Jonas Xavier
Cloud Infrastructure Engineer at Cambia Health Solutions
United States
Summary
🤩
Rockstar🎓
Top SchoolJonas Xavier is a Cloud Infrastructure Engineer with 13 years of experience building and operating distributed systems across startups and enterprises. He blends backend development and DevOps expertise—contributing to notable open-source security tools like Anchore's Syft and Grype where he improved SBOM generation, CycloneDX output, Podman support, and CI workflows. At companies from Lytics to Cambia Health Solutions he’s focused on reliable, long-running integrations and production-ready build/deploy pipelines. Jonas brings a pragmatic systems mindset informed by earlier embedded and protocol work, and a research background in computer science that helps him tackle irregular file handling and edge-case resilience.
13 years of coding experience
9 years of employment as a software developer
Researcher, Computer Science and Geology, Researcher, Computer Science and Geology at Universidade Federal de PernambucoTechnological, Information systems, Technological, Information systems at IFPE - Instituto Federal de Pernambuco
Spanish, Portuguese, English, German
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (13)
golang10
sbom10
container10
go10
cyclonedx10
cicd10
container-image10
dockers9
vulnerability9
githubaction-workflow9
github-ci9
docker9
automated-tests8
Programming languages (15)
Github contributions (5)
anchore/syft
Oct 2021 - Aug 2022
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Role in this project:
Back-end Developer
Back-end DeveloperContributions:114 reviews, 28 commits, 61 PRs in 9 months
Contributions summary:Jonas primarily contributed to the core functionality of the `syft` tool. Their commits focused on enhancing the directory indexing and SBOM generation capabilities. Specifically, they addressed issues related to file handling, including irregular file types and symlink resolution. Furthermore, the user implemented support for CycloneDX JSON output format, integrating it with the existing SBOM structure.
filesystemsspdxociclivulnerabilities
anchore/grype
Dec 2021 - Jun 2022
A vulnerability scanner for container images and filesystems
Role in this project:Backend & DevOps Engineer
Backend & DevOps EngineerContributions:64 reviews, 11 commits, 24 PRs in 5 months
Contributions summary:Jonas primarily contributed to the Grype project by enhancing the application's logging, including version information and database update events. They also focused on improving the build and deployment processes, upgrading GitHub workflows to Go 1.18 and fixing linting errors. Furthermore, the user made modifications to the codebase to include support for Podman and updated dependencies, such as stereoscope and syft, indicating a focus on integrating and maintaining the project's core components and build configurations.
security-vulnerabilityfilesystemsvulnerability-scannersocivulnerabilities
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.