Seeing Without Decrypting: Cisco EVE's Approach
About Cisco's Encrypted Visibility Engine.
Read on LinkedIn →Please confirm you are not a robot to access the site.
Network and Security Engineer with over 12 years of experience in Data Centers, ISPs and Cloud. Specialist in BGP, ASN, SD-WAN, Network Security and Fortinet, with a strong background in architecture, projects and advanced troubleshooting. Experienced in Multicloud environments, IP backbone, ISO 27001 and PCI DSS.
Bachelor's degree in Computer Engineering from Universidade Paulista (2010).
Outside of work, I'm a Jiu-Jitsu black belt (1st degree). The mat teaches me to stay calm under pressure, to think before acting, and to be disciplined and consistent, the same skills I use when handling critical incidents. Training is what gives me balance in everyday life, between body and mind and between personal and professional life.
Led the migration from Cisco IWAN/DMVPN to Fortinet SD-WAN across 136 branches, with a HUB & SPOKE architecture, management via FortiManager/FortiAnalyzer, BGP and automation with Jinja.
Network architecture and projects for private Cloud and MSP customers; last level of escalation; ASN, BGP, OSPF; Juniper SRX, Fortinet and SonicWall NGFWs.
Migration of the BGP/IP backbone from Cisco/Nexus to Arista; BGP edge with Juniper MX204, IX.br and iBGP; Multicloud connectivity (AWS, Azure, Google, Oracle) over MPLS/IP.
LATAM MSS team managing over 1,500 Fortinet firewalls; SME for customers in the financial and payments sectors; Fortinet, Cisco, Palo Alto and Juniper NGFWs.
Network engineering and standardization for Data Center customers; restructuring of the network core with BGP/OSPF/full-mesh; IPv6 dual-stack planning.
Projects, RFCs and CAB; monitoring with Cacti, backups with RANCID, Fortinet firewall validation and deployment of corporate and guest WLAN.
Technical support to the sales team on infrastructure, security and networking solutions (Cisco, Fortinet, Imperva, Infoblox, Netscout, Skybox).
Implementation and operation of the Data Center's Cloud Computing network infrastructure; ASA firewalls, routing (RIP, EIGRP, OSPF), VLANs, STP, NAT/PAT.
Switching, wireless and security projects, plus technical pre-sales; wired and wireless solutions from site survey to deployment and post-sales support.
The articles are written in Portuguese.
About Cisco's Encrypted Visibility Engine.
Read on LinkedIn →Mitigating malicious traffic with Remotely Triggered Black Hole.
Read on LinkedIn →Network techniques to mitigate loops with out-of-path anti-DDoS solutions.
Read on LinkedIn →Continuation of the series on mitigating loops with anti-DDoS solutions.
Read on LinkedIn →An overview of layer 2 loops in networks.
Read on LinkedIn →Websites I built, published on GitHub Pages.
Website for a pet grooming shop, with services, a client gallery and WhatsApp booking.
Visit site →
Website for a Jiu-Jitsu and martial arts team, with disciplines, instructors, class schedule and location, in Portuguese and English.
Visit site →