About me

I own the architecture for automated customer onboarding and work on enterprise sign-in and our AI code review agent.

• Designed and built two Spring Boot services to set up new customers. The workflow tracks each provisioning stage and supports rollback. I also built the AWS infrastructure with Terraform, using ECS, EventBridge, SQS and PrivateLink.
• Worked with four domain teams to define onboarding requirements, wrote the specifications and implementation backlog, and presented the work to engineers and architects.
• Added enterprise single sign-on with Microsoft Entra ID. I handled the backend APIs, Angular admin screens, gateway routes and identity-provider setup.
• I'm leading work on Rust-based Language Server Protocol support so our AI review agent can navigate and understand code.

I helped build the platform's identity service from the start. Over time, I took on gateway fixes, document storage and tools that other teams used in their services.

• Built authentication, invitations, login flows and profile management with Spring Security and Auth0, using OAuth 2.0 and OpenID Connect. Later, I led the identity service's move from MongoDB to PostgreSQL with Liquibase.
• Fixed premature logouts and concurrent token-refresh bugs in the API gateway. I added rules and automated checks for routes, plus shared libraries for OpenFGA authorization, JWT propagation and token caching.
• Built document storage with per-tenant quotas and upload limits, plus tagging, retention and search. I also built an engine that uses configuration to map requests and responses for external data providers.
• Helped build compliance audit logging with immutable object storage and OCSF-aligned schemas. We used Athena to query the logs and added paginated exports.
• Proposed and built an AI code review agent that the company adopted as a pull-request quality gate.
• Led small teams building tools for tender analysis with retrieval-augmented generation, AWS Bedrock and Textract.

I worked on tenant security and automated the setup and removal of tenants in an insurance system.

• Added IP allowlisting with CIDR ranges, account lockout and session revocation. I also checked the system's OpenID Connect compliance.
• Designed and built onboarding and offboarding workers that handled tenant data and tracked each operation's status.

I started with endpoint and component tests in Spring Boot and MongoDB. By the end of the internship, I was building backend features for production.