Yassir HalaouiOperating record.

Secure card workflows: encrypted HSM file ingestion over SOAP with mTLS and WS-Security, idempotent asynchronous processing, CDC pipelines on Debezium and Kafka, a generic audit infrastructure, React 19 micro-frontends and AKS delivery pipelines.

• Built a service from scratch (Java 21, Spring Boot 3.5) securing the exchange between a card processor and a mobile application for payment-card PIN retrieval.
• Ingested encrypted files produced by hardware security modules over SOAP with mTLS and WS-Security, then processed them asynchronously and idempotently — webhook-driven, from Azure Blob Storage into PostgreSQL.
• Designed a change-data-capture pipeline for a multi-country beneficiary platform: transactional outbox, Debezium 2.4 on PostgreSQL pgoutput/WAL, Kafka, and Avro with Confluent Schema Registry for schema evolution — including a heartbeat that advances the replication slot to stop the WAL saturating.
• Implemented a generic audit trail: an @Auditable annotation over Spring AOP writing before/after JSONB snapshots, exposed through a keyset-paginated REST API.
• Delivered a React 19 / TypeScript micro-frontend over Module Federation into a multi-country host portal, with a type-safe BFF client generated from OpenAPI by an automated Husky git hook.
• Automated delivery from Azure DevOps to AKS: multi-stage Docker builds, Helm, Trivy security scanning with SBOM, a SonarQube quality gate, Terraform provisioning of Kafka topics and roles, and secrets in Azure Key Vault.
• Instrumented product analytics with PostHog behind Google Tag Manager and OneTrust consent, and reliability with Datadog APM, Testcontainers integration tests and JUnit / Vitest unit tests.

Java 21Spring Boot 3.5PostgreSQLKafkaDebeziumAvro / Schema RegistryReact 19TypeScriptModule FederationRTK QueryAzure (AKS, Blob Storage, Key Vault)Azure DevOpsHelmTerraformDockerDatadogTestcontainersSonarQubeTrivy

A centralized platform digitizing the exchange of motor-insurance information records between insurers, on Spring Boot, Java 21, React, PostgreSQL, Docker and S3.

• Designed and built the electronic information record used to replace paper exchange of motor-insurance histories between insurers.
• Diagnosed production incidents and optimized application performance.
• Drove code review and technical decisions, and supported users through ticket resolution.
• Wrote the unit and integration test coverage the platform is maintained against.

Java 21Spring Boot 3React 17TypeScriptPostgreSQLDockerAWS S3GitLab

Digital-signature systems and a centralized declaration platform built from scratch: IAM, Kubernetes, Jenkins, secure-by-design delivery, and leading junior developers.

• As lead: built both the front-end and back-end of a centralized fee-declaration platform for a public administration from scratch, set the architecture, sized and split the technical work.
• Brought two junior developers up to speed and owned the reviews and standards that outlasted the project.
• Built a full-stack document e-signature solution for banking documents, integrating an external signature provider's API.
• Designed fine-grained access control — roles, permissions and constraints — and integrated the bank's SSO and IAM for authentication and user administration.
• Stood up the Docker and Kubernetes development infrastructure and the Jenkins CI/CD pipelines, including the K8s deployment manifests.
• Brought the application into compliance with the bank's internal secure-by-design process and exceeded its SonarQube standards.

Java 11Spring BootSpring BatchReactTypeScriptPostgreSQLDockerKubernetesJenkinsAWS S3JUnitMockito

Consultant on a car-rental platform for a major automotive manufacturer: batch migration to Spring Boot, refactoring, and moving persistence from JDBC to Spring Data JPA.

• Migrated legacy batch processing onto Spring Boot.
• Refactored the codebase and replaced hand-written JDBC with Spring Data JPA.
• Refined requirements into technical user stories alongside the product team.

Java 8Spring BootSpring BatchStrutsPostgreSQLGoogle Cloud PlatformApigeeSwagger

Standing-order transfer products, an ATM cash-deposit API, and Java/Spring microservices running in production banking channels.

• Rebuilt the bank's standing-order transfer product — automatic execution plus after-sales operations such as suspension and amendment — and integrated it into the branch application, cutting the need for customers to visit a branch.
• Built the batch that executes those transfers automatically.
• Designed and built an ATM cash-deposit API letting customers pay into their own or a third party's account, interfacing with the ATM vendor through a secured API gateway.
• Wrote the API design contract with the external provider, and the services around it for customer, contract and account data.
• Analysed and fixed production incidents across both products.

Java 8Spring BootSpring Data JPAOracleIBM MQDockerMavenJenkinsJUnitMicroservices