Lucas Pires Simão

Senior DevOps Engineer & Cloud Architect

I build and operate AWS and Microsoft Azure platforms, with a focus on reliable application delivery, infrastructure automation and production visibility.

My work combines Kubernetes on EKS and AKS, Terraform, CI/CD and observability. Across hospitality, payments and digital services, I have rebuilt cloud environments, improved delivery workflows and supported PCI compliance.

10+ years in infrastructure and cloud operations
AWS and Microsoft Azure · Kubernetes on EKS and AKS
Experience in critical environments, compliance-heavy contexts and global infrastructure
Strong builder profile across internal tooling, AI automation and technical platforms

A personal site should explain how someone thinks, not only what they ship.

The part of engineering I care about most is building systems that remain operable under pressure. That usually means making delivery more predictable, infrastructure easier to reason about, incidents faster to understand and teams less dependent on tribal knowledge.

I prefer systems over isolated fixes

I am usually less interested in solving one incident than in removing the class of failure behind it. That means better delivery primitives, clearer observability, stronger defaults and less hidden operational knowledge.

Reliability is an engineering choice

Availability, rollback quality, incident recovery and performance behavior are all design decisions. The goal is not only uptime, but operational confidence.

Automation should reduce cognitive load

Good automation is not there just to save minutes. It reduces ambiguity, sharp edges and the amount of context a team needs to operate safely.

Security needs runtime realism

I have worked in PCI-oriented and security-sensitive environments, so I tend to think about controls in terms of how they behave in real delivery and runtime conditions, not only in policy documents.

Projects built in the open

Free to use, inspect, adapt and improve.

HARM icon

Home Assistant Remote Media

HARM

An open-source, local-first Android app that turns older tablets into focused camera and media displays controlled by Home Assistant automations.

Home AssistantAndroidRTSPLocal-first
Explore HARM ↗
notefor.one icon

Encrypted one-time note sharing

notefor.one

An open-source, self-hostable application for sharing end-to-end encrypted notes that disappear after one explicit reveal.

AES-256-GCMNode.jsPrivacySelf-hosted
Explore notefor.one ↗

Selected experience

Cloud platforms, application delivery and operational outcomes across hospitality, payments and digital services.

Dec 2023 – Present

QikServe

Senior DevOps Engineer

Digital ordering and payment solutions for the hospitality industry.

  • Automate AWS and Microsoft Azure infrastructure with Terraform, Shell scripting and PowerShell.
  • Deploy applications on EKS and AKS, and maintain AWS architectures using ECS, IAM, Auto Scaling, Lambda, S3, RDS and Control Tower.
  • Build CI/CD pipelines with Jenkins and Azure DevOps; monitor applications and infrastructure with Datadog and CloudWatch.
AWSMicrosoft AzureEKS / AKSTerraformAzure DevOpsDatadog

Key contribution

Introduced AI-assisted integration testing and took responsibility for PCI certification activities.

Jan 2023 – Dec 2023

Hyperlocal

Senior DevOps Engineer

Integrated platforms for payments, order management, and health and wellness services.

  • Automated AWS and Microsoft Azure infrastructure with Terraform, Ansible, Python and Shell scripting.
  • Managed containerized applications on ECS, EKS and AKS to support scalability and availability.
  • Built CI/CD pipelines with Azure DevOps, GitHub and Jenkins, with monitoring through Grafana, CloudWatch and ELK.
AWSMicrosoft AzureEKS / AKSTerraformAnsibleAzure DevOps

Key contribution

Rebuilt company deployment environments with a focus on FinOps, performance and infrastructure architecture.

Nov 2021 – Jan 2023

Worc

Senior DevOps Engineer

A social impact company connecting people with jobs in bars and restaurants.

  • Built CI/CD pipelines with GitLab and AWS CodePipeline, and managed ECS clusters and Docker images.
  • Implemented DNS routing with Cloudflare and Route 53, managed RDS databases and maintained pfSense VPN services.
  • Applied Auto Scaling and CloudWatch monitoring to support availability and incident response.
AWSECSGitLabCodePipelineTerraformCloudWatch

Key contribution

Built the company’s AWS account and cloud infrastructure from the ground up.

Jul 2020 – Dec 2021

Quero 2 Pay

DevOps Engineer

Nationwide payment technology company that evolved into a holding company.

  • Built automated application delivery with GitLab, AWS CodePipeline, ECS and Docker.
  • Implemented WAF protection and managed RDS, pfSense VPN, HashiCorp Vault and monitoring services.
  • Migrated Google Cloud services to AWS and supported PCI DSS, PCI PIN and payment network approval activities.
AWSECSTerraformVaultWAFPCI DSS

Key contribution

Built the deployment architecture from scratch and helped achieve PCI DSS compliance.

Areas I work across

AWS and Microsoft Azure infrastructure, Kubernetes operations, automated delivery and production observability.

AWSMicrosoft AzureKubernetes / EKS / AKSECSTerraformCI/CDJenkinsAzure DevOpsCloudflareDatadogDockerLinuxPythonBashPostgreSQL / MySQLWAFPCI DSSObservabilityIncident ResponsePlatform EngineeringAI Automation

Projects and systems I like to build

Outside of company roles, I tend to gravitate toward tooling, automation, documentation systems, AI for operations and small products where infrastructure thinking actually matters.

Internal tooling

Infrastructure documentation systems

I build systems that turn cloud and platform sprawl into usable operational documentation. The goal is not static documentation, but faster diagnosis, clearer ownership and more reliable change management.

PythonCloud APIsAutomationDocumentation
View project

AI + operations

AI-powered infrastructure assistants

I am interested in assistants that work with real infrastructure context and useful execution boundaries, especially for diagnosis, operational workflows and internal engineering support.

AIInfrastructure contextToolingAutomation
View project

Product + infrastructure

Audio transcription platform

A builder-style project that combines application delivery, backend operations and practical product thinking. It reflects how I like to work when product and infrastructure are tightly connected.

FastAPIDockerPostgreSQLOpenAI
View project

Security utility

Secure one-time sharing tooling

A small but useful example of applying infrastructure and security thinking to a focused product problem, with attention to minimal operational surface area and safe default behavior.

DockerSecurityDeploymentCloud hosting
View project

I also want this site to become a place for technical writing.

The long-term direction is to publish notes, deep dives, postmortems and practical pieces about infrastructure, cloud architecture, observability and AI-assisted operations.

What high-availability infrastructure work actually looks like in practice

Kubernetes operations after provisioning: where complexity really starts

Observability as an operational decision system, not a dashboard collection

Cloudflare, edge protection and runtime security tradeoffs

Platform engineering for teams that need less friction, not more abstraction

Using AI where it genuinely helps infrastructure work

Certifications

PCI Internal Security Assessor (ISA)

Payment Card Industry Professional (PCIP)

AWS Monitoring and Reporting

DevOps & Agile Culture

Professional DevOps · IGTI · 2021

Scrum Fundamentals · 2017

CPRE Foundation Level · IREB · 2016

Background

MBA in Cybersecurity · FIAP · 2023

Degree in Systems Analysis · FATEC · 2015

Degree in Marketing and Advertising · FACEF · 2006

Get in touch with me.

If you want to talk about infrastructure, cloud architecture, automation, observability or technical projects, feel free to reach out.