Miguel Sá Lemos
IT Operations Engineer · Luxembourg
I like building the IT nobody has to think about.
Lead IT Engineer at Flibco, based in Luxembourg. I keep infrastructure running, lock things down, and automate the boring stuff so teams can focus on their actual work.
Most setups I touch aren’t broken, just messy. Too many tools, weird configs, stuff nobody wants to own. I go in, clean it up, simplify it, automate, and make it hold up under real use. Less noise, fewer surprises, no 2am incidents. If everything’s working and nobody notices, that’s the point.
Experience
2025 — Present
Lead IT Engineer · FlibTravel International
- Own the entire IT stack. Infrastructure, security, tooling, access management, etc. If it touches a computer, it's on me.
- Rebuilding systems inherited from rapid growth. Cleaning up permissions, consolidating tools, setting up proper monitoring.
2024 — 2025
Cybersecurity Engineer · Urban Sports Club
- Rolled out EDR, Zero Trust, cloud VPN, and DLP across the org. Got endpoint coverage above 95%.
- Set up the security awareness program from scratch and built out risk management workflows. Incidents from phishing and user mistakes dropped noticeably.
2022 — 2024
IT Systems Engineer · Urban Sports Club
- Automated onboarding, offboarding, and most of the repetitive IAM/MDM work. What used to take hours became a few clicks.
- Ran two full office moves — network design, hardware, infrastructure. Both went live with zero downtime.
2020 — 2022
IT Technician · Miniclip — Lisbon
- Kept asset tracking clean across hardware, software, and licenses. Not glamorous, but nothing ever went missing.
- Streamlined device provisioning and cut ticket turnaround times. Made the support queue a lot less painful.
Education
Computer Science · University Institute of Lisbon
Skills
Identity Management
Design and maintain authentication, authorization, and lifecycle controls across the entire workforce stack.
Device Management
Enforce configuration, compliance, and automated governance for all corporate endpoints.
SaaS Administration
Control access, configuration, and operational integrity of all business-critical cloud services.
Automation & Orchestration
Build scripts, workflows, and integrations that eliminate repetitive IT work.
What I can do
Things I can help with if you need an extra pair of hands.
Core Infrastructure Setup
Deploy scalable on-prem and cloud servers with redundancy, ensuring 99.9% uptime and seamless growth for your startup.
Security Operations
Implement zero-trust policies, endpoint protection, and compliance audits to safeguard your data and operations from threats.
Cloud & SaaS Administration
Optimize AWS/GCP/Azure and SaaS stacks (Okta, Google Workspace) for cost-efficiency and streamlined user management.
Network & Connectivity
Design secure VPNs, SD-WAN, and firewall rules to enable reliable remote access and interconnect hybrid environments.
Automation & Operational Flow
Build CI/CD pipelines, Terraform IaC, and custom scripts to automate deployments and reduce manual toil by 70%.
IT Management & Documentation
Create runbooks, asset inventories, and monitoring dashboards for self-service ops and audit-ready compliance.
Interested in working together?
I'm always open to new projects, consulting, or just a conversation.