SOFTWARE ENGINEER | CYBERSECURITY
Kleyson Carreira
Over 10 years in software engineering, today focused on international multi-tenant SaaS platforms and automation

About

CTO and co-founder of ZapYou. Over 10 years writing software, most of it spent on the operational problems nobody wants to touch.
At ZapYou I handle the architecture and development of a WhatsApp Business communication platform integrated with Meta's Cloud API as a Tech Provider, where each client operates its own WABA with no reseller layer. Day to day that means per-tenant data isolation at the ORM layer, idempotent message delivery with webhooks that arrive out of order, and LGPD solved in the design of the system.
Alongside that I take on custom software through ARIERRAC INC and maintain open source projects, among them a tool for scheduling and verifying database backups. At IPOG I build the internal systems used by campuses across Brazil, and at Espaço Paulista I run the network and the live streaming for events. Very different contexts, usually the same problem: understanding the operation before writing any code.
I understand the business problem before choosing the technology.
Most of the decisions I make are about what not to build.
I operate what I build.
Own servers, Docker, Cloudflare, observability and incident response. That changes how you write code.
Security is not a final step.
I run periodic audits of the codebases I maintain against OWASP, and treat threat modeling as part of designing any feature that touches customer data.
Experience
- Apr 2023 — presentSão Paulo, Brazil · Hybrid
CTO & Co-founder
ZapYou
Architecture and development of a multi-tenant SaaS platform for WhatsApp Business communication, integrated with Meta Cloud API as a Tech Provider. Per-tenant isolation at the ORM layer, idempotent message delivery and LGPD as a design requirement.
- May 2020 — presentSão Paulo, Brazil · Hybrid
Full Stack Developer
IPOG São Paulo
I build internal software used not only by the São Paulo campus but by several units across Brazil. The focus is removing operational bottlenecks: automating manual routines, integrating systems that did not talk to each other and giving time back to the academic, sales and administrative teams.
- Jul 2019 — presentBrazil · Remote
Kleyson Carreira
ARIERRAC INC
Custom software and maintenance of open source projects, among them a tool for scheduling and verifying database backups.
- Jun 2016 — presentSão Paulo, Brazil
I.T Manager
Espaço Paulista de Eventos
Responsible for the internal and external networks shared across the rental venues, ensuring segmentation, availability and capacity for simultaneous events. I also own the recording and live streaming system for hybrid and remote events, from the audio and video signal to final delivery.
Stack
Backend
- TypeScript
- Node.js
- Fastify
- NestJS
- Prisma
- Python
Frontend
- Next.js
- React
- Vue.js
- Tailwind CSS
Data
- PostgreSQL
- Redis
- Qdrant
- MongoDB
- MySQL
Infra and operations
- Docker
