Technical Articles
Practical guides and system architecture deep-dives based on real-world platform engineering
Designing a Centralized Identity Gateway for 70+ Microservices
Auth architecture across heterogeneous actors: OIDC, mTLS, SAML, and OPA sidecars
How we structured a unified, four-lane authentication and authorization system to secure service-to-service communication, enterprise SSO, and external API integrations for 70+ distributed microservices.
PostgreSQL Performance Engineering: Reducing CPU on High-Throughput Ledgers
How we tuned a critical transactional ledger to scale from 10K to 500K daily transactions
A practical guide to database tuning. Learn how we resolved replication delays, optimized connection pools, and rewrote locking strategies to scale a critical PostgreSQL instance.
Building an Event-Driven Agentic AI Security Investigator
Automating incident triage, clustering, and pull-request creation using Bedrock and vector embeddings
An exploration of Agentic AI. Discover how we built an automated system that monitors security alerts, performs embedding-based root-cause analysis, and auto-generates pull requests.
Migrating 70+ Microservices to Java 21: Hard Lessons in Dependency Governance
Standardizing Spring Boot 3, virtual threads, Jakarta namespaces, and SAST/DAST pipelines
The logistics of a large-scale framework migration. How we upgraded dozens of active services, resolved Jakarta namespace changes, and achieved significant performance boosts using virtual threads.
Distributed Tracing: Implementing Context Propagation at Scale
How we tracked transaction paths across asynchronous barriers, queue boundaries, and thread pools
A deep dive into distributed systems logging. Learn how to maintain span context across OpenTelemetry, Kafka messaging boundaries, and custom execution pools.
Designing an Idempotent Payment Integration for Distributed Systems
Preventing double charges, handling retry loops, and managing distributed ledger consistency
How to design bulletproof payment integrations. We cover unique idempotency keys, dual-write ledger entries, optimistic locking, and handling network timeouts gracefully.
Standardizing CI/CD and Artifact Releases across 70+ Services
Implementing repeatable Maven parent POM templates, containerization standards, and security gates
How we standardized builds, containerization, vulnerability scanning (SAST/DAST), and repeatable deployments across multiple engineering teams.