Luiz Carvalho
Software Engineer at Red Hat
Kentucky, United States
Summary
🤩
Rockstar🎓
Top SchoolLuiz Carvalho is a seasoned software engineer with 11 years of experience building secure, automated CI/CD and cloud-native systems, currently at Red Hat in Kentucky. He brings deep hands-on expertise in DevOps, back-end development, and supply chain security, contributing to high-profile open source projects like Tekton Chains and Sigstore Cosign. Luiz has a strong track record of improving build and deployment automation—authoring scripts to manage multi-step builds, enterprise contract verification, and ArgoCD-driven deployments. His work shows a practical focus on reliability and security: fixing attestation flows, policy verification, and streamlining Rekor transparency log usage. With a CS BS and MS and prior roles at Cisco and Sophos, he blends enterprise experience with open-source collaboration. Notably, he often tackles the gritty edges of CI tooling—SSL handling, dynamic bundle detection, and test-infrastructure improvements—that keep pipelines resilient in production.
11 years of coding experience
6 years of employment as a software developer
Bachelor of Science (BS), Computer Science, Bachelor of Science (BS), Computer Science at Bridgewater State UniversityMaster of Science (M.S.), Computer Science, Master of Science (M.S.), Computer Science at Rivier University
Github Skills (30)
kubernetes10
gpo10
docker10
security-hardening10
tekton10
enforcement10
bash10
policies10
dockers10
cicd10
security10
argocd10
automation10
script10
infrastructure10
Programming languages (19)
Github contributions (5)
tektoncd/chains
Mar 2022 - Nov 2022
Supply Chain Security in Tekton Pipelines
Role in this project:
Back-end Developer & DevOps Engineer
Back-end Developer & DevOps EngineerContributions:352 reviews, 14 commits, 67 PRs in 7 months
Contributions summary:Luiz contributed to the `tektoncd/chains` repository, which focuses on supply chain security in Tekton Pipelines. Their contributions include addressing OCI upload failures, updating dependencies to require Go 1.17, and removing `fmt.Println` calls. They also implemented changes to the attestation process, ensuring proper parameter handling, and added support for PipelineRun attestations. Furthermore, the user worked on improving test infrastructure and fixing linting issues.
supply-chain-securitytekton-pipelines
konflux-ci/build-definitions
Mar 2022 - Nov 2022
Role in this project:DevOps Engineer & Automation Engineer
DevOps Engineer & Automation EngineerContributions:307 reviews, 32 commits, 205 PRs in 7 months
Contributions summary:Luiz Carvalho's contributions primarily centered around automating and improving the build and deployment processes for the `konflux-ci/build-definitions` repository. They focused on enhancing the `hack/build-and-push.sh` script to support multi-step builds and tracking Tekton bundles. Significant work involved creating and modifying scripts (`hack/start-verify-ec-task.sh`, `hack/start-verify-ec-task-v2.sh`) to manage and automate the verification of enterprise contracts, including handling SSL certificates and policy configurations, demonstrating a strong understanding of CI/CD best practices and automation techniques within a Kubernetes environment. Furthermore, the user introduced support for ApplicationSnapshot resources and dynamically determined built bundles to handle changes in the number of bundles used.
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.