- Kubernetes
- Terraform
- Cloudflare
- NGINX
- Linux
- AWS
- GitHub Actions
Security
- OWASP
- Threat modeling
- Web pentest
- Burp Suite
- Nmap
- Wireshark
- Kali Linux
Certifications · 90
- Pre Security CertificateTryHackMe · Jan 2026THM-8QMHGFRXEFverify ↗
- Introdução a automação com n8nRocketseat · Sep 20253354820c-298e-4da0-b075-8bff3edc25d8verify ↗
- Certificação Linux LPI Essentials: Command Line BasicsAlura · Jul 2025abc2a483-e7dd-4cf4-a7af-10d4233a681cverify ↗
- Certificação Linux LPI Essentials: Evolution and DistributionsAlura · Jul 2025194baef5-49d4-40c6-8de6-98980108f73bverify ↗
- Certificação Linux LPI Essentials: Open Source Software and LicensingAlura · Jul 202575441542-7d72-42f4-9972-c9fd45ab4f52verify ↗
- Certificação Linux LPI Essentials: Redirecting I/O RedirectionAlura · Jul 2025f9e11b5a-43da-4681-b4b0-323a9189e3a8verify ↗
- Figma Design de interfaces do zero ao profissional 2025Udemy · Jul 2025UC-492cd51d-028a-4f6a-858f-f384efc6d905verify ↗
- IA + Node: Marketplace InteligenteRocketseat · Jul 2025b918abf8-750a-49ae-8e93-fa4983a317d7verify ↗
- Kubernetes: Deployments, Volumes e EscalabilidadeAlura · Jul 202550a9f501-112d-4bb4-9370-a374ef6ea3cfverify ↗
- Kubernetes: Pods, Services e ConfigMapsAlura · Jul 20255c7eff73-69ca-4ae0-93b2-4e663b488e4cverify ↗
- Redes Wi-Fi: criando uma rede sem fio de modo seguroAlura · Jul 2025d6cec10a-c5a2-4e7f-a9cd-773f8c67e404verify ↗
- Redes: construindo um projeto com VLANs, políticas de acesso e conexão com internetAlura · Jul 2025aea02301-92ad-4f7f-9230-8187a025a125verify ↗
- Redes: dos conceitos iniciais à criação de uma intranetAlura · Jul 2025ed7a0fa9-f778-413a-87bf-f5a03b26f56cverify ↗
- Redes: implementando roteamento, DNS e IPv6Alura · Jul 202518b4ad5d-574f-4f7e-a3a1-bfa7ee2067b8verify ↗
- DDD no Node.jsRocketseat · Jun 2025ce6c2c67-3651-4ede-a647-71dc1ba39693verify ↗
- DevOpsRocketseat · Jun 2025052eef68-9cb2-426f-b250-4e968f66b5b0verify ↗
- Figma for DevsRocketseat · Jun 20254cf9e69d-ce34-46a7-b448-eb6ea124e166verify ↗
- Fundamentos do ReactRocketseat · Jun 2025ddfb4e03-27a9-4b59-9776-7e443f065774verify ↗
- IAC com TerraformRocketseat · Jun 2025c80d014a-41cb-49ed-a242-6af9f7bbf375verify ↗
- KubernetesRocketseat · Jun 2025c80c0f53-df28-4a26-8084-83b248ed3fdfverify ↗
- Pipelines CI/CD com GitHub ActionsRocketseat · Jun 20254b12e3b6-925c-46d5-9f91-b60138841109verify ↗
- Soft SkillsRocketseat · Jun 2025adbdee12-00bd-4d51-9f88-2e87396cd557verify ↗
- NLW Connect - FullstackRocketseat · Feb 202570cb182c-78ed-4244-8822-707dfa88d207verify ↗
- NLW Connect - NodejsRocketseat · Feb 2025631289f8-1f22-49e3-a7c8-97346d715c9dverify ↗
- NLW Connect - ReactRocketseat · Feb 202530745ef9-a86d-4464-921d-036e10caaf56verify ↗
- Containers com Docker e Docker ComposeRocketseat · Dec 20242cac2e42-e771-4b88-8ee9-ba38a5323692verify ↗
- Criando SaaS com Next.js e RBACRocketseat · Dec 2024409feb19-04d3-416b-b7ed-cbbfafcde7e7verify ↗
- NLW Pocket: Mobile - React NativeRocketseat · Dec 202490a2207e-af5c-48f0-81e1-bd0df98b28e0verify ↗
