Skip to content
View fernan-89's full-sized avatar

Block or report fernan-89

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
fernan-89/README.md

Andre Fernandes

Solutions Architect · Staff Engineer · Cloud & Distributed Systems

🇺🇸 English · 🇧🇷 Português


🇺🇸 English

I design scalable, resilient, business-aligned architectures. My path runs from help desk and datacenter operations to leading Cloud Ops teams and, since 2021, Senior Solutions Architect at Itaú Unibanco, where I drive modernization, architectural governance and secure delivery across LATAM units.

On GitHub I keep a hands-on lab: ThinkLab, a platform of reactive microservices modeled after the BIAN (Banking Industry Architecture Network) service domains, plus automation and data tooling for my home lab.

🔭 What I'm working on

  • ThinkLab Platform — Java 21 + Micronaut 4 + Project Reactor microservices using hexagonal architecture, DDD and BIAN behavior qualifiers (initiate, retrieve, update, control).
  • Observability & reliability — OpenTelemetry / W3C Trace Context, reactive MDC bridging and SRE forensics.
  • Secure by default — distroless non-root images, read-only filesystems, AOT builds and Kubernetes / OpenShift manifests.
  • AI-assisted engineering — building software and multi-agent workflows with Anthropic's Claude and prompt engineering.

📌 Featured projects

ThinkLab — BIAN-aligned reactive microservices platform

Every service uses Java 21, Micronaut 4, Project Reactor, hexagonal architecture, ADRs and distroless non-root images.

Repository What it is Highlights
thinklab-platform Local stack, end-to-end runner and cross-service docs that tie the platform together Docker Compose · PowerShell · Postman
thinklab-service-kit Shared kit: W3C tracing, Reactor MDC bridge, health warm-up, transactional outbox → NATS JetStream Java 21 · Micronaut · NATS
micronaut-platform-gateway-service Single public entry point: routing by BIAN service domain, rate limiting, bearer-token verification Java 21 · Micronaut · Reactor
micronaut-hash-token-registry-service Sovereign identity: cryptographic hash-token lifecycle with forensic audit MongoDB · OpenTelemetry
micronaut-party-authentication-service Tenant-scoped user IAM: credentials, sessions and JWT rotation JWT · MongoDB
micronaut-party-reference-data-directory-service Organisations, units, contacts and billing MongoDB
micronaut-it-asset-registry-service IT asset inventory lifecycle with an immutable audit ledger MongoDB
micronaut-it-operation-window-service Maintenance-window scheduling with collision and impact detection MongoDB
micronaut-notification-dispatch-service Event-driven notification delivery from platform domain events NATS JetStream · MongoDB

Tools & home lab

Repository What it is Highlights
home-lab-scripts Paired PowerShell + Bash utilities for networking, inventory, Git, Docker and Terraform PowerShell · Bash · Terraform
hardware-collection 500+ synthetic enterprise IT asset records (hardware, cloud, software, governance) JSON
xencelabs-quick-keys Macro-pad profiles for development (IntelliJ, DataGrip) and gaming Config

All repositories are licensed under the PolyForm Strict License 1.0.0: you may read and use them for noncommercial purposes only; modification, redistribution and commercial use require a separate license.

🧭 Career

  • Senior Solutions Architect @ Itaú Unibanco (2021 – present) — modernization, architecture reviews and DevSecOps for Credit Recovery, International Units and PJ Pricing & Customer Engagement.
  • Cloud Ops Team Leader / Analyst @ BRLink (2019 – 2021) — AWS operations, Infrastructure as Code, automation and observability.
  • Senior IT Infrastructure Analyst @ ST IT (2019) — AWS, Docker and Elastic Stack.
  • IT Infrastructure & NOC (2015 – 2019) — high-availability datacenters, VMware, networking, Zabbix and Grafana.
  • Technical Support & Service Desk (2010 – 2015) — UOLDIVEO, todo! and Connectcom.

🎓 Education & certifications

  • Postgraduate in Software Architecture and Solutions — IGTI
  • B.Sc. in Information Technology — Centro Universitário Nove de Julho
  • AWS Certified Security – Specialty · Solutions Architect – Associate · Cloud Practitioner
  • Itaú Unibanco: Solutions Architecture Foundation · Associate Privacy Champion
  • Leading SAFe 4.5 · O'Reilly (Software Architecture, Distributed Systems, Cloud Native, Docker) · Generative AI at Work · Claude Architect Foundations · Architecture as Code

🇧🇷 Português

Projeto arquiteturas escaláveis, resilientes e alinhadas ao negócio. Minha trajetória vai do help desk e operação de datacenter à liderança de times de Cloud Ops e, desde 2021, Arquiteto de Soluções Sênior no Itaú Unibanco, onde conduzo modernização, governança arquitetural e entrega segura em unidades da América Latina.

Aqui no GitHub mantenho um laboratório prático: ThinkLab, uma plataforma de microsserviços reativos modelada a partir dos service domains do BIAN (Banking Industry Architecture Network), além de ferramentas de automação e dados para o meu home lab.

