André Fernandes

- Architected and implemented a highly scalable and fault-tolerant serverless recruitment application on AWS, reducing operational costs to the customer by around 98%.

- Leveraged IaC using AWS CDK (using Golang), enabling version control, automated deployments, and streamlined infrastructure changes.

- Developed backend services with AWS Lambda (Go) and Amazon API Gateway, securing integrations with IAM Authorisers and managing user authentication via Cognito User Pools.

- Optimised database performance and costs by implementing a Amazon DynamoDB "single-table" design.

- Ensured secure and efficient file storage/access using Amazon S3, leveraging IAM/Bucket policies and pre-signed URLs.

- Configured and deployed production frontend and administration websites using Amazon S3, AWS CloudFront, (secured with OAM), configured with appropriate IAM policies using principles of least privilege.

- Implemented robust, clean and idiomatic Go code, with industry recommended software development practices, including SOLID, data validation for integrity, and OAuth 2.0 OIDC authorisation middleware for granular access control.

- Used AWS CloudWatch Logs, Metrics, Alarms and Dashboards for logging and monitoring.

- Feature development, unit and end to end tests, code review and bug fixes for a highly security sensitive platform

-Database Queries (SQL) - Creation of database queries and deployment to Heroku Dataclips

- Java (Spring Boot) - Developed several features for a new API platform aimed for rendering of dynamic PDFs using XML transformations, leveraging XSLT stylesheets and Apache FOP.

- Full audit of existing NPM packages by identifying existing vulnerabilities and accessing their potencial impact on the existing code base in terms of security. Learned how to effectively fix/replace vulnerable package and create issues on existing open source package repositories.

- Contribution to the existing CICD workflow in Github Actions, with bug fixes and speed/security enhancements - managed to save up to 30% of the CICD running time using caching strategies and eliminating unnecessary steps.

- Learned how to effectively use Astro Framework to rapidly and efficiently deploy customer facing websites. Contributed to the creation of new website features and created responsive and interactive components.

- Full audit of the existing AWS infrastructure in order to identify opportunities for costs reduction - successfully identified unnecessary API calls coming from Datadog that were boosting costs, and reduced existing costs on nearly 90%.

- Trained, reviewed and advised on how to effectively use Github Actions and IaC tools like AWS CloudFormation to deploy files to protected S3 buckets on demand through Github Actions triggers.

- Implemented robust authentication and authorization mechanisms, including classic (username/password), JWT, and role-based access control.

- Ensured data security using industry-standard encryption practices.

- Integrated Redis caching to improve application responsiveness and performance.

- Leveraged AWS SDK for secure secrets management via AWS Secrets Manager with asynchronous fetching, and for logging/monitoring using AWS CloudWatch and Amazon OpenSearch.

- Built and maintained Dockerfiles and docker-compose.yaml for isolated, streamlined local development environments.

- Conducted extensive API documentation and testing using Swagger and Postman.

- Developed high-performance RESTful CRUD APIs using the Gin Gonic framework.

- Wrote clean, idiomatic Go code, incorporating data validation, authentication/authorization middleware, logging, and SOLID principles.

- Integrated AWS SDK for CloudWatch logging and securely accessing secrets via AWS Secrets Manager .

- Configured and managed REST API endpoints via Amazon API Gateway.

- Built custom authorisers using AWS Lambda in conjunction with AWS Cognito Identity Pools for granular access control.

- Designed and implemented full CI/CD pipelines for Node.js APIs using AWS CodePipeline, CodeBuild, and CodeDeploy.

- Deployed and managed static websites and APIs using AWS services including EC2, S3, and CloudFront.

- Managed DNS configurations using Cloudflare and Amazon Route 53.

- Improved availability and scalability through AWS Load Balancers and AutoScaling Groups, enabling blue/green deployments effectively mitigating downtime.

- Managed version control and release workflows using GitHub Actions.