Tomás Pinho

Joined to build the SRE function from scratch; promoted to Head of Infrastructure after one year. Lead Build Engineering, IT Operations and Site Reliability Engineering (4 people). Expanded the team’s mandate from infrastructure support into a business support function that drives automation of business processes across the company. Grew the team with a new SRE and a Senior IT Engineer.

Completed the move of the company’s entire infrastructure to code (Terraform), and am leading a move of CI on-premises to reduce dependency on third-party providers and de-risk delivery.

Joined Lingokids as the first full-time SRE. Put together and led the implementation of a baseline InfoSec compliance plan. Identified infrastructure resources not in IaC and led a plan to codify all existing infrastructure. Implemented preview environments for Pull Requests, across mobile and backend repositories. Hired and mentored 1 mid-level SRE.

Led a 19-person Platform & Infrastructure org spanning SRE, Developer Experience and Identity & Access Management (the latter two run as product teams). Managed 3 team leads and 3 Staff Engineers directly, and drove cross-org initiatives such as a large-scale code topology analysis and a frontend component framework that immediately unlocked $1M+ in revenue.

Led and grew the SRE team to 5 engineers while owning reliability, infrastructure and compliance for Remote’s production platform. Delivered a full migration of production infrastructure to a new AWS region, moving the core database (hundreds of GBs) and millions of user accounts with minimal downtime. Partnered across the org on software architecture, security, IT architecture and business-process automation.

Interim Director of Security (Apr 2023 — Mar 2024): led the Security team alongside my SRE role. Grew the team by hiring 2 engineers and bringing in an internal transfer, then recruited and onboarded the permanent Director of Security for a smooth handover. Under my leadership, the team achieved SOC 2 Type II re-certification, maintained ISO 27001 compliance, automated key compliance processes and launched a new company-wide Security Awareness Training program.

Personally built and rolled out an access gate that blocks employees from sensitive applications until their security training and policy acknowledgements are current, turning compliance from a reminder into an enforced control and saving hundreds of hours of work ahead of re-certification.

Managed and grew the SRE team to 4 engineers across levels, owning compliance, developer productivity, infrastructure, scalability and security.

Hired the second SRE at Remote, established team processes including task tracking and support ticketing.

Sole SRE, re-architected Remote’s infrastructure for compliance, developer productivity, monitoring, scalability and security, including the move to Kubernetes on AWS EKS.

Senior engineer in the DevOps team, working on large-scale AWS infrastructure, Kubernetes and Terraform architecture across a growing engineering org.

Led a 4-person team covering SRE, Security and IT. Owned the company’s multi-cloud Kubernetes platform (AWS and GCP), CI/CD, observability and IT compliance.

Sole owner of the company’s infrastructure, covering CI/CD, deployment automation, logging and security architecture.

Linux systems administration and configuration management for the university labs’ infrastructure.

Specialization in Distributed Systems, with an average of 16.5/20. Thesis: UpdaThing — A secure and open firmware update system for Internet of Things devices.