Felipe Sotille, speaking at a conference
Open to new engagements

Felipe Sotille

DevSecOps Architect & Engineer

DevSecOps architect and hands-on engineer for regulated, high-availability platforms (SWIFT, Swissquote). I design the release-orchestration and security standards that squads ship through, then coach 5+ squads until the standard holds: golden-path pipelines, SBOM, policy-as-code and DORA-aligned controls. I still ship code: Java 21, Spring, Vert.x and Kafka on regulated platforms, and I govern coding agents (Claude Code, Codex, Devin) with the same gates as human-written code.

A technical reference and mentor for multiple engineering teams, frequently sought out for guidance on secure software delivery and release orchestration. — Sudhir Indurti, Lead DevOps Engineer, SWIFT, 2026

Italian (EU) citizenBrussels
17+years in software engineering
2.5bnfinancial records migrated to Oracle
40+Java apps on zero-touch release orchestration
100k+concurrent users on a Kafka/Vert.x platform
Download

One source, four CVs

Each variant is generated from the same data and passes the same quality gates: two pages, PDF/A-2b, tagged, fonts embedded.

How it is built
DevSecOps Architect & Engineer
2 pages · PDF/A-2b · Markdown
Senior Backend Engineer (Java)
2 pages · PDF/A-2b · Markdown
Principal DevSecOps Architect
2 pages · PDF/A-2b · Markdown
Tech Lead · Senior Software Engineer
2 pages · PDF/A-2b · Markdown
Core skills

What I work with

DevSecOps & CI/CD
CloudBees CI (expert)CloudBees CD/RO (expert)JenkinsSAST / DAST / SCA gatesSBOM & supply-chain securityPolicy as codePlatform engineering (golden paths)Secure SDLCAnsible Automation PlatformDockerKubernetesLinuxHashiCorp Vault
Backend
Java 8–21Spring Boot / Security / WebVert.xRESTGraphQL
Architecture
MicroservicesEvent-driven / CQRSApache KafkaHazelcast clustering
AI-assisted engineering
Claude CodeOpenAI CodexDevinGoverned agentic workflowsAI-assisted code review
Cloud & Data
AWS (EC2)Google Cloud PlatformOraclePostgreSQLSQL tuning & partitioning
Ways of working
Technical leadership & mentoringDevSecOps coachingStandards & enterprise-pattern adoption
Governance & compliance
DORA (EU Digital Operational Resilience Act)Deployment governance
Experience

Where the numbers come from

DevSecOps Architect (Customer Success Architect) (Consultant) · SWIFT Brussels, Belgium
Jan 2025 – Present

Returned to SWIFT in 2025 for the DevOps Engineering Services organisation: a regulated, multi-squad platform behind global secure financial messaging.

  • Onboarded 40+ Java applications onto the centralised Release Orchestration platform (CloudBees CD/RO) with zero-touch deployment from commit to production; my team delivered 80%+ of the company-level KPI to move 100% of applications to zero-touch.
  • Designed the CI/CD blueprints (golden paths) every onboarded squad ships through and coached 5+ squads as DevSecOps solutions architect: enterprise patterns, delivery standards and the technical reference for secure delivery.
  • Built 20+ orchestrated-patching pipelines covering 300+ VMs, cutting patching time by 40% and making patch cycles repeatable enough that teams trust them; core of the company KPI for 100% orchestrated VM patching.
  • Integrated SAST/DAST scanning into the standard pipelines of several critical applications, turning security findings into enforced gates in the secure SDLC.
  • Added SBOM generation and policy-as-code guardrails to the standard pipelines, giving supply-chain visibility and enforceable controls aligned with DORA's ICT-risk and resilience requirements.
  • Built the automation and internal tooling in Java, Node.js and shell that improved developer experience, pipeline reliability and day-to-day operational efficiency.
  • Set the governance discipline for coding-agent work, scoped tasks, human review and the same security gates as human-written code, and shipped agent-first with Claude Code, OpenAI Codex and Devin.
Senior Software Engineer (Consultant) · Swissquote Geneva, Switzerland (hybrid)
Jul 2024 – Dec 2024

Swiss online bank; regulated, high-availability financial environment.

  • Led the migration of a 2.5 billion-record financial database to Oracle, preserving data integrity and business continuity throughout.
Senior Software Engineer (Consultant) · SWIFT Brussels, Belgium
Jul 2019 – Jun 2024

Three squads over five years: Identity Management, Community Gateway and Knowledge Channels.

  • Spearheaded the migration of the Identity Management monolith to a microservices architecture, keeping the service live for users throughout the transition.
  • Owned the container strategy for two squads as Docker champion, building and hardening the images and keeping them aligned with security and tooling standards.
Tech Lead & Senior Software Engineer · Eleven Sports (formerly MyCujoo) Lisbon, Portugal
Jun 2018 – Jun 2019

Sports media group (premium TV channels and OTT); first backend engineer on the player-experience platform, reporting to the CTO.

  • Designed from scratch a cloud-native, clustered CQRS/event-driven microservices backend on Vert.x, built for high throughput and low latency.
  • Ran the platform on Kubernetes and GCP, supporting hundreds of thousands of concurrent interactions, with Prometheus/Grafana monitoring for availability.
  • Designed the CI/CD pipelines (CircleCI to GCP) the team shipped through.
Open source

Open frameworks & writing

Public frameworks and reference architectures under Techstream, my consultancy (not the TechStream news app).

GitHub
Earlier

Where it started

Senior Java Developer · WPLEX
Brazil · public transport
2015–2018
Java Developer · Metaway
Brazil · public sector
2015–2015
Java Developer · Città
Brazil · public management
2010–2014
Junior Java Developer · Allcance (formerly Holma Software)
Brazil · industry
2008–2009
Education

Degrees & certifications

Postgraduate diplomas, Cloud Security & Smart Contracts and AI & Data Science
Universidade de Passo Fundo (UPF) · Brazil
2023
B.Sc. Computer Science
Universidade de Passo Fundo (UPF) · Brazil
2016
Certified Kubernetes Security Specialist (CKS) and Administrator (CKA)
CNCF / Linux Foundation · in progress
2026
Languages

Working languages

PortugueseNative
EnglishFluent
FrenchB1 · intermediate
Recommendations

What colleagues say

He does not merely automate tasks; he engineers repeatable, resilient delivery systems that improve deployment reliability, enforce secure coding standards and reduce operational risk.

— Anastasios Lagos, DevSecOps Engineer, Mindwave (SWIFT programme), 2026

Probably the most skilled developer I have ever met. Enthusiastic about new technologies and making things work.

— Arnau Rovira, DevOps Engineer, Eleven Sports
Get in touch

Let's make delivery boring again.

Available for DevSecOps architecture, release-orchestration and secure-delivery engagements. Based in Brussels, working across the EU.