Warsaw, Poland · on-site and remote

Edinaldo SáSenior Software Architect & Security Specialist

For 16+ years I have designed, built and secured critical systems in finance, insurance, pensions, telecom, energy and media: from architecture to code, from vulnerability remediation to team leadership.

Get in touch Download CV (PDF)

CV in Portuguese (PT)

Proven results

  • 16+

    years in technology

    Software, security and team leadership

  • 80%

    fewer vulnerabilities

    Ebix · Prudential do Brasil and Bradesco Seguros

  • A+

    security rating, with zero vulnerabilities

    Cyber Essentials Plus 2025 · Visian Systems (UK)

  • 99.9%

    uptime on critical systems

    IK Solution

  • 16

    people across 4 software factories

    Technical leadership · FAPES/BNDES, via K2

  • +25%

    decision-making accuracy

    Decision-support system · Ebix

I was on Prudential’s team when it was named the most secure company in the world in the personal insurance sector.

Live on national TV: a stand-alone game I built runs live on Big Brother Brasil and Caldeirão do Mion.

Services

How I can help

Four fronts that reinforce each other: build well, protect what already exists, design to last and lead the people who deliver.

Custom software development

Web systems and APIs from requirements to production. New projects use strongly typed languages only; legacy systems are maintained and modernised.

  • C#/.NET and ASP.NET Core (since version 1.0)
  • React and TypeScript on the front end
  • Integrations with SAP S/4HANA, TOTVS and OutSystems
  • AI-assisted development: Claude Code, Cursor and Codex

Vulnerability remediation & AppSec

I analyse the reports, fix the root cause in the code through secure refactoring and build security into the pipeline so the problem does not come back.

  • SAST, SCA and DAST in CI/CD pipelines (Oi, Ebix and Metatron)
  • Checkmarx, with OWASP Top 10 and OWASP ASVS as checklists
  • Threat modelling, OAuth2/OIDC and hardening (CSP, HSTS, SRI)
  • Security testing with Kali Linux and my own tooling

Software architecture

Solution architecture for systems that cannot fail, designed for the team that will maintain it and the business that depends on it.

  • The entire architecture of the Newe Seguros project (Ebix)
  • Architecture of the pension loan system (FAPES/BNDES)
  • .NET, Kubernetes, Kafka, Azure Functions and Service Bus
  • UML modelling (Enterprise Architect) and BPMN processes

Technical leadership

Teams, vendors and key users aligned: planning, code review, mentoring and delivery on agreed deadlines.

  • Coordinated 16 people from 4 software factories (FAPES/BNDES)
  • Teams of 4 (Newe Seguros) and 6 people (Metatron, as partner)
  • Code review and mentoring, including databases and AI agents
  • Scrum, Kanban, PO/PMO; Jira, Azure DevOps and Confluence

Selected case studies

Projects where the outcome shows

Citable clients and figures, all confirmed. No estimates, no rounding up.

Ebix Latin America · Jan 2020 – Nov 2023

Newe Seguros · Prudential do Brasil · Bradesco Seguros

Security and architecture for insurers

Financial and insurance systems with vulnerability reports from two sources: attack tests by Prudential’s US team and Checkmarx scans.

What I did

  • Led the Vulnerability Systems team and fixed the findings through secure refactoring.
  • Designed the entire architecture of the Newe Seguros project (an agribusiness insurer) and led a team of 4.
  • Built a rules-based decision-support system aligned with ISO/IEC standards.

Outcome

  • 80% fewer vulnerabilities
  • +25% decision-making accuracy

Stack: C# · .NET Core · Angular · SQL Server · Checkmarx

K2 Partnering Solutions · Feb – Nov 2018

FAPES / BNDES

Technical leadership and architecture in pensions

A large financial project with several vendors, integrating OutSystems and SAP S/4HANA.

