Senior Software Engineer · Technical Leader

Engineering platforms institutions can trust.

I lead ambiguous, security-critical initiatives from architecture to production—working across financial institutions, digital-asset infrastructure, and pharmaceutical research while staying close enough to the code to resolve the hard parts.

Portrait of Luca Marrocco
Luca Marrocco He/Him

I’m a software engineer, helping companies build scalable web platforms with React/TypeScript, Rust/Java—connecting frontend architecture, backend services, APIs, security, performance and production reliability.

20+ years building production systems
12+ years leading customer-facing delivery
Tier-1 Italian bank integration delivered
required scientific feature scope delivered
11 high-priority RNA-seq projects served

Institutional capability

From executive priority to production reality.

The useful boundary is not strategy versus implementation. It is whether the architecture, delivery system, and operating controls hold together when the platform reaches production.

01

Architecture and delivery

Translate business outcomes into system boundaries, roadmaps, milestones, contracts, and deployable increments.

  • 0→1 platforms and critical integrations
  • Design reviews, technical strategy, mentoring
  • Executive, customer, partner, and compliance alignment
02

Security-critical systems

Design trust boundaries and governance controls for custody, signing, credentials, ledgers, and distributed infrastructure.

  • Institutional custody, MPC/FROST, Vault
  • Ed25519, ECDSA, HPKE, policy workflows
  • Auditability, isolation, operational resilience
03

Applied AI engineering

Use LLMs across discovery, architecture, implementation, evaluation, review, and documentation without outsourcing accountability.

  • Reusable prompts and context engineering
  • Evals, automated review, production-readiness loops
  • Human sign-off for security and cryptographic decisions

Selected experience

Delivery where failure has consequences.

Recent work across institutional custody, bank integrations, digital-asset markets, and scientific analytics.

Zug
Mar 2026–Present
KeyrockSenior Software Engineer · Technical Leader

Leading a 0→1 multi-tenant institutional custody platform. Designed FROST distributed key generation and two-round threshold signing over Ed25519/secp256k1, secret-shared exchange credentials, and governance-gated API-key controls; established a controlled AI-assisted workflow for security-critical Rust.

Geneva
Feb 2024–Feb 2026
RippleSenior Software Engineer · Technical Leader

Led delivery across engineering, product, banks, partners, and compliance—including Hyperledger Besu integration for a tier-1 Italian bank, a Stellar integration contributing to a $600K grant, D7 ledger delivery, and resolution of critical indexing and reserve-clearing defects.

Zug
Jun 2022–Mar 2024
Genius YieldSenior Software Engineer · Technical Leader

Led a Cardano DEX and launchpad from 0→1 across client, backend, event streams, wallet integrations, KYC, architecture, and production operations on GCP/Kubernetes; contributed directly to a 2M ADA token sale.

Basel
Dec 2018–Jun 2022
NovartisSenior Software Engineer · Technical Leader

Led the DIEP analytics platform for drug-induced toxicity and RNA-seq phenotype analysis. Embedded with five scientists, delivered 5× the required feature scope, supported 11 high-priority RNA-seq projects, and earned three contract extensions.

Engineering evidence

Systems designed past the happy path.

Six detailed case studies expose the architecture, threat models, tradeoffs, and verification—not just screenshots.

Institutional custody

MEDUSA

Multi-tenant Bitcoin and Stellar custody with a pull-based zero-trust topology, no inbound secure-zone connections, an immutable hash-chained governance ledger, and M-of-N policy-signed workflows.

KotlinSpring BootHashiCorp VaultReact
Financial integrity

Accounting Ledger

Double-entry digital-asset books with settlement and compliance lifecycles, three layers of idempotency, arbitrary-precision arithmetic, and independent Kotlin/Rust dual-run verification.

KotlinRustPostgreSQLDouble-entry
Trust boundaries

GANDALF

A Manifest V3 development wallet whose Rust-to-WASM boundary never returns plaintext secrets to JavaScript, with an Argon2id/XChaCha20-Poly1305 vault and multi-ledger signing through Taproot.

RustWebAssemblyBitcoinCryptography
Distributed systems

TETRA

From-scratch Ouroboros-lineage PoS with consensus-embedded adaptive block cadence, hand-implemented ECVRF/Ed25519, byte-exact Kotlin↔Rust nodes, 2,510/2,510 live blocks verified, and 300+ tests.

KotlinRustConsensuseUTXO
Operational resilience

Bitcoin Network System

Indexing infrastructure designed around reorgs, retries, failover, preserved history, event-sourced broadcasting, dual data stores, and from-scratch BIP341/BIP143 cryptography.

KotlinBitcoinCassandraPostgreSQL
Applied AI

Stack Sensei

A voice-native AI interview coach with ElevenLabs→Kokoro→OpenAI TTS failover, emotion-aware synthesis, and an eight-provider BYOK LLM layer with per-user circuit breakers.

KotlinSpring WebFluxReactVoice AI