About

Hi, I’m Guilherme Nogueira, based in Florianópolis, Brazil, with 15+ years spent close to the metal. I lead a platform and security team, and work hands-on with cloud and data infrastructure for teams in the US and beyond.

I didn’t start in the cloud. I came up through networking and telecom: Fortinet and Palo Alto firewalls, VoIP with Asterisk, the kind of work where a dropped packet is something you can actually feel. Somewhere along the way I got comfortable in the places most people avoid, like Slackware, FreeBSD, VyOS, a terminal and a long tail of logs. That background is still how I think. I’m the kind of engineer who would rather kill a problem before it happens than clean it up afterward.

These days I work with AWS and Azure, Terraform and OpenTofu, Kubernetes, CI/CD and observability. I write infrastructure as code, automate the boring parts, and scale systems up (or down, when the bill shows up to remind me). The tools rotate every few years. The instinct doesn’t: keep it reliable, keep it simple, keep it cheap enough that nobody important asks why.

What I write here

This is where I keep the real lessons from building and operating infrastructure, the ones you only learn in production. Expect posts about:

Cloud and AWS: multi-account, governance, cost
SRE and reliability: incidents, observability, on-call
Kubernetes and platform engineering
Terraform and infrastructure as code
Security as code: guardrails that don’t slow teams down
Cloud and infrastructure architecture: designing platforms that scale, and the trade-offs behind them
Data infrastructure, and why it needs SRE too
Tech leadership: the people side of keeping systems alive
Networking and Linux fundamentals, because they never left me
Automation and the messy reality of running real systems

No theory-from-a-course content. Just things I ran into, broke, and figured out. Stay calm and grep logs.

Find me

Opinions here are my own, not my employer’s.