What I did

  • As technical lead, coordinated 16 people from 4 software factories.
  • Designed several architectures, including the pension loan system.
  • Served as PO for the loans area and wrote the procedures in T-SQL and PL/SQL.

Outcome

  • 16 people · 4 factories
  • Loan system architecture

Stack: OutSystems · SAP S/4HANA · SQL Server · Oracle PL/SQL

Visian Systems · Jan 2023 – present

Client in the United Kingdom

Cyber Essentials Plus with an A+ rating

Legacy Java JSP systems in production, with servers and containers under my care.

What I did

  • Took the client to Cyber Essentials Plus certification in 2025.
  • Zeroed all vulnerabilities and brought the project to an A+ security rating.
  • I look after the servers 24/7 and run all Docker containers.

Outcome

  • Cyber Essentials Plus 2025
  • Zero vulnerabilities · A+

Stack: Java (JSP) · Docker · MySQL · Linux

Estúdios Globo · Apr – Nov 2022

Big Brother Brasil · Caldeirão do Mion

Software running live on national TV

Entertainment systems for high-profile shows, where there is no “later”: everything happens live.

What I did

  • Built “Sobe o Som”, a fully stand-alone game in C# and SQL Server that runs live and is still on air.
  • Built BBB’s real-time “Anonymous Message” feature between participants and the public.
  • Maintained No Limite and The Voice Brasil: optimisation, performance and new features.

Outcome

  • On air in BBB and Caldeirão do Mion

Stack: C# · VB.NET · SQL Server · Access

Experience

Career

Dates as on LinkedIn. Some periods overlap because the roles ran in parallel.

  1. 2018 – present

    Founder

    ESA Soluções em TI (Enneal) · São Paulo, Brazil

  2. Sep 2024 – present

    Research Scientist, Master’s Student in Physics

    Faculty of Physics, University of Warsaw · Warsaw, Poland

    • Came to Warsaw for a physics project linked to my Physics master’s at FURG: building a device using graphite, with lithography, exfoliation, metal evaporation, plasma etch and development.
    • Solid-state physics research: exfoliation and structural characterisation of two-dimensional materials.
    • Operate and maintain SQUID, AFM and high-precision vacuum systems in cleanroom and glove-box environments.

  3. Jan 2023 – present

    Software Engineer

    Visian Systems · England, United Kingdom

    • Cyber Essentials Plus (2025), zero vulnerabilities and an A+ security rating.
    • Production Java JSP systems, Docker, MySQL and 24/7 servers.

  4. Apr 2022 – Nov 2022

    Senior Software Engineer

    Globo (Estúdios Globo) · Rio de Janeiro, Brazil

    • Stand-alone live game for BBB and Caldeirão do Mion; BBB’s “Anonymous Message”.

  5. Nov 2020 – 2021

    Co-founder

    MakerApps · Rio de Janeiro, Brazil

    • Web app for small businesses: client management, product listings, loyalty cards and lead capture.

  6. Jan 2020 – Nov 2023

    Senior Software Engineer Team Lead

    Ebix Latin America · Rio de Janeiro, Brazil

    • 80% fewer vulnerabilities (Prudential do Brasil and Bradesco Seguros); +25% decision-making accuracy.
    • Full architecture of the Newe Seguros project, with a team of 4; production and staging environments.

  7. Jan 2019 – May 2024

    Senior Software Engineer Team Lead

    IK Solution · Rio de Janeiro, Brazil

    • 99.9% uptime on critical back-end and database systems; +20% operational efficiency (AS-IS/TO-BE with BPMS).
    • Projects in the energy and pension sectors and at Universidade Estácio de Sá (bank-slip generation in SIA).

  8. Feb 2018 – Nov 2018

    Senior Software Engineer / Technical Leader (PMO/PO)

    K2 Partnering Solutions · Rio de Janeiro, Brazil

    • FAPES/BNDES: 16 people from 4 software factories; architecture of the pension loan system.

