Eduardo Damasceno Guedes

OneDocs — identity verification, liveness and anti-fraud platform, in production for two enterprise clients including SPTrans, São Paulo's public transport authority. Sole front-end engineer on the product team (2 back-end engineers, a tech lead and a PO).

• Built and maintained six applications: five chained, customer-facing capture SPAs (session entry with desktop-to-mobile QR handoff, liveness, document capture) plus an internal operations dashboard for manual review. The liveness app alone recorded 800,000+ capture sessions in production between April and August 2026 — ~200,000 per month, predominantly mobile; the full flow takes 1.5 minutes on average.
• With no other front-end engineer on the team, every interface architecture decision was mine, from scope through PR to deploy. Built the component library shared across the capture applications, with tokens, accessibility and Figma fidelity, documented in Storybook on the operations dashboard, and set the team's structure, conventions and code review.
• Implemented liveness detection with MediaPipe FaceLandmarker (468 landmarks, on-device WASM inference): four-step facial challenge, auto-capture driven by stability detection, framing hysteresis and in-frame validation. Migration from the previous library improved eyeglasses support and reduced bundle size.
• Built the client-side anti-fraud metadata layer — device fingerprinting, geolocation, and IP detection with a three-provider fallback chain — and integrated Scanbot SDK for document capture with MRZ and QR reading.
• Delivered the internal operations dashboard, a back-office used by human reviewers (React 19, Redux Toolkit with RTK Query, JWT auth): real-time review queue, risk analysis, and side-by-side comparison of selfies and document images. It is a human-in-the-loop surface, where an analyst decides on the outcome of an automated verification, with loading and error states over long-running flows.
• Led the CI/CD migration from AWS CodePipeline to GitHub Actions with OIDC federation, eliminating static deploy credentials and applying least-privilege IAM policies per project and environment. Designed the staging environment end to end — S3 Website hosting and a shared multi-origin CloudFront distribution routing several applications by cache behaviour. Deploys in ~2–3 minutes.
• Found and remediated exposed credentials embedded at build time and in versioned documentation — then built a pre-commit hook that blocks commits containing tokens, private keys or account identifiers, turning a one-off fix into ongoing prevention.
• Owned test infrastructure: migrated the test runner from Jest to Vitest, configured React Testing Library with jsdom, and added unit tests for priority modules.

• Proposed and led the migration from WordPress to Next.js (SSR) with Tailwind, Strapi and PostgreSQL in Docker on a VPS, improving load speed, SEO and hosting cost.
• Owned deployment, backups, environment monitoring, on-page SEO and analytics. The engagement ran entirely in English and asynchronously, across a ~15-hour timezone gap.

• Built high-traffic applications in Next.js and TypeScript used by millions of users across ~15 Latin American countries, with Node.js, REST APIs, Ruby on Rails, Docker, Semaphore CI and AWS.
• Worked on internationalisation and localisation for that multi-country footprint, keeping the interface coherent across variants.
• Contributed to the new client space application, delivering a completely new experience to the customer base, in Agile/SCRUM teams with rigorous pull requests and code review.

Front-end and full-stack roles at ACE Startups, Equitem Multiplo, A2ad, Rio Surf N Stay, Universidade de São Paulo, Agência DPI, DENDRIX, Humortadela and WebSoluções.

SaaS and marketplace platform for private instructors and social projects, built inside the VAITEC accelerator with a product partner. Laravel 13, Livewire 4, PHP 8.4, PostgreSQL 16 + PostGIS, Redis/Horizon, Pest 5, Docker. Staging live; pre-revenue MVP, no production users.

• Designed the CI gate the platform runs on: a 426-case suite, architecture tests, formatting and dependency auditing, each failing the build, with deploys blocked until CI passes in full. An advisory with no fix available becomes a recorded exception carrying a reason and a date, never a silent ignore.
• Defined the layered architecture with machine-enforced boundaries: the reusable core never imports product code, and the presentation layer may not contain queries, business rules or permission decisions. A failing architecture test means the code sits in the wrong layer, not that the rule needs an exception.
• Multi-tenancy scoped by provider, polymorphic over organisations and instructor profiles; public ULID identifiers with a sequential int as the internal primary key; geospatial data in `geography(Point,4326)` with a GiST index.
• Data protection treated as a design requirement because the pilot involves minors: consent modelling with class-only visibility, audit Actions, and a rotation script for the application key and database password.
• Owned the infrastructure: Docker, production compose, deploy script, queue worker and nginx; migrated staging between providers while keeping the previous server as a rollback path, with backups on cron to object storage and a tested restore.

Corporate gifting business founded in 2015 as Mahalo Brownie, broadened from food into laser-cut and printed products and relaunched as Quero Brinde in 2025.

• Created and ran the company's sales channel from scratch, using AI to produce professional marketing assets at a scale a solo operator could not otherwise reach.
• Built the end-to-end AI content and listing pipeline in Python — product mockup through Google Gemini image generation to published marketplace listings — matured over a year from fully manual execution. Cut content production from 22 to 1.5 minutes per item (93% reduction).
• Built and operates the listing studio in production, a multi-user web application on a VPS behind systemd and Caddy, with authentication written from standard-library primitives: scrypt with a per-user salt, sessions stored only as a hash, `HttpOnly; SameSite=Strict` cookies, CSRF via `Origin`/`Referer` checks, brute-force lockout with timing-attack mitigation, admin/editor RBAC, step-up re-authentication before any action that publishes to the marketplace, and a per-user daily spend cap.
• Took a production route from 5–13 seconds down to fast: parallelised 16 sequential API calls, added a coalescing lock for simultaneous requests, a TTL cache with jitter to stop entries expiring together, and replaced roughly a thousand syscalls per load with a single directory index. Designed the 315-item library to render in slices driven by an `IntersectionObserver`.
• SVG and font-outline engineering feeding laser cutting: text-to-curves conversion working around library defects, rewriting browser SVG 2 into CorelDRAW-compatible SVG 1.1, millimetre units, and a baseline computed from the x-height read out of the font itself.
• Integrated the Mercado Livre API over OAuth (listings, variation groups, listing tiers, bulk updates) and built sponsored-ads management with budget and ROAS strategy.
• Built the company website and led wholesale production in the Mahalo Brownie years, delivering 2,000+ units per month to 10+ B2B partners. Ran the business full time between Smart Fit and SurfSup.
• Built and maintains the business's financial system in production (Laravel, PostgreSQL, Docker on a VPS): Bling ERP integration over OAuth 2.0, idempotent background sync, and automated monthly P&L from product recipes, fixed costs and pricing parameters.