Software Engineer — OneBox
OneDocs — identity verification, liveness and anti-fraud platform, in production for two enterprise clients including SPTrans, São Paulo's public transport authority. Sole front-end engineer on the product team (2 back-end engineers, a tech lead and a PO).
- Built and maintained six applications: five chained, customer-facing capture SPAs (session entry with desktop-to-mobile QR handoff, liveness, document capture) plus an internal operations dashboard for manual review. The liveness app alone handled 800,000+ capture sessions in production between April and August 2026 — ~200,000 per month, predominantly mobile, with an average completion time of 1.5 minutes.
- Implemented liveness detection with MediaPipe FaceLandmarker (468 landmarks, on-device WASM inference): four-step facial challenge, auto-capture driven by stability detection, framing hysteresis and in-frame validation. Migration from the previous library improved eyeglasses support and reduced bundle size.
- Built the client-side anti-fraud metadata layer — device fingerprinting, geolocation, and IP detection with a three-provider fallback chain — and integrated Scanbot SDK for document capture with MRZ and QR reading.
- Built the operations dashboard used by human reviewers (React 19, Redux Toolkit with RTK Query, JWT auth): real-time review queue, risk analysis, and side-by-side comparison of selfies and document images, on a component library documented in Storybook.
- Led the CI/CD migration from AWS CodePipeline to GitHub Actions with OIDC federation, eliminating static deploy credentials and applying least-privilege IAM policies per project and environment. Designed the staging environment end to end — S3 Website hosting and a shared multi-origin CloudFront distribution routing several applications by cache behaviour. Deploys in ~2–3 minutes.
- Found and remediated exposed credentials embedded at build time and in versioned documentation — then built a pre-commit hook that blocks commits containing tokens, private keys or account identifiers, turning a one-off fix into ongoing prevention.
- Owned test infrastructure: migrated the test runner from Jest to Vitest, configured React Testing Library with jsdom, and added unit tests for priority modules.