Frederico Zolio

I lead a team of 6 engineers and own APIs and services behind Rio's city SuperApp, plus the data pipelines for Nota Carioca, the city's e-invoicing system.

• Lead a team of 6 engineers and run technical hiring for the area: take-home challenges, interview scripts and evaluation.
• Top contributor to the SuperApp courses, jobs and employability API (Go, PostgreSQL, Redis), with layered authorization through Keycloak, Heimdall and Cerbos and canary releases gated by Prometheus analysis.
• Built Rio Queue, a virtual waiting room (Python, Valkey, SSE) that shields Nota Carioca and the SuperApp during traffic spikes. Protected apps only add a script tag.
• Built public-service search in Go and pgvector: full-text, embeddings and HyDE fused with RRF, cross-encoder reranking, and a full-text fallback when the model fails.
• Ran the SuperApp load test with k6: 1.1M requests in 32 minutes with zero errors, peaking at 903 req/s on the citizen data API.
• Rewrote the Nota Carioca BigQuery → Oracle load with SQL*Loader direct path. It runs 31 to 33x faster and became a production Prefect pipeline with zero-downtime table swaps.
• Root-caused a Cloud Storage cost anomaly (R$ 128k/year in projected savings) and built Billing Guard, which shuts off runaway APIs outside business hours.
• Brought AI agents into engineering: the EAí assistant gateway in Go, the city's MCP server, an incident triage bot, and a coding-agent package for developers with spend controls in Bifrost.

The company I co-founded with my business partner. I own architecture, infrastructure and delivery for every product.

• Co-founded Vizo; I own architecture, infrastructure (GCP, OpenTofu) and delivery for every product.
• Alliomed, a clinic management SaaS with paying clinics: scheduling, medical records with AI drafts from the visit transcript, ICP-Brasil digital signatures, Mercado Pago payments and per-clinic isolation with PostgreSQL RLS. 350+ of my PRs merged.
• Proventus, a social security analysis platform bought by two law firms that still use it: document extraction with LangGraph and Gemini, a GoRules decision engine and a FastAPI backend.
• Sienge SaaS RPA: merged six fiscal and finance robots, previously spread across separate repos, into one multi-tenant platform on Playwright, Prefect and FastAPI. The product was sold to another company.
• Maestro: a delivery pipeline where coding agents implement, review and validate issues in staging, with a speculative merge queue and automatic revert when validation fails.
• AWS infrastructure assessment for an engineering consultancy: root cause of CPU spikes, 615 security checks, 24% of annual spend flagged as waste and a review of 111k lines of Java.

Paid projects for public sector, nonprofit and startup clients.

• PLANEHAB Nosso Bairro (FDTE for Bahia's Urban Development Secretariat): a gamified public consultation platform on housing, live in production. I moved the backend to Hono, Drizzle and PostgreSQL and built facilitator-controlled sessions, offline sync and deploys with automatic rollback.
• Conecta Solar (Revolusolar): public showcase of solar installers trained by the nonprofit, with an admin panel, built on Next.js, Hono and PostgreSQL behind Caddy.
• Vardis and LivinHub: data platform architecture support and a monorepo restructure.

I was a partner in a data and AI products company that closed in 2026.

• Built NDC Nexus, an agent orchestrator in Elixir/OTP with Jido, Oban and pgvector memory, where every external action waits for human approval.
• Built a WhatsApp group monitor with voice note transcription and narrative detection (FastAPI, Celery, Baileys, Gemini) and the company's internal ERP (Fastify, Prisma, PostgreSQL).

Information security for clients and internal teams.

• Supported clients and internal teams on information security, writing policies, procedures, reports and technical documentation aligned with ISO 27001 and ISO 27002.
• Used Python to analyze data and logs for security work.