Raket Makhim

• • Built Step Functions with Python Lambdas to integrate multiple student systems to comply with consumer protection legislation. It handled 200k assessment marks transfers with negligible failure rate in production during the June exam season.

• • Built a Java SpringBoot application to save incoming marks.

• • Acted as first line support during peak periods to detect and resolve errors then built a rota bot so the work could be spread out fairly.

• • Researched and implemented a monitoring solution for AWS Database Migration Service where logs are spread out across multiple services and accounts. This work enabled a single event to be traced across all the hops and across accounts on AWS and displayed on a dashboard.

• • Led Python scripts creation to auto-generate test data, cutting out a manual file handover step that previously required a Blackboard developer to insert data by hand.

• • Built smoke test scripts to reduce pressure on the testing team.

• • Mentored new hire and a junior developer, built onboarding and learning resources and provided ongoing technical support.

• • Full stack: Terraform, Lambda, Step Functions, DMS, Kinesis, SQS, CloudWatch.

• • Developed the full gateway platform for Romania's first digital bank, the whole project was successfully delivered in 12 months. 100,000 customers onboarded in the first 2 weeks.

• • Designed and maintained the gateway spec in OpenAPI 3.0, keeping front-end teams moving while back-end services were still in progress.

• • Wrote Terraform config for the gateway deployment, establishing an IaC deployment process.

• • Wrote Python scripts to validate AWS Swagger specs and auto-generate test and prod config files.

• • Set up CI/CD pipelines for gateway deployments via GitHub Actions.

• • The project was awarded the Celent 2025 Model Bank for Digital Bank Launch, the first Romanian bank ever recognised by Celent.

• • Designed and led early implementation of payload encryption on Apigee X using JWE hybrid encryption.

• • Designed a public key exchange using Apigee KVMs to store and serve keys for JWE payload encryption.

• • Built an OAuth 2.0 authentication and authorisation system. Implemented gateway-level security policies including rate limiting, JSON threat protection, and SQL injection prevention.

• • Built JSON-to-SOAP transformations to handle communication with legacy endpoints.