IT graduate · developer

Guilherme
Ribeiro

Information Technology Graduate

Cloud · Security · AI/ML · Linux

IT graduate &
Developer

I'm an IT graduate with a passion for building things — from cloud infrastructures to security systems. I enjoy designing solutions that are both robust and well thought-out. For my BSc final project, I led the AWS architecture design and end-to-end infrastructure security, and I'm currently deepening my expertise in cloud computing and cybersecurity.

education
BSc in Information Technologies
Faculdade de Ciências da Universidade de Lisboa
Minor in Statistics and Operational Research
Faculdade de Ciências da Universidade de Lisboa
courses/certificates
Google Cybersecurity Certificate
Google · May 2025
AWS Cloud Practitioner Essentials
Amazon Web Services · April 2026
interests
Cloud Computing Cybersecurity AI/ML

What I can do

☁️
Cloud
AWS cloud architectures, modern infrastructure, and cloud security
🔒
Security
Cybersecurity fundamentals and best practices
🤖
AI Tools
Working with AI assistants and integrating AI into workflows
🐧
Linux
System administration, terminal and shell scripting
🐍
Python
Scripting, automation and application development
Java
Object-oriented programming and systems
🌿
Git
Version control, branching workflows and collaborative development
🔧
Hardware
General knowledge of PC components and how they work together

What I've built

Need4Rides Infrastructure (BSc final project)
A secure, multi-tier AWS cloud infrastructure for a taxi management system, applying defense-in-depth principles: segmented VPC with public, private, and data subnets, least-privilege Security Groups, a Bastion Host as the sole SSH entry point, and IAM roles scoped per function. Implemented automated high-availability with Nginx + Keepalived VRRP failover, a MongoDB replica set, and Docker containerization.
AWS EC2 AWS VPC AWS IAM Elastic IP VPC Endpoint Security Groups Nginx MongoDB Docker Keepalived Shell nmap
Private
Grade: 19/20
AWS Honeytoken Detection System 🍯
Serverless AWS intrusion detection system using two honeytokens — fake IAM credentials and a fake S3 bucket. Detects access in real time via CloudTrail, CloudWatch Logs, Lambda and SNS, with distinct alerts per attack type and attacker geolocation.
AWS CloudTrail AWS CloudWatch Logs AWS Lambda AWS SNS AWS S3 AWS IAM Python
mySaude (BSc security group project)
Secure health file storage system using hybrid encryption, digital signatures, and TLS-encrypted client-server communication. Supports authenticated users with SHA-256 salted passwords, integrity verification, and role-based access control, protected by iptables firewall rules and Snort intrusion detection with port scan, brute force, and ping flood alerts.
Java Java Security API Cryptography Access Control Snort HMAC Secure Communication iptables
GitHub
Grade: 19/20
Personal Website
A static website (this one) hosted entirely on AWS, with a fully automated CI/CD pipeline. Every push to GitHub triggers CodePipeline, which deploys to S3 and invalidates the CloudFront cache automatically.
AWS S3 AWS CloudFront AWSCodePipeline AWS CodeBuild CI/CD

How this website is
hosted on AWS

delivery
🌐
Browser
User
CloudFront
CDN / HTTPS
🪣
S3 Bucket
Static Hosting
ci/cd pipeline
💻
GitHub
Source
🔄
CodePipeline
Automation
🏗️
CodeBuild
Build / Invalidate

This website is hosted entirely on AWS using a fully serverless, static architecture. The files are stored in an Amazon S3 bucket with Static Website Hosting enabled, acting as a scalable and cost-efficient file server.

In front of S3 sits Amazon CloudFront, a global CDN that caches and delivers the site from edge locations worldwide, ensuring ultra-low latency for any visitor regardless of location. CloudFront handles HTTPS through a free TLS/SSL certificate from AWS Certificate Manager, keeping the connection secure on the custom domain guigoldenboy.xyz.

Deployments are fully automated via a CI/CD pipeline: every push to the GitHub repository triggers AWS CodePipeline, which runs CodeBuild to invalidate the CloudFront cache and deploys the updated files to S3 — no manual uploads needed.

Let's talk

I'm always open to new opportunities, projects or just a good conversation about technology.