Leonardo H.

Is your mission-critical infrastructure truly resilient, or just "online"? I bring over 14 years of hands-on experience engineering high-availability environments and securing government-scale networks. Having served as a Technical Advisor for the State Treasury of Espírito Santo (SEFAZ-ES), I specialize in designing architectures that withstand massive loads and sophisticated threats. Currently, I am a Master’s researcher in Adaptive DDoS Mitigation using Machine Learning, applying advanced, research-backed security logic to protect your operations. Core Competencies & Technology Stack: 1. Virtualization, HCI & Cloud Infrastructure I design and migrate fault-tolerant clusters, ensuring zero data loss during platform transitions. Virtualization: Proxmox VE (High Availability, Ceph, Cluster Design), VMware ESXi/vCenter, Nutanix (HCI), Hyper-V. Cloud Platforms: AWS (Amazon Web Services), Azure Fundamentals, and Hybrid Cloud architectures (On-prem + Cloud integration). 2. Storage, Backup & Disaster Recovery Robust data protection strategies ensuring business continuity. Backup Solutions: Veeam Backup & Replication, Proxmox Backup Server (PBS). Storage: HPE 3PAR, NetApp, Ceph (Software-Defined Storage), ZFS. Strategy: 3-2-1 Backup Rule implementation, Ransomware Protection, and rapid Disaster Recovery execution. 3. Advanced Network Engineering Deep expertise in multi-vendor environments, from data center switching to enterprise wireless. Cisco: ACI (Leaf-Spine Architecture), ISE, Core Switching. Juniper: L3 Switching, Core Network Design, Core and Edge Firewalls (SRX). Connectivity: BGP, OSPF, MPLS, VLANs, IPsec VPN. Wi-Fi Enterprise: Aruba, Aerohive (Extreme Networks), and FortiAP controller management. 4. Cybersecurity & Perimeter Defense Implementation of defense-in-depth strategies, vulnerability management, and secure gateways. Firewalls & WAF: Checkpoint, Fortinet (FortiGate), pfSense, F5 BIG-IP (LTM/WAF). Security Tools: OpenVAS (Greenbone), SonarQube (DevSecOps), Metasploit, Wireshark, Maltego. Endpoint Security: Symantec Endpoint Protection, Kaspersky. 5. Email, Messaging & Traffic Control Specialist in managing complex messaging flows, high-performance routing, and middleware. Email Infrastructure: Microsoft Exchange, Zimbra Collaboration Suite, Symantec Mail Gateway, Postfix. Messaging & Middleware: RabbitMQ (Message Broker & Queuing). Proxies & Load Balancing: HAProxy (Clustering & Maps), Forcepoint Content Gateway, Nginx (Reverse Proxy), Squid. 6. Systems Engineering, Web Apps & Tools Turning chaotic environments into documented, automated, and observable systems. Application Support (LMS/Web): Moodle Administration & Tuning, Apache/Nginx Web Server Optimization. IT Management & Documentation: GLPI implementation (Asset/Ticket Mgmt), Passbolt (Password Security), phpIPAM (IP Address Management), Technical Reporting, SOPs & Infrastructure Documentation. Observability: Zabbix, Graylog, ELK Stack, Wazuh. DevOps & Automation: Git, GitLab CI, Bash Scripting, Python, PowerShell. Why Work With Me? Proven Scale: Managed infrastructure for thousands of users in government and healthcare sectors. Disaster Recovery Specialist: Successfully recovered "unrecoverable" systems, including corrupted LDAP directories and massive mailbox stores. Results-Driven: I don't just "keep servers online"—I build infrastructures that are robust, documented, and ready for real business growth. If you need a partner who combines the strategic vision of an architect with the hands-on precision of a sysadmin, let's connect.