Location: San Francisco, CA | Duration: 02/2019 – 07/2019

Featured Summary: Serving as Lead Architect at First Republic Bank (via Persistent Systems), I directed the architectural design and on-site integration of a mission-critical banking compliance microservices platform known as Know Your Customer (KYC). Operating within strict regulatory and security frameworks, I led offshore development squads, orchestrated microservices on Red Hat OpenShift / Docker clusters, and enforced bank-grade security via MuleSoft API Gateway, OAuth 2.0, SAML 2.0 Single Sign-On (SSO), and JWT token authorization.

Project Overview and Banking Compliance Mandate

First Republic Bank required a modernized, automated Know Your Customer (KYC) regulatory compliance platform to verify client identities, perform automated anti-money laundering (AML) screenings, and safeguard financial transaction ledgers. The platform had to integrate seamlessly across private wealth management web portals, mobile banking applications, and branch workstations while enforcing zero-trust data protection.

Key Architectural Contributions

OpenShift Container Orchestration & Microservices Mesh

I designed the distributed microservices architecture deployed on Red Hat OpenShift container clusters. The platform broke down complex verification workflows into dedicated microservices: Customer Risk Scoring, AML Screening, Identity Document Verification, and Audit Reporting, communicating over secure TLS-encrypted internal service meshes.

MuleSoft API Gateway & Zero-Trust Gating

All external traffic from client web portals and branch applications was routed through MuleSoft API Gateway. I implemented strict security policy enforcement, rate limiting, and circuit breaker patterns to prevent cascading failures during peak transaction loads.

Federated Identity & EIDMS Token Validation

Security was anchored by integrating with the Enterprise Identity Management System (EIDMS). I implemented SAML 2.0 Single Sign-On (SSO) for internal bank staff and OAuth 2.0 for client-facing mobile applications, securing all downstream REST APIs with digitally signed, short-lived JSON Web Tokens (JWT).

Frequently Asked Questions (FAQ)