Fintech Lending Platform: Infrastructure Modernization for Multi-Region, Compliance-Ready Operations

A regional lending platform needed to move from ad-hoc infrastructure to a fully codified, audit-ready AWS environment spanning multiple isolated services - authentication, loan processing, document handling, notifications, and a business rules engine.

I designed and built the complete infrastructure as code using AWS CDK (TypeScript), covering networking (VPC with peering for environment isolation), compute (ECS), data (RDS + DocumentDB), identity (Cognito), and messaging (SNS/SQS) - deployed across separate UAT, production, and audit environments in a single, consistent codebase.

Security and compliance were first-class requirements, not an afterthought: GuardDuty and SecurityHub for continuous threat detection, CloudTrail for full audit logging, a dedicated VPN stack for private access, and GitHub Actions OIDC for keyless CI/CD - eliminating long-lived AWS credentials from the deployment pipeline entirely.

Result: infrastructure that's fully reproducible from code, environment-isolated by design, and built to pass a compliance audit without scrambling to document what exists.