Rients Van Buren

Team SecDev within Bol falls under the security department and is responsible for everything related to login, authentication, and single-sign-on. My focus is primarily on the SSO application: handling customer logins for the webshop, mobile app, and all partners via OAuth2.

• Migrate 8 applications from data center to Google Cloud Platform (GCP)

• Extend OAuth2 with PKCE flow

• Implement 2FA and Captcha

• Rebuild OAuth2 module due to upgrade to Spring Security 6

• Develop load tests in Locust (Python)

• Support other developers

• Resolve (security) incidents

• Implement frontend functionality in Next.js

Kotlin 1.8, JPA, RestFull APIs, Apache Kafka, MariaDb, Spring 6, Jira, GIT, Docker, Grafana, Gitlab, AWS, OpenShift, Kubernetes, MongoDb, Oauth2, ForgeRock

• Design/implement microservices (in Kotlin)

• Participate in the setup of the new API platform

• Implement and test the integration with ForgeRock Identity Platform using Spring Security

• Implement OAuth2 flow in frontend and backend

• Act as Launching Customer for the new Identity Platform

• Coach junior developers

• Create system tests in Serenity

• Perform load tests with k6

Azure DevOps, Angular 8, Java 11, Spring Cloud Microservices, Apache Kafka, Spring 5, Jenkins, Jira, GIT, Docker, Grafana, Prometheus, Dynatrace, Pivotal Cloud Foundry

Background Lead developer of the 'Flexible Savings' scrum team. Migrating applications to the cloud is currently the highest priority at Rabobank. A microservices architecture has been chosen, running within Microsoft Azure on Pivotal Cloud Foundry. Functionalities from existing systems are being re-implemented in the microservices environment. For the Angular frontend, a single monolithic Git repository has been chosen for all Squads. By the end of this assignment, I contributed to developing a rule engine that processes transactions using Kafka Streams. Tasks:

• Implement user stories: frontend in Angular 8 (20%), backend in Java (40%), CI/CD 40%

• Develop generic Azure DevOps pipelines

• Actively improve code quality

• Review Pull Requests

• Guide and coach junior developers

• Conduct IT4IT meetings

• Implement rule engine using Kafka Streams

• Resolve production incidents

• Monitor Compliancy of applications and pipelines

• Transform CI/CD pipelines from Jenkins to Azure DevOps