Designing and building the backend platform for Healthtech Startup. Currently our app boasts a userbase of about 5000, and 30-day retention for new users is consistently near 50%.Leveraging Go, Python (Flask), MySQL, Docker, Kong Gateway, Nginx, and Azure.Responsibilities include:- Design backend platform for a native app (iOS/Android), supporting ~5000 MAUs (monthly active users) with a 30-day retention rate of 50% by applying software design patterns, security best practices, and RESTful API principles.- Engineer a microservices architecture for robust access control, optimal request routing, and efficient operations on PostgreSQL datastores using Docker, GO, Python, Kong Gateway, and Nginx.- Work with engineers on requirements documents and architecture design reviews; write epics to drive project completion.- Collaborate with mobile developers to uncover requirements for integration of mobile interfaces with backend services, utilizing understanding of Swift and Kotlin codebases to grasp application logic. - Plan and maintain underlying cloud resources in Azure (Azure App/Container Service, Blob, Functions, Container Registry, and Database) via diagramming, configuration management, CD pipeline development, and right-sizing to limit operational costs.- Construct CI pipelines using GitHub Actions to ensure integrity of source code and containers throughout development lifecycle.- Provide secure authentication and authorization features to mobile applications by hardening Docker containers, auditing third-party libraries, and writing application code that prevents common JWT vulnerabilities and OWASP API Top 10.

- Assessed GRC technical risks associated with 900+ third-party vendors requiring storage, receipt, and access to company data, including employee PII, employee PHI, customer PII, applicant PII, and company IP, to approve/deny usage of services.- Evaluated providers' data security, IAM security, infrastructure, and regulatory compliance (PCI, SOC 2, ISO 27001, and SOX).- Reviewed vendor security questionnaires to assess information security practices and policies of prospective service providers.- Evaluated design and implementation of integrations for Slack, Salesforce, PagerDuty, Google Workspace, and other third-party applications in Azure and AWS cloud, identifying potential data risks and creating flow diagrams.- Automated triage of questionnaire responses and issue analysis for each service provider using Python, Shell scripts, and GitHub Actions to facilitate risk management for transfer of company data to third parties.- Organized monthly retrospectives for team to evaluate work and areas of improvement in relation to risk management.- Supported automation of quarterly security policy reviews for audit and compliance purposes, and programmatic kickoff of refresh reviews of service providers previously approved and assessed by the team.- Educated teams on application security requirements for third-party services, integrations between service providers and company resources (repos, apps, and services), and standards policies pertaining to software and hardware configurations.

- Maintained and developed a monolithic Laravel API, enabling online rental reservations for business (vacation rental booking), generating $60 to $80M in net revenue per quarter.- Configured and developed secondary Django API alongside AWS services, including CodeDeploy, Lambda, S3, and Fargate.- Engaged in Agile processes to facilitate understanding needs of API clients; contributed to retrospective and backlog planning.- Used SQL with MariaDB & Postgres for basic data analysis, quality assurance of new features, and overall development process.- Identified security concerns and risks during feature planning and scrum activities, emphasizing coding best practices.- Contributed to application threat modeling activities, verified effectiveness of mail server security controls by crafting emails containing malicious AppleScript payloads, and identified potential vulnerabilities in testing environments of company web portals.

- Develop and maintain business critical APIs; leveraging PHP (Laravel), Python (Django), and relational databases in MySQL and PostgreSQL.- Balance the needs of central monolithic systems and newly developed microservices.- Collaborating heavily with other engineers to grow into the backend space and ramp up on the technical stack.- Shadow and provide general assistance to the Security team/CISO to support the security of our web applications.