%+ Application Availability Maintained
2016 🔐 AD Cleanup & RAP Remediation | Audit Compliance Achieved
📦 LAD Virtualization | Patch Management Process Improvement
🔒 USB Media Block | RSI Guard Deployment | Sophos Reporting
2015 📡 Monitoring Standardization (AD, AV, Messaging, Backup)
🎫 Smartbadge Certificate Notifications | Microsoft RAP Remediation
2014 🏗️ IT Governance Foundation | Bechtel Systems Integration
🔧 Change Management & PMO Engagement Framework
2013 ⚡ Joined Angola LNG as Server Administrator (Energy Sector Entry)
🎯 Exchange Monitoring, Patch Management, Policy Development
2010 🏦 Transitioned from Banking (BFA) to Industrial Sector
2004 💼 Started Career in Banking Sector at BFA
1999 🎓 IT Career Launch at ECIL
"Transforming infrastructure challenges into architectural opportunities, one commit at a time."
⭐ If you find my work valuable, consider starring my repositories!
Status: Actively seeking collaboration opportunities in cloud security automation, enterprise architecture, and DevSecOps tooling for industrial environments.

