Fábio Monreal - Portuguese version · Expert witness CV

• Appointed by judges for expert examinations, system audits and expert reports in complex litigation involving cybersecurity, digital fraud and technology Due Diligence in M&A operations.
• Technical Assistant for civil and corporate litigation: digital evidence, forensic analysis (DFIR) and management of complex litigation.

• Court-appointed expert for forensic analysis of work schedules, timekeeping system integrity and corporate communications e-discovery.
• Technical Assistant: strategic questions, technical opinions and rebuttal expert work in labor litigation (DFIR).

Professional Services for mission-critical environments (cloud infrastructure provisioned in Ascenty datacenters for ADD IT clients). Liaison (single point of contact) between local and global teams - translating technical detail into business language.

• Cloud Economics, IAM & FinOps: Multi-Cloud governance AWS/Azure and IAM. FinOps project for medical streaming: OPEX from US$ 15k to US$ 9k/month (-40%). VDI/TSPlus/RDS management.
• Disaster Recovery & Identities (Zero Data Loss): Incident Commander for restoration after permanent on-premises Active Directory loss; cloud↔AD soft-match (proprietary methodology / Graph API) with Zero Data Loss. Granular backup of identities and cloud data for assertive DR.
• SRE, Observability & Hardening: Zabbix automation (Python/PowerShell); KPI/KPE and SLI/SLO dashboards with alerting; hardening; deep diagnostics (kernel/memory leaks). Bitdefender XDR ↔ Zabbix integration.
• Zero Trust, Messaging & GRC: Intune MDM/MAM (Android/iOS) for executive BYOD with Least Privilege and Zero Trust (IAM + SIEM). High-complexity Zimbra environment under TOGAF/GRC: domains, migrations, legacy upgrades, encrypted chat, DMARC/DKIM/SPF. Windows/Linux File Servers + Nextcloud/OwnCloud. Bitdefender defense (endpoint/network) aligned to compliance requirements.
• BaaS, Pre-Sales & Forensics: BaaS with Veeam (anti-ransomware immutability + periodic restore tests). Enterprise POCs and advisory (file server, email, antivirus, FinOps, on-prem to cloud, MSP, Microsoft Office/Teams/Copilot licensing; M365 migrations 700+ accounts). Log forensics and technical/legal reports.

Local↔global single point of contact (ENG.IT) for validation and delivery of infrastructure and security projects. Advisory to LATAM IT Management, Legal, leadership and national Presidency - focus on GRC, compliance and resilience.

• C-Level Advisory & GRC: Consulting to the Presidency, Legal and LATAM IT Management on data sovereignty and compliance (SOC 2, NIST, LGPD/GDPR, CIS Controls). Physical and logical security governance: facial biometrics, CCTV with recording and redundancy.
• Zero Trust, VPN & XDR: Planning and documentation of remote access with endpoint posture checks (Cisco AnyConnect); network redesign (Cisco / Palo Alto NGFW). Deployment of XDR (SentinelOne) aligned to MITRE ATT&CK and strengthened SOC 2 posture.
• Disaster Recovery & Continuity: Orchestration of international failovers across two regional blackouts (migration to international DCs, DNS/endpoint cutovers and remote continuity). Support in designing physical resilience (UPS, generators) and international redundancy; migration of national SIP trunk to global relay.
• Hybrid Cloud, PAM & Data Protection: Hybrid on-premises infrastructure with private cloud integrated to PAM. Expansion of the data center (executive/legal floor) with interconnection and redundancy to the local DC. Chain-of-custody for air-gapped backups (tape → vault → secure transport with daily validations).

• Platform Engineering & IaC: Continuous development of the orchestration backend (Puppet/Hiera) for self-service provisioning of infrastructure and services (Windows/Linux, SQL, IIS, Apache, MariaDB, Zabbix, ERPs) at scale in the Equinix datacenter - from the web layer to hypervisors.
• Observability, IoT & SIEM: Telemetry for hypervisors and physical network sensors (SNMP, IPMI, WMI), integrated into the SOC and SIEM for proactive anomaly alerting.
• Secrets Management & Security: Support in implementing an enterprise secrets vault (HashiCorp Vault) with integration to Enterprise backup (Commvault), elevating the platform's security posture.

• Ascenty Datacenter (ADD IT): Provisioning and operation of cloud infrastructure, SRE, BaaS/Veeam and resilience for ADD IT clients hosted in the Ascenty datacenter.
• Equinix (via Instruct): Platform Engineering, IaC (Puppet/Hiera), CI/CD and HashiCorp Vault in a mission-critical datacenter - scope delivered for the Equinix client (observability, automation and large-scale reliability).
• Sebrae-SP (via Rio Minas Serviços): Infrastructure and connectivity for large-scale events. Local↔global liaison; communication in English.
• Kaspersky (via Sitel / Foundever): B2B Incident Response, Ransomware Forensics and Threat Hunting. Malware reverse engineering with the global engineering team; 100% success rate in reversing and recovering data across all cases handled in scope.
• HiBranding / Galatas: Co-Founder and Technology Director. Business-oriented full-stack architecture (front-end, back-end, databases and APIs), management and marketing (campaigns and prospecting); Pentesting and webmastering. Technical-commercial liaison.
• Microsoft (via Teleperformance SA): Tier 2 / Crit Sit Specialist - global critical cases and Windows 10 launch; communication in English with international engineering.

Sovereign Court-Appointed Expert AI (AIaaS)

Full-Stack Python/Django with ephemeral MLOps (Zero-Footprint): private LLM inference with Zero Data Leakage.

Retail AI Vision Engine (Virtual Try-On)

B2B engine on ComfyUI (Florence, ControlNet, IP-Adapter) with ephemeral architecture and inference FinOps.

VibranceFlow Ecosystem (Zero-Trust)

Open-source display automation suite - low-level Python (NVAPI/ctypes), 0% CPU overhead and Fernet on a Zero-Trust network. vibranceflow.vercel.app

Aurora Engine (Sovereign Local GenAI)

Async Python orchestrator (Ollama + Fooocus) with anti-OOM VRAM queues.