Rodolfo Lopes | Curriculum Vitae

Homelab

It is the most important element of my portfolio. It is a self-hosted Kubernetes cluster (k3s) that serves 3 public apps (2 of them with authentication). It is fully managed through GitOps, and the code is publicly available in a GitHub repository. Its main features are:

• FluxCD for GitOps
• SOPS for cryptography
• Renovate + CronJob for automatic dependency updates
• Traefik for ingress
• Prometheus/Grafana for observability
• Security: workloads are limited to a non-root user with a dedicated filesystem, secrets are encrypted with SOPS, public exposure is done via CloudFlare Tunnel

Webapp fogos

It is a simple SPA (publicly exposed through the homelab) that shows live information about wildfires in Portugal. Besides some utility it may have, it represents the full path from commit to production:

1. I write the code
2. The container image is built and published in GHCR by GitActions
3. Renovate creates a Pull Request for the change
4. I review and approve the change
5. The new version is served.

Webapp blog

It’s my personal blog (implementation details in the about page), where I document the implementation of my projects. Its relevance for DevOps has to do with the pipeline for content writing and publishing:

1. I write a note in Obsidian and set draft: false in the frontmatter
2. Obsidian automatically pushes to the blog-posts repository
3. GitActions (using rsync) filter the files by draft: false and pushes to the blog repository
4. The push triggers Vercel’s Git integration to build and deploy the app with the new posts

Technical Consultant

Bridge351 @ Cyberinspect (NOS SGPS) | February 2025 > present

• Created a pipeline to get OWASP SAMM v2 assessments from customers and generate documentation. Instead of filling a tedious XLSX template, the customer would answer to an optimized web survey. From our internal side, the documentation was automatically created.
• Created a malware testing environment with three layers (OS > KVM > Nested Virtualization with Kata), a Node dummy app to trigger the malware, and the malware itself. It was meant to measure the effects of a classic recursive zip bomb in terms of CPU consumption, RAM and storage.
• Created a PoC for a platform to monitor breach data and to produce notifications that consumes data from the Have I Been Pwned (HIBP) API and sends notifications to the service subscribers. It was adopted for further development and turned into a NOS product (“ID Watch”).
• Created a PoC for an API-first, event-driven, Domain Reconnaissance Pipeline that accepts a domain name and fans out work through RabbitMQ to a set of containerized workers. The system collects data from the targets and produces a structured report covering subdomain exposure, CMS/technology fingerprinting, and known vulnerabilities. It was adopted for further development and it’s still under development.
• Reproduced the exploitation of the vulnerabilities that were found by the NOS Offensive Security team while testing Cyberinspect’s main application. All exploits were validated and documented, and I’ve also found more vulnerabilities.
• Tested AI-powered offensive tools, specifically open-source projects like Cybersecurity AI (CAI) and Strix, with the purpose to update our team knowledge about AI in cybersecurity.
• Created assessments to determine cybersecurity compliance obligations, specifically for the Portuguese certification framework (QNRCS). The assessments weren’t implemented, because, meanwhile, the framework was deeply upgraded by new legal obligations.

Teaching Assistant (Cybersecurity)

Code for All | September 2023 > February 2025

• Designed and deployed intentionally vulnerable environments in AWS, so that students can perform the bootcamp’s final project (a complete Penetration Test). These environments were implemented in the company
• Produced educational materials, such as contents for lectures, slidedecks and practical exercises (infrastructure and scripting) for the cybersecurity operations bootcamp. These materials were implemented in the company
• Delivered lectures on Operating Systems (mainly Linux), networking, and cybersecurity operations. The feedback from the students was always excellent
• Helped students to troubleshoot errors and misconfigurations that interrupt and suspend the flow of an exercise. The feedback from the students was always excellent

Teaching Assistant (Full-Stack Development)

Code for All | January > September 2023

• Delivered lectures on Object-Oriented Programming and Software Development in Java. The feedback from the students was always excellent
• Helped students to debug errors and misconfigurations that interrupt and suspend the flow of a coding exercise. The feedback from the students was always excellent.

Professor of Philosophy

Universidade de Brasília | 2015 > 2022

• Teached Ancient Greek Philosophy
• Supervised master and doctoral research projects
• Published books and scientific articles
• Edited a scientific journal
• Managed a post-graduate programme in Metaphysics

Doctoral Researcher

Fundação para a Ciência e a Tecnologia | 2009 > 2014

• Developed and implemented a research project on Plato’s philosophy
• Presented current research in conferences

Junior Researcher

Fundação para a Ciência e a Tecnologia | 2006 > 2009

• Assisted senior researchers
• Implemented a fully digital scientific publisher
• Implemented an e-learning master programme on Classics

Academic

• PhD in Poetics and Hermeneutics | Universidade de Coimbra | 2009-2014
• Master in Classics | Universidade de Coimbra | 2006-2009
• Bachelor in Portuguese and Classics | Universidade de Coimbra | 2002-2006

Non-academic

• Cybersecurity Operations Bootcamp | Code for All | September 2023 > February 2024
• Full-Stack Development Bootcamp | Code for All | September > December 2022

Human Languages

• Portuguese: native
• English ●●●●●
• Spanish ●●●●○
• Italian ●●●○○
• French ●●○○○

Programming Languages

• Java ●●●●○
• Python ●●●●○
• JavaScript/TypeScript ●●●●○
• Bash ●●●●○
• Go ●●○○○
• Powershell ●●○○○