Backend Engineer / Full Stack Developer
Mobilink Bank
• Built and maintained 2+ production-grade backend/full stack platforms using Python, Django, FastAPI, Flask, and Django REST Framework (DRF) for security-critical banking, identity, access, compliance, and risk workflows. • Designed secure RESTful APIs for authentication, authorization, dashboards, analytics, campaign engines, compliance workflows, asset governance, reporting, and third-party integrations, improving backend maintainability and frontend delivery speed. • Implemented JWT authentication, token-based access, session management, RBAC, least-privilege permissions, custom middleware, audit logging, CSRF protection, XSS protection, secure headers, SSL/TLS, and encrypted handling of sensitive user and security data. • Developed account-security and risk workflows using credential event tracking, employee behavior analytics, suspicious submission indicators, access audit trails, role-permission controls, and reporting signals relevant to account takeover detection and prevention. • Optimized PostgreSQL and MySQL schemas, ORM queries, indexes, migrations, and relational data models, reducing database load by 40%+ while improving performance, reliability, and data integrity for real-world production systems. • Shipped user-facing features across dashboards, forms, campaign flows, reporting views, admin experiences, and security training workflows, balancing security, privacy, compliance, usability, and polished product experience for non-technical users. • Automated CI/CD workflows using GitHub Actions, Docker, Docker Compose, automated tests, deployment checks, and repeatable build pipelines, improving release consistency and reducing manual deployment effort. • Implemented asynchronous processing with Celery and Redis for high-volume background jobs, campaign execution, data synchronization, report generation, compliance checks, email delivery, and scheduled operational tasks. • Owned production deployments on Linux/Ubuntu servers, managing release execution, rollbacks, backups, environment hardening, service uptime, incident response, SSL/TLS certificates, Nginx reverse proxy, and Gunicorn WSGI application serving. • Collaborated with security, compliance, operations, and business stakeholders in Agile/Scrum delivery, technical design discussions, peer code reviews, debugging, testing, API documentation, and production-readiness reviews.