🔭 No que estou trabalhando

  • Plataforma ThinkLab — microsserviços em Java 21 + Micronaut 4 + Project Reactor com arquitetura hexagonal, DDD e behavior qualifiers do BIAN (initiate, retrieve, update, control).
  • Observabilidade e confiabilidade — OpenTelemetry / W3C Trace Context, propagação de MDC em fluxos reativos e forense de SRE.
  • Seguro por padrão — imagens distroless non-root, filesystem somente leitura, builds AOT e manifestos Kubernetes / OpenShift.
  • Engenharia assistida por IA — desenvolvimento de software e fluxos multiagentes com o Claude, da Anthropic, e engenharia de prompts.

📌 Projetos em destaque

ThinkLab — plataforma de microsserviços reativos alinhada ao BIAN

Todos os serviços usam Java 21, Micronaut 4, Project Reactor, arquitetura hexagonal, ADRs e imagens distroless non-root.

Repositório O que é Destaques
thinklab-platform Pilha local, runner end-to-end e documentação transversal que integram a plataforma Docker Compose · PowerShell · Postman
thinklab-service-kit Kit compartilhado: tracing W3C, ponte MDC no Reactor, warm-up de health, outbox transacional → NATS JetStream Java 21 · Micronaut · NATS
micronaut-platform-gateway-service Ponto único de entrada: roteamento por service domain BIAN, rate limiting e verificação de bearer token Java 21 · Micronaut · Reactor
micronaut-hash-token-registry-service Identidade soberana: ciclo de vida de tokens de hash criptográficos com auditoria forense MongoDB · OpenTelemetry
micronaut-party-authentication-service IAM de usuários por tenant: credenciais, sessões e rotação de JWT JWT · MongoDB
micronaut-party-reference-data-directory-service Organizações, unidades, contatos e faturamento MongoDB
micronaut-it-asset-registry-service Ciclo de vida do inventário de ativos de TI com ledger de auditoria imutável MongoDB
micronaut-it-operation-window-service Agendamento de janelas de manutenção com detecção de colisão e impacto MongoDB
micronaut-notification-dispatch-service Envio de notificações orientado a eventos de domínio da plataforma NATS JetStream · MongoDB

Ferramentas e home lab

Repositório O que é Destaques
home-lab-scripts Utilitários em pares PowerShell + Bash para rede, inventário, Git, Docker e Terraform PowerShell · Bash · Terraform
hardware-collection Mais de 500 registros sintéticos de ativos de TI corporativos (hardware, cloud, software, governança) JSON
xencelabs-quick-keys Perfis de macro pad para desenvolvimento (IntelliJ, DataGrip) e jogos Config

Todos os repositórios usam a PolyForm Strict License 1.0.0: podem ser consultados e usados apenas para fins não comerciais; modificação, redistribuição e uso comercial exigem uma licença específica.

🧭 Carreira

  • Arquiteto de Soluções Sênior @ Itaú Unibanco (2021 – atual) — modernização, validações arquiteturais e DevSecOps em Recuperação de Crédito, Unidades Internacionais e Pricing & Engajamento de Clientes PJ.
  • Líder / Analista de Cloud Ops @ BRLink (2019 – 2021) — operação AWS, Infraestrutura como Código, automação e observabilidade.
  • Analista de Infraestrutura de TI Sênior @ ST IT (2019) — AWS, Docker e Elastic Stack.
  • Infraestrutura de TI & NOC (2015 – 2019) — datacenters de alta disponibilidade, VMware, redes, Zabbix e Grafana.
  • Suporte Técnico & Service Desk (2010 – 2015) — UOLDIVEO, todo! e Connectcom.

🎓 Formação e certificações

  • Pós-graduação em Arquitetura de Software e Soluções — IGTI
  • Bacharelado em Tecnologia da Informação — Centro Universitário Nove de Julho
  • AWS Certified Security – Specialty · Solutions Architect – Associate · Cloud Practitioner
  • Itaú Unibanco: Arquitetura de Soluções Foundation · Associate Privacy Champion
  • Leading SAFe 4.5 · O'Reilly (Arquitetura de Software, Sistemas Distribuídos, Cloud Native, Docker) · Generative AI at Work · Claude Architect Foundations · Architecture as Code

🧰 Tech Stack & Tools / Tecnologias e Ferramentas

Languages & Frameworks
Java Micronaut NodeJS Python

Architecture, Modeling & Governance
C4 Model Structurizr Draw.io Microsoft Visio

Cloud, Containers & AI
AWS Azure OpenShift Kubernetes Docker Anthropic

Infrastructure as Code, CI/CD & Automation
Terraform GitHub YAML PowerShell Bash

Observability & Monitoring
ElasticStack Grafana Zabbix Dynatrace New Relic

Databases & Storage
MongoDB MySQL MS SQL Server

Enterprise Infrastructure, OS & Hardware
HP Dell IBM Linux Ubuntu CentOS Windows Server VMware

Networking & Security
Cisco Fortinet

Home Lab & Hardware
Home Lab Home Servers ThinkPad

Pinned Loading

  1. micronaut-hash-token-registry-service micronaut-hash-token-registry-service Public

    ThinkLab Hash Token Registry - sovereign identity + forensic audit (BIAN, Micronaut, reactive)

    Java

  2. home-lab-scripts home-lab-scripts Public

    Cross-platform PowerShell and Bash utilities for home lab automation, network diagnostics, hardware inventory, Git, Docker and Terraform.

    PowerShell