← Career path
EXP-001 · PLATFORMCURRENT · PLANO, TX

Principal Software Engineer

Capital One · Plano, TX · Sep 2019 – Sep 2025

Principal · Full stack & platformTerraformAirflowSnowflakeDjangoMFESNSEventBridgeS3DynamoDBKafkaFigmaLambdaFlaskFlaskAPIAPI CocahMicro ServiceEvent Driven ArchitectureAuthN/AuthZ

Full Stack & Platform Engineer:

  • Built decoupled and monolith web applications:

    • Designed the Web UI/UX prototype with the Figma platform and developed production-ready UI pages using HTML, CSS, JavaScript, and Bootstrap.
    • Designed and built monolithic web applications with Django and Flask frameworks from scratch within Docker containers on Linux.
    • Built a robust three-layer web architecture: Micro-Frontend (Angular, TypeScript, Lit.dev) for domain-based modular UI and Backend-for-Frontend (Node.js/NestJS, Flask) to aggregate and simplify APIs.
    • Designed scalable Python REST APIs with FastAPI and AWS Lambda for low-latency, serverless workloads.
    • Designed and implemented Authentication and Authorization (AuthN/AuthZ) solutions, including OAuth 2.0, OpenID Connect (OIDC), JWT-based authentication, Role-Based Access Control (RBAC), and AWS IAM policies to secure APIs, microservices, and cloud resources.
    • Developed secure service-to-service communication and API authorization mechanisms, including token validation, permission enforcement, and fine-grained access control for distributed systems.
    • Built and containerized Python microservices, automated CI/CD with Jenkins pipelines, and provisioned AWS infrastructure with Terraform (e.g., Security Groups, IAM roles and policies). Orchestrated services on Amazon ECS (Fargate) with autoscaling and CloudWatch monitoring.
    • Integrated event-driven workflows with SNS, S3, and DynamoDB to trigger downstream services (email alerts, data processing).
  • Designed and implemented an event-driven data processing system using AWS Lambda and EventBridge with AWS SAM.

    • Extracted data from static storage (S3) and real-time streams (Kafka).
    • Standardized heterogeneous source formats (CSV, JSON, Parquet, etc.) into a unified schema using Python, with schema validation and quality checks integrated at ingestion.
    • Loaded transformed datasets into Snowflake using a multi-layer data architecture.
    • Developed and optimized SQL queries for metrics visualization on Tableau.
  • Designed and built a scalable Apache Airflow platform supporting CI/CD-based onboarding for internal users.

    • Deployed Apache Airflow to Amazon ECS with custom Docker images and ECS Service autoscaling, ensuring elastic capacity for webserver, scheduler, and workers.
    • Built an event-driven DAG onboarding pipeline: repositories opt in by declaring the dag-job-onboarding gear in the user's Bogiefile. Once the PR is merged, Jenkins triggers an AWS Lambda function that copies DAGs from the repository to a shared Amazon EFS mount consumed by Airflow.
    • Wired Airflow to the EFS DAG directory so the UI refreshes automatically and new DAGs appear within seconds without manual redeployments.

Engineering Lead and Scrum Master:

  • Led the successful migration of legacy data-processing jobs from third-party systems to internal platforms.
  • Created detailed roadmaps, defined scope boundaries, and executed stakeholder alignment across multiple lines of business.
  • Delivered production-ready migration solutions with POC validation, phased rollout, and full documentation.
  • Hosted knowledge-sharing sessions to onboard cross-functional teams and standardize platform usage.
  • Facilitated Agile ceremonies as Scrum Master, including daily stand-ups, sprint planning, backlog refinement, and sprint retrospectives, ensuring continuous delivery and process improvement across sprints.
  • Coached team members on Agile best practices to improve collaboration, transparency, and delivery velocity.

Platform API Coach:

  • Guided teams in designing modular, scalable, and user-centric API platforms aligned with OpenAPI standards and OAuth 2.0/OpenID Connect (OIDC) security models.
  • Defined API security standards and best practices for Authentication, Authorization, JWT token management, RBAC, API gateway integration, and service-to-service authentication across distributed microservice ecosystems.