I'm a backend engineer based in Teresina, Brazil, with 5+ years of experience building cloud infrastructure, fiscal and financial integrations, APIs, and distributed services. I hold a degree in Systems Analysis and Development from IFPI.
I currently work at RevGás (Tartigrado Tecnologia LTDA) and build CTech as an independent venture: an integrated platform whose services cover identity, Brazilian electronic fiscal documents, digital wallets, real-time applications, and shared AWS infrastructure.
| Project | What it demonstrates | Status |
|---|---|---|
| ctech-dfe | Multi-tenant SaaS for NF-e, NFC-e, CT-e, and MDF-e, with direct SEFAZ communication, mTLS, asynchronous processing, and a Go/Python migration path | Production |
| ctech-account | OAuth 2.0 and OpenID Connect identity provider with PKCE, session rotation, M2M credentials, API keys, TOTP, passkeys, KYC, and audit trails | Active |
| ctech-wallet | Digital wallet with an append-only ledger, atomic and idempotent operations, PIX integration, KYC gates, and separate real, game, and sandbox balances | Active development |
| ctech-poker | Real-time Texas Hold'em with a multi-pot rules engine, WebSockets, provably fair deck verification, hand histories, and wallet integration | Sandbox live |
| ctech-lbalancer | Low-cost IPv6 edge on AWS with HAProxy, Cloudflare-only ingress, mTLS, dynamic service discovery, graceful reloads, and Prometheus metrics | Production edge |
| ctech-cdk | Shared AWS platform: dual-stack VPC, edge/network resources, S3, deployment roles via GitHub OIDC, and reusable CDK constructs | Shared infrastructure |
I also maintain the shared building blocks behind the platform:
- ctech-go-common — Go packages for DynamoDB, Valkey, distributed locks, JWT validation, OAuth M2M, RFC 7807 errors, and WebSocket fan-out.
- @aoctech/auth-client — framework-agnostic OAuth/OIDC browser client with PKCE and single-flight refresh.
- @aoctech/ws-client — resilient React WebSocket hook with heartbeat and backoff reconnect.
- ctech-vanity — Cloudflare Worker providing stable vanity import paths for Go modules.
- ctech-billing — designed subscription and metered-billing domain; implementation is planned.
flowchart LR
EDGE["Cloudflare + HAProxy edge"] --> ACCOUNT["Account / OIDC"]
EDGE --> DFE["DF-e"]
EDGE --> WALLET["Wallet"]
EDGE --> POKER["Poker"]
ACCOUNT -->|identity and M2M| DFE
ACCOUNT -->|identity and KYC| WALLET
ACCOUNT -->|identity| POKER
WALLET -->|balances and holds| POKER
BILLING["Billing · planned"] -.->|collections| WALLET
CDK["AWS CDK platform"] -.-> EDGE
CDK -.-> ACCOUNT
CDK -.-> DFE
CDK -.-> WALLET
COMMON["Shared Go and TS libraries"] -.-> ACCOUNT
COMMON -.-> DFE
COMMON -.-> WALLET
COMMON -.-> POKER
- Languages: Go, Python, Java, TypeScript, JavaScript, SQL
- Backend and APIs: Fiber, Spring Boot, REST, WebSockets, OAuth 2.0/OIDC, RFC 7807, multi-tenant systems
- Cloud and data: AWS CDK/CloudFormation, EC2/ASG, Lambda, DynamoDB, SQS, S3, CloudFront, Valkey/Redis, MySQL
- Engineering: distributed locks, idempotency, append-only ledgers, event-driven processing, CI/CD, GitHub Actions OIDC, Docker, observability
- Domains: Brazilian fiscal systems, SEFAZ integrations, PIX and payment flows, identity and access management, real-time games, reports, POS, and Android
- 5+ years at RevGás (Tartigrado Tecnologia LTDA), starting as a software development intern in December 2020 and moving to a full-time role in June 2021. Work includes REST APIs, fiscal and financial integrations, cloud infrastructure, process automation, reports, and mobile applications.
- Systems Analysis and Development, IFPI (2019–2023).
- Reached the top 2 among IFPI participants on the BeeCrowd competitive-programming platform.


