Kristopher Almeida

Trajectory

1. 2009 — 2013

   Networks first

   I started in field IT across small businesses and retail: POS, networking and endpoints. That's where I got fascinated by how systems work and how they fail.

   • Networking
   • Endpoints
   • Help desk

2. 2014 — 2020

   The hospital

   Network security became mine, with no formal training, so I learned by reading the logs. The migration is the one I'd point to: I moved 27+ physical servers to a virtualized environment, cut infrastructure costs by roughly 30% and kept 500+ hospital endpoints running throughout, with zero downtime. In a hospital, that last part isn't optional. I also handled Active Directory identities and service accounts and was the technical contact for internal audits.

   • Virtualization
   • Firewall/VPN
   • Active Directory
   • IAM governance

3. 2020 — 2025

   Global platforms

   I carried the same approach into identity and access operations, then Oracle's Simphony, RnA and OHIM: database and infrastructure problems, root-cause work with engineering and SOPs for identity security. I handled escalations across North and South America, EMEA & JAPAC in English and Portuguese.

   • SQL performance
   • Incident response
   • IAM
   • Oracle Cloud

4. 2025 — Now

   Building the identity side

   At Gaugon, I build the identity side myself. For a multi-tenant SaaS, that's JWT/RBAC, TOTP and WebAuthn MFA, tenant-isolated storage and audit logging. I also built a retail inventory portal and a scientific data pipeline that took B2B clients from days of manual processing to minutes.

   • TypeScript
   • Next.js
   • Node.js
   • Python
   • PostgreSQL
   • Stripe

Work

Projects

Products I founded and client platforms I built.

• gaugon.com

  

  Gaugon

  Founder

  Engineering consultancy for workflow automation, infrastructure security and custom internal tools for established businesses.

  • -Marketing site, customer portal and backend API in one monorepo.
  • -Multi-tenant identity: JWT/RBAC with TOTP + WebAuthn MFA, organization-scoped data isolation and audit logging.
  • -Stripe subscription billing with idempotent webhooks.
  • -Tenant-isolated document vault with presigned URL delivery.

  • Next.js
  • TypeScript
  • Node.js
  • Stripe
  • WebAuthn
  • Vercel
  • Render

  Visit website ↗
• avistei.com

  

  Avistei

  Founder

  Field-data collection and biodiversity reporting for biologists and environmental consultancies — from the sighting to the report. Currently in pilot.

  • -Offline-first PWA with a sync API and an append-only field-evidence audit trail.
  • -Multi-tenant FastAPI boundary with RBAC and row-level security on Postgres.
  • -Data-treatment pipeline: spreadsheet ingestion, diversity indices and Word/Excel reports that took B2B clients from days of manual processing to minutes.
  • -Landing page and waitlist on Cloudflare Workers.

  • Python
  • FastAPI
  • PostgreSQL
  • PWA
  • Cloudflare Workers

  Visit website ↗
• edwardjewelers.com

  

  Edward & Co.

  Client

  Designer jeweler in Oviedo, FL, since 1995 — public website plus the shop-management platform behind it.

  • -Repair-ticket lifecycle: intake → in progress → ready → pickup, with per-item status.
  • -iPad-first admin dashboard and customer self-service portal.
  • -Square POS sync for catalog, inventory and payments.
  • -Silent thermal receipt printing with Epson ePOS.

  • Node.js
  • Express
  • MongoDB
  • React
  • Square API

  Visit website ↗
• allfitmeals.com

  In delivery — launching soon

  AllFit Meals

  Client · In delivery

  Bilingual (EN/PT) personal-chef and meal-order platform for a chef-led business operating in the US and Brazil.

  • -Order flow with Stripe payments.
  • -Admin panel with role-based profiles: admin, publisher and personal chef.
  • -Self-hosted CI and a staged pre-production environment.

  • PHP
  • MySQL
  • Stripe
  • Twig

Case study · Infrastructure / Security

Backup Modernization — legacy archives → content-addressed, encrypted, immutable

Legacy archives and mirror copies were replaced by an encrypted, deduplicated repository with independent replicas. Integrity checks, tested restores and an immutable cloud tier made recovery verifiable.

• —Unchanged data is no longer re-stored.
• —Recoverability demonstrated and validated monthly.
• —Client-side encryption and an immutable cloud tier.

• NIST CSF 2.0
• CIS Controls v8
• 3-2-1-1-0

Read the case study

More cases soon

Stack

This is the stack used in production work, not a wishlist.

Diagnostic

Contact