- Fundamentos da Cultura DevOpsRocketseat · Oct 2024bd5a0cff-7cda-4d0b-a44f-4cca93b9dac4verify ↗
- Git e GitHubRocketseat · Aug 202432f4ff71-c120-4dd5-a396-78c54b4ffd06verify ↗
- Aprofundando em Next.jsRocketseat · Jun 2024bb626d12-b332-48f4-8202-e69d8691a36dverify ↗
- BFF com Node.js: Usando microsserviçosUdemy · Jun 2024UC-dfe43660-43de-4938-b3a9-8eac53552032verify ↗
- Fundamentos do Next.jsRocketseat · Jun 2024469702a3-726f-4871-9c7b-faa5b20f4d48verify ↗
- Integrando Frontend e BackendRocketseat · Jun 20249daae507-9d5b-4975-95c1-f7e59f5dfd1cverify ↗
- NestJSRocketseat · Jun 202471c361a7-b3e1-452c-b2bb-2173eae2c16bverify ↗
- ReactJSRocketseat · Jun 20240f08f44f-b09f-451b-95ab-8bc30e324fbcverify ↗
- Aprofundando em HooksRocketseat · May 202430203305-79cc-4ade-9e3c-6daf0cf23f5cverify ↗
- Fundamentos do ReactRocketseat · May 202441fb3844-36be-4f9e-b7d4-c2a68e0ed868verify ↗
- HTTP e PerformanceRocketseat · May 20240b9aa4f8-b778-4d2d-9a44-83aaf7a8824everify ↗
- Backend básicoRocketseat · Apr 20247e6afd93-f6ed-4690-a4ef-f280cfeb200averify ↗
- DeployRocketseat · Apr 20248aa5c45d-d816-4242-859d-206cebfb22c4verify ↗
- Git e GithubRocketseat · Apr 2024246a5e8d-6f0f-4abc-96cd-7aa877ae2f36verify ↗
- Integração Backend com FrontendRocketseat · Apr 2024bf041817-6fcb-4c77-a1ce-07a25a7c5f6averify ↗
- JavascriptRocketseat · Apr 2024361bbbc7-cde9-40c4-90d3-ba4ce696c968verify ↗
- NestJS 2024Udemy · Apr 2024UC-f81234dd-614d-456e-94f6-d337862f5c8dverify ↗
- NLW Unite - DevOpsRocketseat · Apr 20244986a67c-130d-4f4c-8d4b-5b68e165e38bverify ↗
- NLW Unite - NodejsRocketseat · Apr 2024e977355f-1ada-499c-a2f4-95e35dcdfd8bverify ↗
- NLW Unite - React NativeRocketseat · Apr 2024e13aae24-6bc3-49d2-9306-1a93c298195cverify ↗
- NLW Unite - ReactjsRocketseat · Apr 202466e17911-e62f-4956-9e74-a8e0226d760everify ↗
- Node.jsRocketseat · Apr 202465a3a638-1578-49bc-9293-28489c106f5cverify ↗
- ReactJS básicoRocketseat · Apr 20244b9f70aa-7dad-4336-9137-33023f99b4eaverify ↗
- MongoDBUdemy · Feb 2024UC-aa3df161-8bda-470a-a8d5-958b3767e867verify ↗
- Dart: Primeiros passos com a linguagemAlura · Apr 20204341814e-dccf-481b-ae4c-125958a856b1verify ↗
- Vetores e animação com SVG: Trabalhando com CSS e JavaScriptAlura · Apr 202091771f68-f00c-4931-bc93-fde4bc55ce9averify ↗
- Electron: Crie aplicativos Desktop com as tecnologias da WebAlura · Mar 2020f2332a91-c177-46e8-bd1a-56ca0ac60cbdverify ↗
- Node.js: Streaming de dados e repositórioAlura · Mar 202074150836-9a03-4037-b745-92a17134d9f7verify ↗
- Power BI Desktop: Carregue, analise e visualize dadosAlura · Mar 202081f3b5ba-0369-4346-96b0-233bec53f9cbverify ↗
- Raspberry Pi servidor: Samba, VPN, IoT e AWS S3Alura · Mar 20202204168d-a202-461c-a7f9-8b26167cb989verify ↗
- Segurança cibernética (Helano Matos)IPOG - Instituto de Pós-Graduação e Graduação · Feb 2020CERTIFICADO REGISTRADO NO LIVRO 016 - FOLHA 30no public link
- Arduino: Do zero ao jogoAlura · Jan 20203d076127-9e5e-460a-a90b-e8266e017e1cverify ↗
- Arduino: Introdução à robóticaAlura · Jan 2020e92b79c8-f99d-4735-bcc0-632047e01753verify ↗
