Skip to content
Enea Marcantoni

Enea Marcantoni

Head of IT @ Sibill

Enea Marcantoni

Head of IT @ Sibill

Download the résumé as PDF

Contact

Profile

I studied computer science at the former ITIS "G. Marconi" (now IIS "Marconi Pieralisi") in Jesi and I currently serve as Head of IT at Sibill, where I look after cloud and IT infrastructure, cybersecurity, compliance and automation.

Experience

  • Head of IT - Sibill Srl

    Milano, Italy

    2026-04 – present

    • Overall responsibility for Sibill's IT team, building on the cloud infrastructure, security and automation work carried out as Senior Systems Engineer.

  • Senior Systems Engineer - Sibill Srl

    Milano, Italy

    2024-10 – 2026-04

    • Engineering and management of cloud native services delivered through AWS (EKS, S3, ELB, etc)
    • Migration of workloads from ECS to EKS
    • AWS cost optimization (instance size tuning, reserved instances, saving plans, etc)
    • Kubernetes cluster management (Cilium CNI + Service Mesh, Argo CD, Cert Manager, Ingress HAProxy)
    • Exposure and protection of services through Cloudflare (DDoS Protection, WAF, Firewall, CDN, etc)
    • Engineering and management of the network infrastructure following the ZeroTrust approach (Cloudflare One/Warp)
    • Build, test and deploy automation (CI/CD) through GitHub Actions
    • Infrastructure provisioning and configuration through Terraform Cloud and Ansible
    • Infrastructure monitoring and alerting through the LGTM Stack (Loki, Grafana, Tempo and Mimir - Prometheus) and CloudWatch
    • Application monitoring and error tracking through Sentry/GlitchTip
    • Management of Google Workspace and of every SaaS tool used across the company (accounts, roles, security hardening, SSO, etc)
    • Move from buying devices outright to operating leases
    • Hardening of every device through the rollout of an MDM and the subsequent enforcement of policies (drive encryption, password policy, etc)
    • Asset inventory management
    • Design, installation and maintenance of the infrastructure (Ubiquiti) providing office connectivity
    • Management of the relationships with IT vendors

  • Cloud System Engineer & DevOps - Tinexta Cyber SpA (formerly Swascan Srl)

    Roma, Italy

    2024-07 – 2024-10

    • Engineering and management of cloud native services delivered through AWS (Kubernetes - EKS, EC2, EFS, S3, RDS, AmazonMQ, DocumentDB, ElastiCache, SES, ELB, Lambda) and DigitalOcean
    • AWS cost optimization (instance size tuning, reserved instances, saving plans, etc)
    • Exposure and protection of services through Cloudflare (DDoS Protection, WAF, Firewall, CDN, etc)
    • Engineering and management of the network infrastructure following the ZeroTrust approach (Cloudflare Warp and Cloudflare Access)
    • Management of the firewall used as the hub for Site to Site connections with clients
    • Build, test and deploy automation (CI/CD) through GitHub Actions
    • Infrastructure provisioning and configuration through Terraform and Ansible
    • Infrastructure monitoring and alerting through the Grafana Stack (Grafana, Loki and Mimir - Prometheus), CloudWatch and Checkmk
    • Application monitoring and error tracking through Sentry
    • Implementation of Azure AD-based SSO solutions

  • Cloud System Engineer & DevOps - Swascan Srl

    Cernusco sul Naviglio, Italy

    2021-11 – 2024-06

    • Engineering and management of cloud native services delivered through AWS (Kubernetes - EKS, EC2, EFS, S3, RDS, AmazonMQ, DocumentDB, ElastiCache, SES, ELB, Lambda) and DigitalOcean
    • AWS cost optimization (instance size tuning, reserved instances, saving plans, etc)
    • Exposure and protection of services through Cloudflare (DDoS Protection, WAF, Firewall, CDN, etc)
    • Engineering and management of the network infrastructure following the ZeroTrust approach (Cloudflare Warp and Cloudflare Access)
    • Management of the firewall used as the hub for Site to Site connections with clients
    • Build, test and deploy automation (CI/CD) through GitHub Actions
    • Infrastructure provisioning and configuration through Terraform and Ansible
    • Infrastructure monitoring and alerting through the Grafana Stack (Grafana, Loki and Mimir - Prometheus), CloudWatch and Checkmk
    • Application monitoring and error tracking through Sentry
    • Implementation of Azure AD-based SSO solutions
    • Moodle Workplace administration

