All Projects

12 projects across 2 employers.

HERON (GEK TERNA Group)

Interbank Payment File Transfer

A production batch-transfer service moving settlement files from a national interbank clearing system into an enterprise ERP over SFTP, on a fixed daily schedule, replacing a manual operations task. Runs on Azure Functions with durable transfer state in blob storage.

Highlight

Safely re-runnable via organization-scoped idempotency keys: re-execution after partial failure never re-delivers a file.

  • Python
  • Azure Functions
  • SFTP (paramiko)
  • Azure Blob Storage
  • Application Insights

Marketing Consent & Unsubscribe Platform

The public REST API, database schema, and ingestion pipeline behind a national energy retailer’s marketing preference pages. Recipients act on personalized campaign links; decisions sync to the corporate CRM in real time.

Highlight

Two-stage auth: caller credentials validated against Microsoft Entra ID, then a short-lived RS256 JWT bound to the link identifier, published via a self-hosted JWKS endpoint.

  • Python
  • FastAPI
  • Azure Functions
  • PostgreSQL
  • Alembic
  • +2 more

Enterprise KPI Analytics Platform

A full-stack internal portal for corporate KPI management: dashboards, quarterly goal/actual editing, field-level audit with revert, threaded comments, cross-year comparison, and server-side export to Excel, PDF, and PowerPoint. Access control runs on manual Microsoft Entra ID token verification with role-based access control, and the service is backed by 100% line coverage.

Highlight

Manual JWKS-based Microsoft Entra ID token verification, RBAC, HttpOnly cookie sessions with double-submit CSRF, correctly bypassed for bearer-token callers.

  • Python
  • FastAPI
  • Azure Cosmos DB
  • React 19
  • TypeScript
  • +2 more

IT Portfolio & Roadmap Workspace

A portfolio-management workspace over live issue-tracker data: a Gantt timeline, a what-if scenario planner across six milestone dates per initiative, a top-priority board, and a portfolio analytics dashboard. The planning surface supports per-field undo and a dedicated scenario mode for testing uncommitted changes, and the analytics layer runs on roughly 27,000 lines of feature-first TypeScript.

Highlight

In-place planning surface with per-field undo, per-row sync status, session-persisted unsaved work, and a scenario mode isolating uncommitted changes.

  • Python
  • FastAPI
  • Azure Functions
  • Azure Cosmos DB
  • React 19
  • +4 more

Consumption File Splitter & Reconciliation

A queue-triggered Azure Function that splits very large consumption files from the national electricity distribution operator into ERP-ingestible segments, with a reconciliation report proving the split is lossless. Splitting is domain-aware (records are grouped by delivery point and calendar month so no logical unit is fragmented), and reconciliation uses exact-arithmetic, arbitrary-precision decimals so spreadsheet rounding cannot mask a discrepancy.

Highlight

Domain-aware splitting: records grouped by delivery point and calendar month, whole groups packed into bounded batches; a logical unit is never fragmented.

  • Python
  • Polars
  • Azure Functions
  • Azure Storage Queues
  • Microsoft Graph

Multi-Source Document Assembly

An asynchronous service that collects every document related to a commercial record from three source systems (an AWS S3 archive, a customer portal on Azure Blob, and a third-party quoting platform’s API), merges them into one PDF, and files everything into SharePoint. Attachments are deduplicated by content hash before processing, and a page-by-page fallback salvages readable pages from partially corrupt PDFs so one bad attachment can never fail a request.

Highlight

Content-hash deduplication before processing, since the same attachment legitimately appears in multiple systems.

  • Python
  • asyncio
  • PyMuPDF
  • AWS S3
  • Azure Blob Storage
  • +1 more

Cross-Cloud Document Delivery (Azure ↔ AWS)

An authenticated Azure Function letting Azure-hosted workflows deliver documents securely into a partner platform’s AWS S3 bucket, with AWS Signature Version 4 implemented from first principles. The SigV4 implementation covers canonical request construction, credential scoping, and chained HMAC-SHA256 key derivation, with an injectable clock that keeps signatures deterministic under test.

Highlight

Hand-built SigV4: canonical request construction, credential scoping, chained HMAC-SHA256 key derivation, with an injectable clock making signatures deterministic under test.

  • Python
  • Azure Functions
  • AWS S3
  • HMAC/SigV4

Finance Data ETL to Benchmarking Platform

A scheduled ETL consolidating billing, credits, settlements, contracts, and aged balances from an Amazon Redshift warehouse and a SQL Server CRM, delivered to a third-party benchmarking platform’s API, fully in-memory on Azure Functions. Every extraction query runs behind parameterized builders with explicit column contracts, and per-source failure isolation means one unavailable store degrades the run rather than aborting it.

Highlight

Every extraction query behind parameterized builders with explicit column contracts: schemas asserted, not inferred.

  • Python
  • Pandas
  • Amazon Redshift
  • SQL Server
  • Azure Functions

Protera Technologies