Guilherme Nogueira
Platform Engineering · DevOps · Security
From firewalls and VoIP to Kubernetes and Terraform. Fifteen years building and operating infrastructure, writing down the lessons production only teaches the hard way.
Featured
-
The First Hire Is the Expensive One
Lean platform teams run on trust until the day they need to grow. What hiring an SRE taught me about access, merit, and the tooling that betrays your ramp-up plan.
-
Reliability Is a Business Decision, Not an Engineering One
Engineers argue about nines. The business does not buy nines, it buys revenue that survives an outage and customers who still trust you tomorrow. The technical leader's job is to frame reliability as the money-and-risk decision it actually is.
-
The Cloud Did Not Remove the Network. It Moved It Behind an API.
What a VPC really is, how physical networking concepts map onto cloud abstractions, and why the failure modes change when your network becomes an API call instead of a cable you can trace.
-
Least Privilege Is a UX Problem
Everyone agrees with least privilege and almost nobody ships it, because the broad grant is always the easier path. Fix that, make scoping the path of least resistance, and the security follows for free.
-
Data Does Not Page You. It Just Goes Quietly Wrong.
A replication pipeline reported healthy for weeks while it quietly wrote NULLs into a column that mattered. No error, no alert, no page. That gap between a service failing and data failing is exactly why data needs SRE too.
-
Senior Engineers Reduce Ambiguity
Seniority is not just about knowing more tools. It is about reducing confusion, risk and rework when systems, people and priorities get messy.
Recent Posts
-
Good Tickets Are Reliability Work
A vague ticket is not a planning problem. It is future rework wearing a nice title, and the ambiguity you leave in it comes back as defects, delay and incidents. Writing a clear ticket is reliability work.
-
The Build Did Not Fail. It Hung, Which Is Worse.
A failing build tells you something. A hanging build tells you nothing, burns a runner, and slowly teaches the team to hit retry instead of reading. Here is one that hung for a stupid reason, and how a thread dump found it.
-
The CNI Already Moves Your Packets. Calico Is for the Rules.
Running Calico in policy-only mode on top of the AWS VPC CNI, why two network layers in one cluster is the right call, and the one flag that stops Calico from breaking your cluster.
-
Observability is more than dashboards
A pretty dashboard is not observability. Here is the difference, and why it matters the next time production breaks.