Case Studies

QA Coverage Track

• Continuous sprint-over-sprint QA across IAM, Payments & Integration teams — consistently delivering new features across 52+ sprints without a missed release cycle
• Provided regular on-call production support with fast turnaround on critical blockers, ensuring minimal downtime and protecting live user experience
• Travelled on-site for on-ground quality assurance — observed real users, uncovered field-specific issues invisible in remote testing, and set up local QA systems for low-bandwidth and real-world scenarios

Test Automation Track

• Built end-to-end API test framework from scratch for IAM, Payments & Integration teams — 500+ test cases running daily on GitHub Actions with Slack notifications & detailed reports (RestAssured + JavaScript)
• Built cross-platform E2E mobile automation using WebdriverIO + JavaScript from scratch, integrated with TestMU for multi-device remote execution — enabling on-demand regression testing before every release

Performance Testing Track

• Set up k6-based load testing scripts for payment APIs — identified system bottlenecks across pods, databases, Kafka/SQS under various load scenarios, directly informing infra sizing decisions and preventing potential production failures at scale

SOC 2 Track

• Gap assessment conducted across all 5 Trust Service Criteria
• 40+ security policies drafted and enforced org-wide
• MFA, encryption at rest/transit, and access logging implemented
• Evidence automated via AWS Config + CloudTrail
• End-to-end auditor coordination managed

GDPR Track

• Full personal data flow mapping across the platform
• Consent management and right-to-erasure automation implemented
• DPA agreements executed with all third-party vendors
• DPIA conducted for all high-risk processing activities
• 750+ employees trained on security & data privacy

Agent & Cloud Architecture Track

• Designed Data Ingestion platform to interface with existing third-party cloud applications for phased migration
• Built a clean-room Linux agent that intercepted and mirrored legacy third-party operational logic
• Designed scalable Node.js (Express) cloud back-end replacing the proprietary vendor platform
• REST API layer translating edge events into standardised cloud payloads with offline sync support
• PostgreSQL + MongoDB for structured fleet data; S3 for raw telemetry archiving
• React dashboard replacing third-party monitoring — real-time fleet health, commands, and OTA status

Android & Bluetooth Control Track

• Built Android mobile app with zero-latency Bluetooth communication for real-time proximity robot control
• Seamless co-existence model — local Bluetooth commands and remote cloud REST API operating in parallel
• Intuitive operator UX for real-time robot interaction, telemetry, and control workflows

Security & Multi-Tenant Infrastructure Track

• Designed RBAC framework ensuring strict tenant isolation — customers access only their authorised assets using JWT & OAuth2 authentication with mandatory HTTPS/TLS across all layers
• GitHub Actions + AWS CodePipeline — blue-green CI/CD with zero-downtime deployments

Penetration Testing Track

• Full OWASP Top 10 assessment conducted end-to-end
• SAST via SonarQube — static code vulnerability analysis
• DAST via OWASP ZAP & Burp Suite — runtime attack simulation
• SQL Injection, broken authentication & IDOR flaws identified and remediated

Compliance Track

• Re-test conducted post-remediation for all critical findings
• Security clearance certificate issued to client
• ISO 27001 audit preparation and evidence support provided
• Zero re-audit required — passed on first attempt