e1ectrof0x

Project: TPay AuthBridge — Identity & Remote Identification A dedicated team inside the TPay domain building identity and remote-identification services for the bank and for external partners. Sole backend engineer: architecture, ADRs, implementation and test coverage are mine end-to-end. 1. Remote Identification via Gosuslugi (ESIA) & Biometrics — live in production - Regulatory-driven product. New legislation requires microfinance organisations to verify customers through Gosuslugi (the Russian state services portal and national identity provider) together with the national biometric system. Building that in-house is prohibitively expensive for them, so T-Bank packages it as a turnkey integration — supporting identification of both existing bank customers and non-customers. - Designed and shipped a standalone biometric identification adapter service with its own database: owned the data model and schema design end-to-end and co-designed the user flow, orchestrating several internal services that front the Gosuslugi integration. - Integrated SMEV, the state interagency data-exchange system, to validate customer identity documents against Ministry of Internal Affairs registries as part of the verification flow. 2. Gateway Service & Experimentation Platform Integration — architecture ownership - Business needed to A/B-test the login widget (for example, whether to render promotional banners) through DCO, the internal experimentation service. - Argued that this proxy and presentation logic did not belong in the identification adapter. - Proposed extracting its public endpoints into a new gateway service and hosting the DCO integration there, keeping the identification service focused on its own domain and giving the platform a single partner-facing entry point for future customisation. - Authored the ADR and defended the design with the architecture team, securing approval for a new service and driving its adoption — then implemented the gateway and the DCO integration. 3. ESIA Data-Sharing Adapter for a Partner Credit Product — live in production - A group automotive marketplace needed to show pre-approved credit offers from partner banks on its listing pages. Producing those offers requires pulling the user's verified identity data from ESIA (passport, driving licence, confirmed income) under T-Bank's ESIA mnemonic, after the user consents — a flow the bank's existing integration could not serve, because it could only return users to destinations inside the bank's own perimeter. - Designed a new ESIA adapter service exposing a public partner endpoint that starts authentication through the bank's ESIA integration and returns the user directly to a partner-supplied redirect URL. - Replaced the originally proposed design — backend service, separate frontend service and an auth-session database — with a stateless backend-only solution, removing an entire service and a datastore from the delivery scope along with their operational and data-retention overhead. - Owned the ADR and the critical architecture decisions, implemented the service end-to-end, and covered it with unit and component tests to roughly 90% coverage. Project: TPay Web — Online Acquiring Platform T-Bank's online acquiring platform. Merchants integrate a "Pay with TPay" button; customers are then presented with a payment form where they select an account, a linked card or a third-party bank card (OFUS), choose financial offerings such as BNPL (Dolyami) or credit card products, view cashback and complete the payment. The platform handles the full acquiring flow from payment method selection through to transaction execution. 1. Dolyami Split Payment Integration — end-to-end feature ownership - Identified the opportunity independently: analysed Dolyami BNPL (Buy Now Pay Later) usage patterns across T-Bank and prepared a value justification document for business stakeholders, securing sign-off from team lead and product owners. - Defined scope and success metrics collaboratively with business analysts: target DAU growth and conversion uplift as primary KPIs. - Authored the Architecture Decision Record, including full system data-flow design and a caching strategy for Dolyami offerings. - Proposed and designed a new dedicated microservice for client-side offerings (Dolyami offers, credit card offers) with its own database, consolidating scattered offering logic into a single owned service. Designed the architecture independently and drove adoption within the team. - Led backend implementation with one engineer: designed REST endpoints, updated the DB schema, modified multiple microservices and coordinated production rollout. - Delivered measurable business impact: 4–5% DAU increase and 2–3% conversion uplift over a 2-month post-launch measurement window. Full cycle from idea to production: ~3 months. 2. Payment Infrastructure & Card Integrations - Implemented OFUS (third-party card) support in TPay Web: integrated with existing bank-side card storage services, extended the DB schema, built REST endpoints and added monitoring and metrics. - Worked with OTP authentication flows within T-Bank's acquiring infrastructure. Implemented installment offer logic: built the DB layer and REST endpoints, integrated with external services and delivered user-facing installment offers to production. - Developed the dispute management system used by support teams for payment refund request processing, including DB schema design, stored procedures and scheduled jobs. 3. Platform & Reliability - Led the Spring Boot 2.7 → 3.2 and JDK 17 → 21 migration, reducing CVEs by 70%+ across production services. - Migrated production services to new Kubernetes clusters: authored HELM configs, updated CI/CD pipelines and configured alerts and dashboards. - Incident response: monitor alerts, triage via metrics and logs, execute rollbacks or feature flag disables. Authored postmortems with root-cause analysis and preventive action tickets. - Conduct algorithmic interviews for engineering candidates and mentor trainees through onboarding.

Four years building enterprise microservices on a large-scale telecoms platform. Contributed across backend, observability and performance. - Developed a GraphQL @fetch directive, reducing query load time by 30%. - Optimised Spring Batch jobs, improving throughput by 50%+. - Integrated Jaeger distributed tracing with Spring Boot, significantly improving observability across services. - Migrated file storage from a relational DB to MinIO object storage, reducing DB size and operational complexity. - Built and deployed microservices using Kubernetes, RabbitMQ and Apache Camel. Participated in production deployments and incident resolution.