Joao Lima

• Lead the integration of a U.S. e‑filing platform, defining a Next.js frontend, Python/FastAPI

backend, PostgreSQL database, and Docker‑based local development workflow.

• Designed authentication and role‑based access models, user and firm data models, API

contracts, and environment configuration, ensuring secure certificate‑signing integration with

Tyler Technologies’ EFM APIs.

• Directed the architecture for a Java/Spring Boot service to handle SOAP‑based integrations

and collaborated closely with developers to deliver secure, scalable solutions.

• Translated unclear business requirements into actionable development tasks, organized

backlog items, and mentored the team on secure coding practices, CI/CD pipelines, and

documentation.

• Facilitated distributed team collaboration and alignment with legal and business stakeholders

while ensuring compliance with ISO/IEC 27001 security standards

Involved in the daily maintenance and continuous improvement of the SIPROQUIM 2 system of the Brazilian Federal Police, supporting corrective and evolutionary development activities in a Java-based environment. Responsibilities included performing functional and regression tests, assisting in the development and adjustment of Java features, analyzing reported issues, validating bug fixes, and supporting the prioritization and management of technical demands.

Worked closely with development teams and stakeholders to understand business requirements, document system behaviors, reproduce incidents, and ensure that delivered changes met functional expectations. Also contributed to quality assurance activities by testing new releases, identifying inconsistencies, reporting defects, and supporting the stabilization of the system in production and homologation environments.

This experience strengthened my skills in Java application maintenance, software testing, bug analysis, requirements understanding, demand management, system support, and collaboration in public-sector technology projects.

• • Conduct IT audit reviews to check the strength of systems, processes, and controls.

• • Assess information security risks and help spot gaps in access controls and system settings.

• • Review web and application setups to identify weak points that could lead to security issues.

• • Document findings in clear reports and offer simple, practical steps for improvement.

• • Support compliance checks to ensure teams follow internal rules and industry standards.