Marlon Costa

Chief Technology Officer | Enterprise Architecture, Cloud & Cybersecurity

EasyTEM Brasil • Parttime

Dec 2018 - Present • 7 yrs 11 mos

At EasyTEM I'm responsible for the technology end to end: the platform's architecture, the cloud it runs on, and the security rules the team follows. In practice, I set the roadmap, decide which cloud services and automation we adopt, and write the standards for the SDLC, CI/CD, monitoring, security controls and incident response. I also work with the business side and with customers to turn what they need into technical decisions the platform can carry as it grows. That work has shortened our release cycles and lowered our risk exposure. Much of what my services here cover is work I do there myself, so my recommendations come from running a platform, trade-offs included. Core areas: SaaS architecture, cloud strategy, DevSecOps, CI/CD, cybersecurity governance and data protection.

Cloud Security Architect | Zero Trust, SASE/SSE & IAM

IBM • Fulltime

Aug 2021 - Aug 2025 • 4 yrs

For four years at IBM I designed, assessed and implemented cloud security architectures for large banking and enterprise customers, including Walt Disney and L'Oréal, across public, private and hybrid clouds. I led those engagements end to end, from the assessment to the architecture and the implementation oversight, working hands-on with the customer teams. Each design had to fit the customer's governance model and regulatory requirements, and I delivered the policies, standards and operating procedures that went with it. The banks were in Brazil, Chile and the United States, so the work had to account for LGPD and Central Bank of Brazil rules, along with GDPR, GLBA and CCPA guidelines. In data protection, I defined the classification scheme, applied controls by level and mapped where personal data lived. The Cloud Risk Assessments and Cloud Hygiene Assessments I delivered there found the security gaps and turned them into remediation roadmaps. It's the same kind of assessment I offer here. On the controls side, I designed and implemented CASB integration, secure remote access, network and identity segmentation, and Zero Trust architectures with SASE/SSE and ZTNA. In identity, I worked on SSO, SAML, federation and privileged access, along with data protection and encryption standards for cloud workloads. With the operations teams, I helped improve monitoring, threat detection, SIEM, vulnerability management and incident response. Core areas: Zero Trust, SASE/SSE, ZTNA, CASB, IAM, cloud governance, cloud risk assessment, SIEM, vulnerability management and data protection.

Cloud Architect | OpenStack, Automation & Cloud Migration

TOTVS • Fulltime

May 2019 - Aug 2021 • 2 yrs 3 mos

At TOTVS I built and ran the deployment pipelines for an OpenStack private cloud and for the applications running on it, using Jenkins, Ansible, Terraform and SaltStack. The work had two layers: a full OpenStack deployment in a controlled environment built for ISO 27001 compliance, and self-service provisioning inside it. The application pipeline covered build, tests, artifact, approval and rollback. Deployments that used to be fully manual and take days came down to minutes. I started on this alone and ended up leading the team, and when I left, the platform ran on more than 200 worker machines and over 1,000 VMs. I also led application migrations, from the initial assessment through cutover and post-migration stabilization.