ELZ Flat File Recovery API - Internal Tool for Data Recovery
Developed a backend recovery API to manually retrieve and regenerate critical ELZ flat files lost due to a failed batch process triggered by a pod restart in a production banking environment. This tool enabled 100% data restoration based on user-provided business dates, ensuring uninterrupted downstream reporting for high-priority financial products.
Java
Spring Boot
MongoDB
REST API
JUnit
Maven
File I/O
Jackson
SLF4J
Postman
GitHub Copilot
- Developed a Java Spring Boot REST API to extract missed records from MongoDB and regenerate ELZ flat files, enabling seamless data restoration after batch failures due to pod restarts.
- Structured modular backend layers (Controller, Service, Repository, Mapper) to ensure clean separation of concerns and high maintainability.
- Queried MongoDB using Spring Data and MongoTemplate with business date and cut-off time logic for accurate data selection.
- Built file I/O logic to generate critical application and event flat files in ELZ format, and stored them on NAS for downstream consumption.
- Used Jackson for JSON serialization/deserialization, enabling smooth data exchange between backend systems.
- Built robust logging and exception handling using SLF4J, ensuring traceability and debuggability during rerun execution.
- Validated end-to-end data accuracy using Postman and MongoDB Compass; leveraged GitHub Copilot for faster coding iterations.
- Developed robust JUnit test suites using Mockito (including static mocking), covering success, failure, and edge cases to ensure reliability of ELZ data recovery logic.
- Gained hands-on experience in building resilient backend systems focused on data recovery, fault tolerance, and operational impact mitigation.
FileNet API Migration - Secure OAuth2 Integration with Azure AD
Enabled secure, cloud-compliant document upload workflows for a US-based banking client by migrating legacy FileNet API integrations to a modern, containerized FNCMS platform. Supported uninterrupted processing of high-stakes operations like ACATS and Legacy Apply during a strategic backend infrastructure decommissioning effort.
Java
Spring Boot
REST API
OAuth2
Azure AD
JSON
Token-Based Auth
Exception Handling
Configuration Management
- Ensured business continuity for investment account transfers and customer onboarding by replacing the legacy VM-based FileNet integration with a resilient, cloud-native REST API workflow.
- Strengthened regulatory audit compliance by logging token-based authorization, request/response cycles, and error events tied to customer documents across lines of business.
- Reduced operational risk and manual remediation efforts by enabling automated authentication and secure document ingestion aligned with OAuth2 Client Credentials flow using Azure AD.
- Modernized a legacy hardcoded credential system by shifting to dynamic bearer token authorization using OAuth2, aligning with bank-wide security modernization mandates.
- Supported enterprise-wide cloud migration and decommissioning roadmap by modernizing a critical component used across wealth management and business banking platforms.
- Prevented service disruptions and legacy system failures by validating new token-driven upload flows across Dev, Test, and Production - prior to the retirement of older APIs.
- Collaborated cross-functionally with EDM-FileNet and ACATS teams to coordinate rollout timelines, resolve integration blockers, and finalize multi-environment configurations.
- Delivered a production-grade backend enhancement that reduced infrastructure dependencies, enhanced scalability, and aligned with the bank's long-term digital transformation goals.
NHID Rotation for PCI 4.0 Compliance - Secure Credential Management
As part of a compliance initiative in the banking domain, I enhanced credential security by migrating NHID database credentials from encrypted codebase values to a secure, dynamic retrieval system using HashiCorp Vault. This aligned with PCI DSS 4.0 standards and supported weekly reporting extracts. I collaborated with infrastructure and IAM teams for credential rotation and verified stable post-change application behavior.
PCI DSS 4.0
HashiCorp Vault
Secrets
Access Control
Secure Coding
Compliance
- Enabled PCI 4.0 compliance by replacing static, encrypted NHID credentials with Vault-managed secrets, enhancing security and auditability.
- Collaborated with ISS IAM Lifecycle & Controls team to perform live credential rotation through secure screen-sharing sessions, ensuring proper access control procedures.
- Refactored configuration and authentication logic to dynamically fetch secrets from HashiCorp Vault, eliminating hardcoded credentials from the application.
- Verified end-to-end functionality of weekly banking extract reports post-rotation, ensuring uninterrupted data delivery and operational continuity.
- Resolved credential management incident, coordinating with TO/SMEs and infrastructure teams to meet audit-readiness goals and prevent compliance risks.