I operate where identity, cloud platforms, operational resilience, data protection, and AI agents intersect — transforming ambiguous enterprise risk into hardened systems engineered to endure under real pressure.
My work connects deep engineering precision to executive business consequence. From authentication tokens and multicloud identity architecture to resilience decisions, automation, and sustainable cost reduction.
Worked on IAM architecture and governance for over 45,000 accounts at Itaú Unibanco. Led the strategic migration project from IBM ISAM to Azure Entra ID, deployed automated identity lifecycle workflows with SailPoint IdentityIQ, Conditional Access, and adaptive MFA, cutting critical access lead time by 40% aligned with ISO 27001 and NIST.
Worked on enterprise architectural assessments at Avanade (Microsoft) for US clients. Engineered multiregion failover and resilience topologies in Azure, eliminating over 40 single points of failure (SPOFs), reaching 99.99% service availability, and rolling out cloud-native posture controls with Azure Defender for Cloud and Health Family.
Worked on prompt engineering, enterprise RAG pipelines, and business task agentification using LangGraph and CrewAI. Engineered runtime guardrails to prevent authority escalation across autonomous agents, and orchestrated the enterprise rollout of Microsoft Copilot Studio and DEX, enforcing strict data boundaries and Graph authorization.
Modernized the engineering infrastructure at TAESA by establishing a DevOps culture, automated CI/CD pipelines in Azure DevOps, and container orchestration with Docker and Kubernetes. Engineered proactive observability using Dynatrace, Datadog, and Grafana, deploying Python and PowerShell automations to accelerate delivery and operational stability.
Worked on managing Dell VxRail hyperconverged infrastructure (VMware with 300+ VMs) at PRIO, spanning corporate offices and offshore vessels (FPSOs). Engineered high availability for SAP S/4HANA, satellite link redundancy, secure remote access via BeyondTrust, and hybrid backup routines with NetApp and Amazon S3.
Modernized the operational cost structure at TAESA through disciplined FinOps practices, delivering a 30% reduction in OpEx (R$ 12 million saved) and a 40% reduction in Microsoft/Azure licensing costs. Led the full migration project of the SAP S/4HANA ecosystem to private cloud and spearheaded the delivery of a R$ 2.5M corporate Datacenter.
Led cross-functional teams of up to 15 engineers and analysts across multinational operations. Planned and deployed the entire IT infrastructure for the Sheraton Santos hotel for Marriott International — the first LATAM integration following the Marriott/Starwood merger —, sustaining 100% operational uptime during the Rio 2016 Olympic Games.
Worked on enterprise audits as an ISO/IEC 27001 Lead Auditor, designing controls aligned to NIST SP 800, CIS Benchmarks, and GDPR/LGPD. Engineered continuous threat exposure management (CTEM with XM Cyber), WAF governance, perimeter protection, and XDR architecture, actively reducing attack surfaces across hybrid cloud estates.
Security is not the number of controls you own. It is the set of assumptions an adversary or system failure cannot break.
Carlos Eduardo Barbosa is a Senior Solutions Architect with over 15 years of technical and executive experience designing, modernizing, and hardening complex enterprise environments. Holding a B.S. in Computer Engineering and an Executive MBA in IT Management from FIAP, he merges deep systems infrastructure and security engineering with financial and strategic business rigor.
Throughout his career, he worked with industry leaders across banking, energy, oil and gas, global consulting, and hospitality — including Itaú Unibanco, Avanade (Microsoft), TAESA, PRIO, and Marriott International. He led the migration project of 45,000 user identities to Azure Entra ID, engineered mission-critical multiregion cloud topologies with 99.99% availability, and modernized corporate cost structures via disciplined FinOps, delivering over R$ 17 million in verified OpEx savings.
At the cutting edge of platform modernization, he engineered runtime security guardrails for autonomous AI agents and Microsoft Copilot, managed multinational post-merger technology consolidations, and conducted rigorous corporate audits as an ISO/IEC 27001 Lead Auditor, converting regulatory frameworks into reliable, operable systems.
Global certifications and graduate education covering cloud architecture, identity security, governance, and computer engineering.
Microsoft Certified
Amazon Web Services (AWS)
ISMS Global Standard
SailPoint Technologies
XM Cyber Specialist
Oracle Certified Architect
AXELOS / ISACA
FIAP • São Paulo, Brazil
Universidade Estácio de Sá • Rio de Janeiro