  9. Oct 2013 – 2021

    IT Manager

    ECC Informática · Niterói, Brazil

    • −40% downtime through automation and strategic upgrades; in-house inventory, client and billing systems.

  10. Jun 2013 – Feb 2018

    Senior Software Engineer

    Teledata | Telecheque | MultiCrédito · Rio de Janeiro, Brazil

    • TOTVS ERP integration: +30% operational efficiency; Multi-Business System: +20% sales-team efficiency.
    • Billing system (Rio and São Paulo) in Oracle Forms, Reports and PL/SQL.

  11. Jan 2011 – Jul 2017

    Partner & Technical Leader

    Metatron

    • Team of 6; STI project-management system for Oi Telecom: +25% project completion rates.
    • SAST, SCA and DAST in CI/CD pipelines; QA with Quality Center and SoapUI.

  12. 2006 – 2013

    Early career

    Web development in ASP Classic, C#, VB.NET and PL/SQL since 2008, plus IT support and computer-skills teaching.

    • Provider IT (allocated at Unimed) · 2013
    • Valorem · 2011
    • Funcab · 2010 – 2011
    • Synapsis · 2008 – 2010
    • TIVIT · 2008 – 2010
    • Eurodata · 2006 – 2007
    • Reprint-Itaipú · 2006 – 2007

Skills

Stack & practices

New projects: C#/.NET and TypeScript. Legacy: whatever runs in production, from ASP Classic to PL/SQL.

Back end

  • C#
  • .NET
  • ASP.NET Core
  • ASP.NET MVC
  • Entity Framework
  • PHP (Zend, Symfony)
  • Java (JSP)
  • VB.NET
  • ASP Classic

Front end

  • React
  • TypeScript
  • JavaScript
  • Angular
  • HTML5

Data

  • SQL Server (T-SQL)
  • Oracle (PL/SQL, Forms, Reports)
  • MySQL
  • DB2

Platform & integration

  • Kubernetes
  • Docker
  • Kafka
  • Azure Functions
  • Azure Service Bus
  • Linux
  • Git
  • Jenkins
  • SAP S/4HANA
  • OutSystems
  • TOTVS

Security

  • SAST (Checkmarx)
  • SCA
  • DAST
  • Threat modeling
  • OAuth2 / OIDC
  • OWASP Top 10
  • OWASP ASVS
  • CSP · HSTS · SRI
  • Kali Linux

AI-assisted development

  • Claude Code
  • Claude API
  • Cursor
  • Codex

Methods & management

  • Scrum
  • Kanban
  • BPMN / BPMS
  • UML
  • ISO/IEC 15504 · 12207
  • CMMI
  • Jira
  • Azure DevOps
  • Confluence

Languages

  • Portuguese native
  • English fluent
  • Polish A1
  • Spanish A1

Entrepreneurship

Enneal: my own products

I founded ESA Soluções em TI, under the Enneal brand, in São Paulo in 2018. Besides custom projects and vulnerability remediation, Enneal launched five products in 2026.

Enneal Fighter

Martial-arts academy management: multi-unit, belts and grades, CRM and finance, with an Android app.

Version 3.0.0

Stack: ASP.NET MVC 5 · SQL Server · REST APIs · Android

Enneal Fighter website(opens in a new tab)

Enneal Fit

Mobile-first coaching app for fitness and jiu-jitsu, multi-tenant per gym.

Security hardening · logs without PII

Stack: .NET · ASP.NET Core · EF · SQL Server · xUnit

Enneal Fit website(opens in a new tab)

Enneal Learning

Multi-tenant online-course SaaS with tenant isolation.

Strict nonce-based CSP, SRI and HSTS

Stack: .NET 8 · ASP.NET Core · EF Core 8 · SQL Server · Stripe

Enneal Learning website(opens in a new tab)

Enneal LIMS

Laboratory information management for universities, from sample to publication (FAIR/DOI).

