$ whoami
pedro-montezuma — tech lead @ jusimples (brazilian legaltech AI)
$ cat summary.txt
Backend engineer: Python, cloud infrastructure and AI systems.
Built a legal RAG platform from zero to production — solo.
Security-first mindset, observability always, automate everything.
$ cat /etc/team
Vasco da Gama ⚫⚪Tech Lead / Lead Backend Engineer — JuSimples
Apr 2026 – Present
Technical lead for the backend and production infrastructure of JuSimples' Brazilian LegalTech AI platform.
- Architecture and technical decisions for the production system.
- Continued evolution of the RAG pipeline, security, and observability.
- Day-to-day operation: deployments (Cloud Run), monitoring, and incident response.
Nov 2025 – Apr 2026
Sole engineer responsible for building the AI platform from zero to first production launch (April 2026).
- Backend in Python and FastAPI.
- RAG pipeline over Brazilian legislation (LegalBERT, pgvector).
- Hybrid authentication (JWT + API keys) with allowlist-first practices.
- Observability: structured JSON logs, metrics, and tracing.
- GCP infrastructure as code via Terraform (Cloud Run, Cloud SQL, Secret Manager).
| Languages & Backend | Python (advanced) · FastAPI (advanced) · SQL / PostgreSQL with pgvector (advanced) · SQLAlchemy / Alembic · Shell Script (Bash/Zsh) · JavaScript / TypeScript (basic) |
| Cloud & Infrastructure | GCP — Cloud Run, Cloud SQL, Secret Manager, Cloud Storage, Cloud Scheduler, IAM · Terraform · Docker · Linux administration (advanced) · Virtualization (KVM/VMware/VirtualBox) |
| AI & Data | RAG · Vector databases (pgvector) · LLM integration (Gemini/OpenAI) · Embeddings (LegalBERT/sentence-transformers) · Web scraping |
| Observability & Security | Structured JSON logging, OpenTelemetry, Prometheus · JWT, OAuth2, API keys, allowlist patterns · LGPD-aware telemetry and privacy |
| Tools | Git, GitHub — PRs, Issues, Actions |
A professional-grade security audit suite for Linux servers monitoring 7 critical layers (firewall, ports, CVEs, permissions), generating a security score (0–100) and HTML reports, with sensitive-data sanitization and offline/local/full-AI modes.
./security_audit.sh --no-ai # local collection, zero cloud
./security_audit.sh --local-html # HTML report, full privacy
./security_audit.sh --full # deep analysis with Gemini AIPython Bash Gemini AI
An advanced package-analysis tool for Fedora/RHEL that detects security updates, orphaned packages, and cache issues, turning raw logs into dashboards with LLM-driven maintenance insights.
Python Gemini AI
- monitor_linux_ia — Linux system monitoring with AI-generated HTML reports.
- backup-universal — Smart backup system with project-type detection and automatic exclusions.
- linux-storage-manager — Storage cleanup and archiving with retention policies.
- iaprojeto-setup — AI-driven project scaffolding from natural-language descriptions.
- my-systems-showcase — Documentation of Linux setups: dual-boot, KVM/QEMU labs, security environments.
- 🔧 Breaking my Linux setup (and fixing it)
- 📚 Reading docs at 3 AM
- 🎯 Automating things that don't need automation
- ⚫⚪ Thinking about Vasco
Languages: Portuguese (native) · English (fluent — Cambridge FCE) · Spanish (basic)
- Universidade Federal Rural do Rio de Janeiro (UFRRJ) — Bachelor's in History (Licenciatura) · 2020 – Present
- Alura — Tech professional development courses (2025): programming logic, Git/GitHub, Linux CLI (DevOps), frontend fundamentals
- CNA / Cambridge — English, FCE certification (Cambridge English First)