- ESP32: Detector de presença com Bluetooth Low EnergyAlura · Jan 2020d91abe88-5626-4cec-9ab8-ef49bad0688everify ↗
- NodeMCU e ESP8266: Medindo e publicando dados com MQTTAlura · Jan 20201d3a99e4-9563-4fe9-aa70-aaf40b422842verify ↗
- NodeMCU e ESP8266: Monte um brinquedo interativo para seu petAlura · Jan 20205a2f2160-ccd9-4647-aef0-e71a499ff37dverify ↗
- ECMAScript 8 e 9: Novas formas de escrever em JavaScriptAlura · Dec 2019107b3dd4-5831-4710-b8cc-3bca7f53a55everify ↗
- Git e GitHub: Controle e compartilhe seu códigoAlura · Dec 20194f653bcc-938b-4d7f-a300-4abae1019ffbverify ↗
- Git e GitHub: Estratégias de ramificação, conflitos e Pull RequestsAlura · Dec 2019c384fb10-10a6-4243-9a36-9db9679b094bverify ↗
- HTTP: Entendendo a Web por baixo dos panosAlura · Dec 201978197c23-9715-4408-85eb-97f2786f1e6averify ↗
- JavaScript avançado I: ES6, orientação a objetos e padrões de projetosAlura · Dec 2019fbcae2ce-7ffa-4b6a-bce2-747b20a8cf89verify ↗
- JavaScript avançado II: ES6, orientação a objetos e padrões de projetosAlura · Dec 2019d2e36a5e-4f7d-4e41-9d7b-d0fda8cce110verify ↗
- JavaScript avançado III: ES6, orientação a objetos e padrões de projetosAlura · Dec 2019db6b817b-8b22-4ae1-be3e-f82247fc6298verify ↗
- Node.js Parte 1: Inovando com JavaScript no BackendAlura · Dec 201976d60714-a3eb-4053-a6ed-b00fb065d1a8verify ↗
- Node.js Parte 2: MVC, autenticação e autorizaçãoAlura · Dec 2019a9117f45-72a7-49bc-9650-2de3d18371bbverify ↗
- Webpack: Manipulando módulos na sua WebAppAlura · Dec 2019ebcf868b-10b1-41b6-b3db-ce6c0497e7a7verify ↗
- Docker: Criando Containers sem dor de cabeçaAlura · Nov 2019926e478b-4232-4875-aaea-61406880e344verify ↗
- Linux I: Conhecendo e utilizando o terminalAlura · Nov 2019766117da-57e2-424b-bbd9-78eaf8b2b62averify ↗
- Linux II: Programas, processos e pacotesAlura · Nov 201979c90d5e-344d-4fb7-81eb-d5e08f72fa2cverify ↗
- Vue JS 2 - O Guia Completo (incl. Vue Router & Vuex)Udemy · Jun 2019UC-0MULPAPBverify ↗
- Banco de Dados e SQLUdemy · May 2019UC-NYF1GF7Zverify ↗
- Web Moderno com JavaScriptUdemy · Jan 2019UC-L16M4HTVverify ↗
- VueJS 2Udemy · Sep 2018UC-XJ2JCL7Overify ↗
- Docker: Ferramenta essencial para DesenvolvedoresUdemy · Jan 2018UC-X0ZDMCJRverify ↗
- Curso Completo do Desenvolvedor NodeJS e MongoDBUdemy · Oct 2017UC-IP9HXTO8verify ↗
- Mongo, Express, Angular 1 e NodeUdemy · Oct 2017UC-0AGK0YCLverify ↗
- Construa um E-Commerce com Python 3 e DjangoUdemy · Aug 2017UC-ST40XLE9verify ↗
- CSS Fundamentals courseSololearn · Aug 20171023-4086050no public link
- HTML Fundamentals courseSololearn · Aug 20171014-4086050no public link
- JavaScript Tutorial courseSololearn · Aug 20171024-4086050no public link
- Python: Programação Orientada a Objetos com Python 3Udemy · Aug 2017UC-E65NAKAFverify ↗
- Python para Android, iOS, Win, Linux e MacUdemy · Mar 2017UC-OFEE279Gverify ↗
Contact
Let us talk.
Open to conversations about multi-tenant architecture, Meta platform integrations, application security and process automation.