145 automated tests

Universities: up to 4 users free forever, per institution, with up to 2 labs.

Stack: .NET Framework 4.8 · ASP.NET MVC 5 · EF 6 · SQL Server

Enneal LIMS in the Lab (academic note)

Enneal PDV

Web POS, back office and multi-tenant online store, with a restaurant module (QR tables and KDS).

PWA and Android app

Stack: .NET 10 · ASP.NET Core MVC · EF Core · SQL Server · Docker

Enneal PDV website(opens in a new tab)

Education

Education & certifications

All degrees listed are completed.

Academic background

  • Master’s, Strategic Management in Software Engineering (IT)

    Universidad Internacional Iberoamericana (UNINI)

    2018 – 2021

  • Master’s degree, Physics

    Universidade Federal do Rio Grande (FURG)

    Mar 2024 – Mar 2026

    Physics project carried out in Warsaw

  • Master’s in Computer Science: Computational Modelling

    Universidade Federal do Rio Grande (FURG)

    Aug 2023 – Dec 2025

  • Postgraduate specialisation, Algorithms and Data Structures

    Faculdade Focus

    Jan 2021 – Mar 2022

  • Postgraduate diploma, Finance

    Faculdade Venda Nova do Imigrante (FAVENI)

    2018 – 2021

  • Bachelor’s degree, Information Systems

    Universidade Estácio de Sá (UNESA)

    2021

  • Bachelor’s degree, Systems Analysis

    Universidade Estácio de Sá (UNESA)

    2019

Education timeline, in the Lab

Certification

Microsoft Technology Associate (MTA): C#

2008

Passed two exams and a C# project presentation through Microsoft’s Students to Business (S2B) programme, first in-person class, Rio de Janeiro.

Courses & training

Completed training courses (not certifications).

  • SAP (FI, CO, MM, PP, SD) · Training Education Service
  • PMP · ProjectLab and Training Education Service
  • Governance & Project Analyst · Training Education Service
  • COBIT and ITIL · Training Education Service
  • Webmaster C#.NET · Coti Informática
  • Linux Administration and Programming Logic · Estácio

Lab · Games, Workshop & Academic

I build worlds and tools too

Away from client work, I build things out of curiosity: Games, with games and playable prototypes, and the Workshop, with AI, agents and workbench tools. Next to them, the Academic area gathers my education, research and publications. That’s where I show how each one works inside.

The Caverna dos Ecos entrance on the game map, with the village wall and the Arsenal da Guarda belowGAMES · DEVLOG #01

In active development

Echoes of AetherThe Ruin of the Veil

A turn-based fantasy RPG in the browser, in pixel art and multiplayer, where the Veil between worlds has cracked and enemies learn through reinforcement in a NetLogo lab before reaching the C# game.

9 min read

  • RPG
  • Pixel art
  • Multiplayer
  • .NET 8
  • SignalR
  • Q-Learning
  • NetLogo
  • Game AI

ON THE RADARController (gamepad) support, planned

Read the post Visit the Lab

Games

More game devlogs: AI-versus-AI fights, a dungeon crawler, an RPG, card games and a no-money pool.

All games

Workshop

AI, agents and workbench tools

The whole Workshop

Academic

Education, research and publications

See the area

On the workbench

Workshop projects that don’t have a post yet. The games that used to sit here now have their own devlogs.

  • Auto SquadA squad of AI agents from requirement to merge, self-hosted, with a human review gate at every critical step.
  • Second BrainAn Obsidian vault in the browser: a read-only web reader with Markdown, wikilinks, Mermaid and search.
  • TaskPilotTurns Trello cards into work done by AI agents, with eligibility triage, a budget and human review.

Contact

Let’s talk about your project

Tell me the context: the system, the timeline and where it hurts. I work on-site in Warsaw and remotely.

No server and no tracking: the form simply opens your email app with the message ready to send to ennealit@gmail.com.