Giovanni Leopoldo Rozza

Backend Engineer · Java & Spring Boot · DevOps

Backend engineer with a background in embedded systems at Siemens and Nortel Networks and IT coordination and systems integration at TIM Brasil. I build secure Java/Spring Boot services and the infrastructure that runs them, from OAuth2/PKCE flows to Terraform-provisioned AWS environments.

---

🚀 Currently

• Maintaining spring-config-guard, a static analysis CLI for Spring Boot security misconfigurations
• Deepening my work in application security, infrastructure as code, and cloud deployment (AWS · Azure)

---

📌 Featured Projects

Project	Description	Stack
spring-config-guard	Static analysis CLI that catches Spring Boot security misconfigurations (exposed Actuator endpoints, hardcoded credentials, insecure DB/broker transport, CORS wildcards) before deployment. 17 rules, CI-gatable exit code, Spring Cloud Config Server mode. Validated against real-world repositories, including Spring Boot itself.	Java · Spring Boot · CLI
FiberGuardian	Quality control and traceability for incoming yarn in textile mills (🏆 3rd place, Blusoft Evolution Labs 2025). Supplier invoices with PDF upload, lab test reports with real spinning-mill metrics, JasperReports PDFs, and an audit trail. Security built on OWASP guidance: session hardening, CSRF, HTTPS enforcement, and least-privilege roles. Deployed on Azure behind Caddy.	Java 21 · Spring Boot 3.5 · Spring Security · MySQL · Flyway · Azure
DeslocaFácil	Corporate mobility MVP (🏆 4th place, Hackathon +Devs2Blu 2025). Full AWS infrastructure via Terraform (EC2, IAM, SSM), Docker multi-stage build, end-to-end TLS, and automated provisioning from zero to running containers via user-data. Built on the FiberGuardian codebase.	Java 21 · Spring Boot 3.5 · Terraform · AWS · NGINX
ds-catalog	Spring Security showcase covering legacy 2.x auth, password grant, and modern Authorization Code + PKCE flows with Keycloak.	Spring Boot 3 · OAuth2 · Keycloak
angular-rachid	Group expense splitting app with standalone components, signals, reactive forms, and automated tests. Algorithm ported from a validated Java version. Live demo	Angular · RxJS · Angular Material
jobfinder	Generates optimized LinkedIn Jobs search URLs with seniority, work mode, and posting-date filters, including automatic exclusion of unwanted seniority levels. No backend.	HTML · CSS · JavaScript

More: gerador_series_temporais_arima (ARMA time series generator in Java, Box-Jenkins methodology) · beecrowd_sql_solutions (advanced SQL challenges) · prompts-customizados-ia (AI prompts for software development personas)

---

🛠️ Tech Stack

Backend

Data

DevOps & Cloud

Frontend & Other

---

💼 Experience

• Siemens: embedded software engineering (Assembly, C++), including on-site collaboration with Siemens engineering in Germany
• Nortel Networks: embedded software development, with technical communication in English with development teams in the United States
• TIM Brasil: IT coordination and systems integration
• Higher education teaching: Statistics, Numerical Computation, and Logic (UFPR, Bagozzi, SENAI-SC)

---

🏆 Awards

• 3rd Place, Blusoft Evolution Labs 2025 (startup pre-incubation): FiberGuardian, textile quality control system. Responsible for backend, frontend, and cloud deployment on Azure
• 4th Place, Hackathon +Devs2Blu 2025: DeslocaFácil, corporate mobility MVP

---

🎓 Education

• M.Sc. Production Engineering, UFPR
• B.Sc. Electrical Engineering, UDESC
• Postgraduate Program in Java Development, UTFPR (2025)
• Java Professional Qualification Program, Entra21 / Blusoft, 400+ hours (2025)
• DevOps Professional Qualification Program, +Devs2Blu / Blusoft, 400+ hours (2025)

📜 Certifications

• Oracle Cloud Infrastructure Generative AI Certified Professional, Oracle (2024)
• Java Foundations & Java Programming, Oracle Academy (2024)
• CCNA1 Introduction to Networks, Cisco (2024)

---

📊 GitHub Stats