AWS Cognito - Identity and User Management Service

• Designed, implemented, and deployed user-activity event streaming for threat protection; built the ManagedLoginBranding CloudFormation integration
• Built AWS WAF Console workflows to integrate Cognito with WAF (attach and manage web ACLs and rules)
• Re-architected Token/ASF services to a cloud-native platform, serving production traffic in 27+ AWS regions
• Built anomaly-detection (stream + real-time scoring) to identify automated sign-in abuse, reducing bot attempts
• Extended advanced security feature coverage across Cognito data-plane APIs (sign-in, sign-up)

Simple Notification Service - Pub/Sub Messaging and Mobile Notifications

• Launched an SNS SMS Sandbox that protects customers from phishing, spam, and malware via allow-listing, sender verification, and rate/volume caps; fully supported via APIs, CLI, SDK, and Console
• Co-built the AWS Amplify and AWS Cognito integration with the SNS SMS Sandbox
• Built a cloud-native service mapping SNS GL records to country ledgers with validation & audit/reconciliation
• Mitigated confused-deputy in SMS usage reports and hardened the SNS Console and SetSMSAttributes control-plane API with stricter security validation

Elastic Block Store - Cloud Block Storage

• Built a self-service platform provisioning Redash and Grafana, enabling internal EBS customers to create and manage dashboards on real-time and historical data for large-scale events

Customer Order workflows (COW-Fulfillment)

• Designed and launched a fulfillment service centralizing Amazon order-fulfillment logic with standardized APIs across all Amazon retail websites; supports ~20M orders/day
• Maintained the purchase tax & charge engine with sub-100 ms p95 and ≤200 ms p99; improved API reliability and accuracy; met 99.95% availability

Digital Assets Factory (DAF) Team

• Built a Java scheduling, multi-threaded reactive service to generate book thumbnails for digital cataloging
• Built a companion monitoring module tracking Hadoop/HDFS storage with MySQL thresholds and email notifications

Message Middleware, Device Management, and Device Adapter

• Designed reactive message-oriented middleware on RabbitMQ with fan-out APIs for systems/devices/groups
• Built a Scala admin console for RabbitMQ monitoring and CRUD (exchanges, queues, bindings, policies)
• Built a Scala console and Java backend for device management; integrated MOM to decouple commands
• Built Node.js device-control APIs (attendance logs, user CRUD) using normalized schemas and whitelisting
• Implemented Java business-layer firmware translators with common interface and Scala frontend integration
• Delivered Scala frontend with RBAC toggles and audit trails for device/firmware translator management

General Authority of Civil Aviation (GACA)

• Led design and launch of a Java billing platform with Oracle DB PL/SQL engine integrated with Oracle AR and IATA SIS
• Cut invoice cycle time 42% and processed 120K invoices/month across 38 carriers in a market of 110+ airlines