Gustavo Rangel
AWS Solutions Architect · Cloud Engineer Lead

Buenos Aires, Argentina

Gustavo Rangel

Enterprise Cloud Migration · Landing Zones · Hybrid Networking · Security · FinOps · Terraform

Download CVContactLinkedInWhatsApp
Landing Zones (Control Tower) & multi-account governanceHybrid networking (Transit Gateway, VPN, Route 53 Resolver)Cloud security posture (Security Hub, GuardDuty, Inspector)Migration strategy (MGN/DMS) & modernizationInfrastructure as Code (Terraform) & automationFinOps readiness & cost optimization (CUR, Savings Plans)
4+
Years in AWS
7
Certifications
18+
AWS accounts governed
4
Regulated industries

About

Cloud Engineer Lead / Solutions Architect with 4+ years designing and delivering enterprise-scale AWS environments for LATAM clients across regulated industries and the public sector (fintech, payments, energy, and government). Certified AWS Solutions Architect Professional and AWS Security Specialty. I combine multi-account Landing Zone architecture, hybrid networking, security remediation, FinOps, and large-scale migrations with Infrastructure as Code (Terraform) and automation — leading multi-client technical teams at CloudHesive LATAM.

gustavorangel.cloud
Focus
Cloud + Security
Style
IaC-first
Delivery
Enterprise

AI + Cloud Delivery

I use automation, IaC, and AI-assisted workflows to ship faster—without compromising security. From discovery and dependency mapping to migration waves and remediation at scale.

AWS TransformCARTMigration FactorySecurity Automation
AI animation

Certifications

Badges and verified credentials

AWS Certified Solutions Architect – Professional
AWS Certified Solutions Architect – Professional
Amazon Web Services (AWS)
VerifyValid through Jun 2026
AWS Certified Security – Specialty
AWS Certified Security – Specialty
Amazon Web Services (AWS)
AWS Certified Solutions Architect – Associate
AWS Certified Solutions Architect – Associate
Amazon Web Services (AWS)
Verify
HashiCorp Certified: Terraform Associate (003)
HashiCorp Certified: Terraform Associate (003)
HashiCorp
Verify
Badge
AWS Partner: Generative AI Essentials
Amazon Web Services (AWS)
2024
Badge
AWS Partner: Migration Ambassador
Amazon Web Services (AWS)
2023
Badge
Scrum Fundamentals Certified
SCRUMstudy
2023

Tech stack

Tools and services I work with day to day

Cloud & Governance
Control TowerLanding ZonesIAM Identity CenterOrganizationsWell-Architected
Networking & Security
Transit GatewayRoute 53 ResolverSite-to-Site VPNWAF / ALBNetwork FirewallSecurity HubGuardDutyInspector
IaC & Automation
TerraformCloudFormation / StackSetsDockerAnsibleGit
Migration & FinOps
AWS MGNAWS TransformCUR / Savings PlansMontyCloud

Selected work

Representative engagements (client names omitted due to NDAs).

FinOps: AWS billing discrepancy investigation

Investigated a discrepancy between the cost reported by MontyCloud and actual AWS billing, isolating the root cause to Savings Plans discount netting at the payer level through CUR analysis.

AWS CURSavings PlansMontyCloudFinOps
Enterprise SQL Server modernization & migration

Led a complex migration of a SQL Server Enterprise HA environment (~4TB, 30+ databases) to AWS. Designed the target architecture, landing-zone prerequisites, cutover strategy, and operational guardrails.

AWS MGNEC2WindowsTransit GatewayRoute 53 ResolverTerraform
Multi-account Landing Zone & tagging governance

Designed a Landing Zone with Control Tower for scalable workload onboarding, and rolled out a 19-tag standard across an 18-account AWS organization using Terraform and CloudFormation StackSets.

AWS Control TowerIAM Identity CenterCloudFormation StackSetsSecurity HubTerraform
Hybrid network, centralized inspection & DNS resolution

Centralized inspection architecture with SonicWall NSv + Transit Gateway, and hybrid on-premises/AWS DNS resolution with Route 53 Resolver, including flow troubleshooting with VPC Flow Logs.

Transit GatewayRoute 53 ResolverSite-to-Site VPNVPC Flow Logs

Experience

Cloud Engineer Lead
CloudHesive LATAM
Sep 2024 – Present · Remote · Argentina
ProfileGitHub
  • Lead technical delivery for multi-client programs (FinOps, migration, networking, and security) for enterprise and public-sector clients across LATAM.
  • Resolved an AWS billing discrepancy through CUR and MontyCloud data analysis, identifying the root cause in Savings Plans netting at the payer level.
  • Designed the VPC subnet migration scheme (ILBS) and led AWS WAF/ALB troubleshooting for a Chilean government system.
  • Performed feasibility analysis for a public tender (2 AZs in Chile), concluding a well-founded no-go based on AWS regional infrastructure constraints.
Solutions Architect AWS · Senior Cloud Engineer
CloudHesive LATAM
Sep 2022 – Sep 2024 · Argentina
ProfileGitHub
  • Designed landing-zone architectures with Control Tower and network segmentation (Transit Gateway, inspection VPC) for multi-account environments.
  • Implemented hybrid DNS (Route 53 Resolver) and Site-to-Site VPN connectivity between on-premises and AWS.
  • Led tagging governance (19 tags) across an 18-account AWS organization, using Terraform and CloudFormation StackSets.
  • Co-presented with AWS spokespeople the webinar "Low Latency Cloud: Real-time innovation with AWS Local Zones".
SysOps · Cloud Engineer
CloudHesive LATAM
Jan 2022 – Sep 2022 · Argentina
ProfileGitHub
  • Operated AWS workloads (EC2, RDS, IAM, networking) and automated operations with Infrastructure as Code.
  • Supported migration projects and production-readiness reviews.
Senior Systems Consultant / IT Support Coordinator
Penta Security Solutions
Nov 2019 – Jan 2022 · Buenos Aires, Argentina
ProfileGitHub
  • Supported and monitored digital-channel platforms (IIS, MSSQL, .NET microservices).
  • Automated operational tooling with Docker and Ansible.
IT Systems Analyst
Intellipos SAC
Aug 2018 – Oct 2019 · Lima, Peru
ProfileGitHub
  • Administered a point-of-sale system (Aloha NCR) plus database and network infrastructure for retail clients.
Service Desk Specialist II
NetUno
May 2016 – Jan 2018 · Caracas, Venezuela
ProfileGitHub
  • Administered network accounts, physical/virtual servers, and corporate infrastructure support.
Service Desk Analyst II
Soporte SPI, C.A
Feb 2015 – May 2016 · Caracas, Venezuela
ProfileGitHub
  • On-site and remote technical support, administering servers and client-server applications.

Talks & Community

Public speaking and community engagement

Descubre el poder de tus aplicaciones: Explorando AWS AppStream 2.0
AWS User Group Chile (Meetup) · Santiago, Chile · Jun 2024
View event
Low Latency Cloud: Real-time innovation with AWS Local Zones
AWS webinar (co-presented with AWS spokespeople)

Education

Associate Degree in Information Technology
Instituto Universitario de Gerencia y Tecnología
2014 — 2017

Languages

Spanish5/5
English4/5