Gustavo Neto Email & Phone Number

Porto Alegre, Rs, Br

São Paulo, São Paulo, Brazil

São Paulo, São Paulo, Brazil

São Paulo, São Paulo, Brazil

I am the senior technical reference for the Payments team, which is responsible for the POS terminals, and also for transaction capture, clearing, and settlement. Since I joined, I have reviewed and helped redefine core concepts and the overall solution architecture. I have taken the lead role in critical initiatives, like the legislation-mandated registration of every merchant's account receivables in a central, BACEN-approved registry (an obligation that would cause the company to cease operating if not implemented within the mandated timeframe). ▪️ Designed systems to prepare and store accounting records for financial transactions. ▪️ Designed a new clearing and settlement pipeline for financial transactions. ▪️ Led the "merchant receivables registration" project. ▪️ Authored code for integrating with Thales payShield 10k HSMs. ▪️ Collaborated in the PCI-DSS and PCI PIN certification efforts. ▪️ Maintained constant dialog with the legal team, monitoring relevant legislation. ▪️ Maintained a constant conversation with the business and product teams, in order to understand future needs, keep expectations aligned, and provide expert technical support. ▪️ Selected and hired vendors when needed (CIP Registradora, RTM Financial Net, IBM Connect:Direct).

Brasília, Federal District, Brazil

Acted as a consultant and development leader in the design and prototyping phases of a new POS terminal for electronic payments: ▪️ Linux drivers development/troubleshooting ▪️ Close collaboration with the hardware development team ▪️ Responsible for PCI compliance aspects ▪️ Designed and developed firmware for the MAX325xx secure MCU family (https://www.maximintegrated.com/en/products/microcontrollers/MAX32560.html), using the FreeRTOS real-time operating system.

Porto Alegre Area, Brazil

Recruited and led the software development team responsible for Sicredi's digital-first, Visa credit card issuing operation (woopsicredi.com). I defined the technology stack used by the team, the architecture and main concepts of our systems, and also authored a significant part of the code. ▪️ We deployed the new card issuing operation in record time. ▪️ First LatAm company using Visa's Customer Transaction Controls API in production. ▪️ Sole programmer in the Credit Card Deferred Net Settlement System (aka Agenda Financeira). ▪️ We integrated with CSU CardSystem (third party vendor) as a provider for some of our issuing needs. ▪️ Designed the PCI-compliant security framework for an user to change his PIN in the mobile app. ▪️ Acted as the team's focal point for interactions with internal Sicredi teams (user accounts, core banking, accounting, legal, compliance) and with external vendors (CSU CardSystem, TecBan, VISA, First Data).

Porto Alegre, Rio Grande Do Sul, Brazil

Worked in the backend server for a Hollywood studio game, Looney Tunes: World of Mayhem (aquiris.com.br/en/game/looney-tunes). Code written in Java, deployed to the AWS cloud, using services such as DynamoDB and ElasticSearch.

Porto Alegre Area, Brazil

I was one of the four founding members of the company, in charge of defining and delivering all of its technology needs. I have recruited and led the initial technology teams (frontend, backend, security), defined the goals and technologies to be used, and architected the most important initial concepts.As the initial goal was to have an universal wallet for mobile payments and services, we created a 'Vault' server for credit card sensitive authentication data storage, in compliance with the PCI-DSS standards. We developed financial transactions gateways, and integrated with relevant services like prepaid transportation cards recharging. We wanted you to feel it was ok to forget your wallet at home, as long as you had brought your phone. ▪️ We integrated with and used Stone Pagamentos as an acquirer. ▪️ We offered split payments functionality to our clients. ▪️ We looked at Stripe, Uber, Whatsapp, WeChat for inspiration. ▪️ We used AWS services heavily, aiming at a simple but easily-scalable operation. ▪️ As a start-up, we prioritized hiring young but promising people, including interns, a strategy that paid really great dividends (some of them work there to this day).

Porto Alegre Area, Brazil

I was the company owner, wearing both the manager and lead developer hats. We specialized in building custom software solutions for the financial industry, and most of the value proposition came from my expertise in the field and the ability to deliver on time. At our peak, I managed 3 other employees. ▪️ For GetNet, we provided consultancy in, and developed software for, cryptography-related projects. A lot of projects involved code for POS terminals, like the Verifone Vx family. We also defined and developed the project for remotely loading DUKPT keys into already-deployed POS terminals. This was the first time VISA ever approved something like this in the Latin America, an achievement I am still proud of. It saved GetNet over BRL 20 million in technical visits costs. ▪️ For Perto SA, we provided specialized software design and development services for their second generation POS terminal (Veloh), including some of its firmware and most of the SDK. We were responsible for its EMV L2 kernel maintenance and certification, and also ported this kernel to ATM hardware. ▪️ For Auttar, we developed a brand new EMV L2 kernel, a license enforcing library (to prevent unlicensed use of its software solution), an SSL proxy (to allow some services to use TLS without changing their source code), and helped in their PA-DSS certification process. ▪️ For Unik, we developed POS terminal solutions for fleet management and fleet card recharging (Verifone Vx520 and Pidion terminals). ▪️ For GWTrans, we developed POS terminal solutions for recharging wallets in Mifare cards (Verifone Vx680 terminal).The company was closed when I joined the founding team at 4all.

Porto Alegre Area, Brazil

As a Software Development Specialist, I worked in the maintenance of the company's EMV L2 kernel, which at the time was being used by Perto SA in their first generation POS terminal (PertOS). I also worked in a FINEP-funded project named "ICP Fácil", in partnership with PROCERGS, where I implemented software for handling document signature and signature verification under Brazil's official public key infrastructure (ICP Brasil).

Campo Bom

In the role of a Software Development Specialist, I worked in multiple projects with POS terminals and transaction gateways. Some of my best work includes: ▪️ Conception, design and implementation of the GetCrypto server, used to encrypt and authenticate transactional messages from and to POS terminals, aimed at fraud prevention and PCI-DSS compliance in the Visa/Mastercard acquiring operation. ▪️ Designed and developed libraries for transmitting to the POS terminal, in an efficient and low-overhead form, 2D graphics and barcodes for output in the thermal printer ("boletos" included). ▪️ Designed and developed libraries for compression of transactional ISO8583 messages exchanged with POS terminals, using both Huffman encoding and LZ compression, reducing packet sizes by over 70% on average. For dial-up terminals, this meant messages that could take over 3 seconds to be transmitted would take less than a second once compressed.

Porto Alegre Area, Brazil

Acted as a cryptography consultant in the RFID chip project for the National Automated Vehicle Identification System (SINIAV - CONTRAN resolution #212, 2006). ▪️ Identified and listed major attacks against RFID chips. ▪️ Identified and listed the state-of-the-art cryptographic algorithms available for use under the project's constraints. ▪️ Proposed a cryptographic solution that could meet project requirements, protect users' privacy, cope with most known attacks, and had a low implementation cost (gate count).

Porto Alegre Area, Brazil

Acted as a software engineer at the bank's information security area (USTI - Unidade de Segurança da Tecnologia da Informação). Working here gave me a firsthand view of the internet banking fraud universe, and also some of my most amusing war stories. ▪️ Criptography and software development. ▪️ PIN translation for electronic transactions. ▪️ Internet banking and ATM fraud detection and countermeasures. ▪️ PKCS#11 applications including windows logon with smart cards (for employees to unlock their computers using their ID tags).

Porto Alegre Area, Brazil

Security and smart card related research and development.

Porto Alegre Area, Brazil

System analysis and development: financial and academic systems.