Angelo Silva

Worked as a Datacenter and Security Architect at NOS, one of Portugal’s leading telecommunications providers, contributing to the design and implementation of secure, high-performance network and security architectures across core infrastructure and distributed environments. Led the design of network and security solutions including Cisco ISE, MFA for VPN access, and SSO integrations for internal platforms accessed by third parties. Delivered Prisma Access-based SSE architecture to enhance secure remote access and visibility across the organization. Managed and deployed firewall technologies such as Cisco, Palo Alto, Checkpoint, and Fortigate. Supported dynamic routing protocols including BGP and OSPF within the client’s core backbone, ensuring seamless integration between headquarters and branch offices. Oversaw the rebuild of security solutions as part of the asset lifecycle management process, replacing end-of-support and end-of-sale equipment with modern, supported platforms. This included the refresh and redesign of security infrastructure to align with evolving business and compliance requirements.

As the technical lead of the Professional Services team within Italtel’s Security Business Unit, I was responsible for designing, deploying, and optimizing cybersecurity solutions for clients across telecommunications, data center, financial services, retail, and marketing sectors. Technical Leadership: Led cross-functional teams in the delivery of advanced security projects, ensuring alignment with client requirements and industry best practices. Network Access Control (NAC): Designed and deployed Cisco ISE-based NAC solutions, including 802.1X with EAP-TLS and posture validation for Windows, Linux, and macOS environments in data center operations. Firewall & VPN Integration: Implemented Cisco Firepower firewalls integrated with Entra ID (MFA via SAML) and Cisco ISE for posture enforcement, enhancing secure remote access for media and digital TV companies. Zero Trust & Microsegmentation: Deployed Akamai Guardicore for financial and data center clients, improving network visibility, automating incident response, and strengthening overall security posture. Managed Security Services (MSSP): Provided ongoing operational support, including advisory on SIEM platforms such as Rapid7 and IBM QRadar, and collaborated with SOC teams to analyze incident logs and improve threat detection. Security Advisory & Incident Response: Participated in penetration testing reviews and contributed to the design and implementation of defensive strategies and security architectures. Vendor Expertise: Delivered solutions using technologies from Cisco, Palo Alto Networks, Netskope, Akamai, and Microsoft Entra, among others.

Worked as a Senior Professional Services Engineer within the cybersecurity team, leading strategic security projects for major clients in the food industry, financial services, and manufacturing sectors. Large-Scale VPN Deployment: Led the implementation of a secure VPN solution for over 16,000 users during the onset of the COVID-19 pandemic, integrating RSA MFA and ensuring data center redundancy and resilience to support remote work securely. Secure Web Gateway Implementation: Delivered a Cisco WSA proxy solution for a multinational food company, mitigating security vulnerabilities and ensuring safe internet access for users. Malware Containment & Endpoint Protection: Utilized Cisco AMP to contain malware outbreaks in public sector clients within the oil and gas industry, enhancing endpoint security and incident response. Cloud Security & Digital Transformation: Deployed Cisco Duo in Azure environments and integrated Cisco Firepower firewalls for an aviation sector client, contributing to the development of a secure digital transformation strategy. PoC/PoV Leadership: Conducted Proof of Concept (PoC) and Proof of Value (PoV) initiatives for Cisco WSA and Umbrella across multiple private sector organizations in Brazil, demonstrating solution effectiveness and driving adoption.

Worked on the cybersecurity and infrastructure team, contributing to both strategic project delivery and operational support across multiple business units, including credit card services (REDE), internal banking operations, and digital transformation initiatives. Project Design & Architecture: Developed Low-Level and High-Level Designs (LLD/HLD) for network and security projects, ensuring robust architecture and alignment with business needs. Firewall & VPN Technologies: Managed and supported Cisco ASA, FTD, Check Point, and Palo Alto firewalls, as well as VPN security solutions to protect internal communications and remote access. Infrastructure & Access Control: Worked with Cisco and Juniper switches, routers, and wireless technologies, and supported Cisco ISE deployments for secure network access and policy enforcement. Credit Card Services (REDE): Contributed to the design and resilience of critical infrastructure supporting REDE operations, enabling secure and scalable service delivery. Technology Integration & Resilience: Supported the integration of new technologies and enhanced the resilience of the bank’s infrastructure to ensure high availability and security. Operational Security Support: Actively participated in threat containment efforts, addressing both internal and external risks by implementing and maintaining robust security solutions for internal clients. Stakeholder Collaboration: Provided technical analysis and troubleshooting, escalating issues to specialized teams for validation and resolution, and ensuring