  • System Administrator - Namirial SpA

    Senigallia, Italy

    2018-07 – 2021-11

    • Installation and maintenance of the equipment housed in a datacenter
    • VMware: configuration, installation and upgrades
    • Monitoring: Nagios, Cacti, Datadog, ELK and CloudWatch
    • Scripting: Bash and Python
    • OS: CentOS 6, CentOS 7 and Windows Server from 2008 to 2019
    • Web server: Apache, IIS, JBoss and WildFly
    • Mail systems: Postfix, Dovecot and Roundcube
    • Databases: MariaDB, MySQL and SQL Server
    • Networking: Cisco, Fortinet, WatchGuard, Keepalived Load Balancer and Bind DNS
    • Backup: Dell EMC Networker and Data Domain Storage
    • AWS: delivery of solutions based on EC2 Auto Scaling Groups, Application Load Balancer, S3, EFS, Lambda, ElastiCache Redis and Aurora MySQL
    • Automation: Ansible, Terraform, CodePipeline and CodeDeploy

  • System Administrator - Clabo Group SpA

    Jesi, Italy

    2017-08 – 2017-09

    • User permissions management on SAP

  • System Administrator - Clabo Group SpA

    Jesi, Italy

    2017-06 – 2017-07

    • Data extraction from the company databases
    • Creation of indicators on the quality of the products made by the company from the extracted data
    • Creation of customer satisfaction indicators from the extracted data

  • Electronics Equipment Technician (School Work-Experience Placement) - Computer World Srl

    Jesi, Italy

    2016-06 – 2016-06

    • Hardware and software maintenance on laptops and desktops
    • Desktop workstation assembly
    • Smartphone repair

Education

  • Technical Institute Diploma (Computer Science and Telecommunications) - ITIS "G. Marconi" (IIS "Marconi Pieralisi")

    Jesi, Italy

    2013-08 – 2018-07

    • Coursework centered on programming languages (Assembly 8086, C, C++, C#, PHP, Java), relational databases (MySQL), web development (HTML and CSS), systems and networking (OSI model, HTTP/S, FTP, network cabling, etc).
    • Experimental thesis: an automated, remotely controllable Pet Feeder (ESP32 microcontroller programmed in C++/Arduino, self-hosted Blynk server and mobile app).

Skills

  • Infrastructure: AWS, Kubernetes, DigitalOcean, VMware
  • Networking & Security: Cloudflare, Zero Trust, WAF, DDoS Protection, Cilium, Cisco, Fortinet, WatchGuard
  • Monitoring: Grafana, Loki, Tempo, Mimir, Prometheus, CloudWatch, Checkmk, Datadog, Sentry, AppSignal
  • CI/CD & Automation: GitHub Actions, Argo CD, Argo Workflows, Terraform, Ansible, Cert Manager
  • Programming Languages: Bash, Python
  • Databases: PostgreSQL, MySQL, MariaDB, SQL Server
  • Mail Systems: Postfix, Dovecot, Roundcube
  • Web Servers: Apache, Nginx, IIS, JBoss, WildFly
  • Operating Systems: CentOS, Windows Server, Amazon Linux
  • Identity & Collaboration: Google Workspace, Azure AD

Languages

  • Italian - Native
  • English - B1 (Intermediate)

Certifications

  • AWS Certified SysOps Administrator - Associate - Amazon Web Services
  • Foundation Course: EU eIDAS Regulation No. 910/2014, AgID Accreditations, ISO/IEC 27001 Systems, ISO/IEC 27017 and ISO/IEC 27018 Extensions - Namirial S.p.A.