Led advanced support and strategic initiatives for premium clients in the food, financial, industrial, and telecom sectors. Delivered expert troubleshooting across firewalls, VPNs, Cisco ISE, WSA, switches, routers, wireless controllers, and Cisco Prime. Supported threat mitigation and implemented robust security solutions tailored to client environments. Led internal enablement programs for NOC/SOC teams, enhancing technical capabilities in network and security operations. Conducted network assessments, created technical documentation, and supported lifecycle management including patching, vulnerability remediation, and technology refresh. Key contributor to the MSI Intelligence Project, a strategic initiative aimed at improving infrastructure visibility and resilience for premium clients. The project’s success led to the creation of a dedicated business unit after presentation to the LATAM VP, enhancing incident response and project redesign. Reports generated supported border teams and pre-sales, identifying EoL/EoS devices and enabling future product positioning and project opportunities. Also supported solution rebuilds to adapt to evolving environments and improve service delivery. Played a key role in maintaining operational excellence and aligning technical execution with business strategy.

Led critical infrastructure and wireless projects, including the 2016 Olympic Games initiative at Estádio Mané Garrincha, delivering high-performance and resilient network solutions across large-scale environments. Olympics 2016 – Stadium Wireless Project: Technical lead for wireless optimization and troubleshooting at Estádio Mané Garrincha, working with Ruckus SCG 200 and ZD 5000, Motorola RFS 4000, and Cisco WLC 5508/5520 controllers. Wireless Site Surveys & Troubleshooting: Conducted advanced site surveys and diagnostics to ensure optimal wireless coverage and performance in high-density environments. Switching Infrastructure: Configured and supported Cisco Catalyst switches (2960, 3750, 3850, 6500), including VLANs, QoS, ACLs, port-channel setups, trunk/access modes, and stacking. Also worked with Alcatel, Brocade (VDX6940), and Dell PowerConnect 2848 switches. Routing & Voice Technologies: Managed Cisco routers (1900, 2811, 2911, 2921, 2951 series) and IP phones (3905, 6921, 7942), supporting enterprise voice and data networks. Firewall & Security: Installed and configured Cisco ASA 5515/5516 firewalls with failover and Firepower integration, ensuring secure perimeter defense. Network Design & Redundancy: Designed and implemented physical and logical topologies for redundant network environments, ensuring high availability and fault tolerance. Healthcare Sector – Technology Refresh: Led a nationwide infrastructure refresh project for a major healthcare organization in Brazil, modernizing network components and improving operational efficiency.

Link Balancing Project with Router OS Mikrotik (Configuration and implantation), Project GoLive (CD Belford Roxo CeC implantation, configuration and documentation of AP Ruckus, installation and configuration of server 2008R2 (Access telnet), creation of print queue in SAP and server printing), network documentation, network infrastructure monitoring, telephone and WCS link monitoring with the Cacti tool, technical support team management, direct contact with suppliers and service providers, remote access with (TeamViewer and VNC), installation of programs on PCs and servers, Switch configuration (cisco, 3com and HP), monitoring, maintenance, installation and configuration of AP (Access point) Ruckus and Motorola, configuration and installation of thinClient INIT, configuration and installation of data collectors Motorola, AD administration on Windows Server 2003 and 2008 servers (creating accounts and user profiles, access permissions and GPO), ERP SAP co-creation user accounts and access permission.

Backup routines (NETBACKUP), network documentation, Telephony (PABX), maintenance and configuration of computers, user support, network maintenance, the configuration of routers and network equipment, support for corporate Smartphones (BlackBerry, iPhone), the process from SLA calls, small network infrastructure projects, service to other local and remote units, Nortel Switch configuration, N1 Totvs Support (Protheus), to TMS modules, Configurator. Configuration of XML files, Creation of Accounts and profiles for users.