Kian Ting

Open Banking Dev • Build React Front End for Reading Mock SMTP Server Mails – Was tasked to build a mock SMTP server that would receive confirmation Mails from Access Manager, and I have build a React font end with interactive table to display all the conformation mails in the mail server, to ease testing of Access Manager Authentication Tree configuration.

Forgerock Config and Dev • Identity Gateway routes development – Build routes with groovy scripts customization to allow dynamic client registration, Oauth2 authorization code exchange and Oauth2 access token issuance handling.

Forgerock • Identity Manager Customization Builds – Build java scripts into parent managed objects statuses so that changes in parent objects get cascaded automatically (via event) to children objects. Build groovy scripts into Mapping transformation between Identity Manager’s Managed objects and the Identity Manager’s Connector objects so that changes in IDM’s objects would be cascaded on to other external systems like Access Manager etc. Build Identity Manager connectors to connect to external systems.

Forgerock • Identity Manager Customization Builds – Build java scripts into parent managed objects statuses so that changes in parent objects get cascaded automatically (via event) to children objects. Build groovy scripts into Mapping transformation between Identity Manager’s Managed objects and the Identity Manager’s Connector objects so that changes in IDM’s objects would be cascaded on to other external systems like Access Manager etc. Build Identity Manager connectors to connect to external systems.

IBM Message Broker 6.0 • Implement New Groovy Libraries to enable JSON Payloads – Implemented external libraries that are capable of constructing and consuming JSON payloads. • Enable Dynamic Soap Endpoint – Previous code doesn’t allow the user to dynamically set the soap endpoint ( that is different to the endpoint specified in WSDL), have employed code to allow this, resolving an issue that has been prevalent for 5 years.

• Modernized IBM WebSphere Message Broker 6.0 Application – was tasked to modernize the legacy message broker 6.0 system to be able to call REST API that uses TLS 2.1 and above communications transport protocol. This is done for a client in the investment banking industry. • Modern TLS 1.2 (and above comms termination out side of legacy system) – Set up Nginx server to terminal TLS 1.2 communications, so that message broker could interface with it to circumvent product limitation.

• Set Up Redis Cache Instance In GCP – this is for caching authentication and authorization for underlying .NET microservices that is hosted in the kubernetes cluster. • Set Up Istio service mesh - Set up the service mesh on top of the Kubernetes cluster so that we could inject custom adaptors to front all the microservices hosted in it. Here the Apigee Istio adapter is implemented to allow enforcement of front end API access authentication and authorization.

• Set up Google Cloud Virtual Private Cloud Network – Set up VPC for dev and prod environment, set up classic VPN tunnel from Google’s VPC to Azure VPC. Also set up high available VPN connection for prod connecting Google’s VPC to Azure VPC and also to client’s on-prem datacentres that has BGP routing enabled. • Set up Azure DevOps Pipeline for automation – Azure DevOps pipeline is set up for microservice build and also staged release for different environments.

• Build Google Cloud Platform Infrastructure – Was tasked to build cloud infrastructure for green field REST API microservice implementation (for a healthcare service). • Terraform Google Kubernetes Service – Create Terraform scripts to stand up Google Kubernetes service, for development, test and production.

• Employ Post Deployment Verification Test for Drupal Site Updates – Have written a number of Puppeteer (an automation test framework much like Selenium) screen automation test after a Drupal site deployment, to decide if the deployment is successful or fail. • Build in Back Up and Roll Back Feature Into the Jenkins Deployment Pipeline – Have developed site back up and roll back feature into the pipeline when post deployment verification test fails.

• In Corporate Drush Commands Into the Jenkins Pipeline – Drush commands to install new Drupal modules was incorporated into the pipeline, in the mix was also command to automatically set the site into maintenance mode when the pipeline has started running and when the pipeline successfully completed it will set it back to normal mode, this is so that public users would be blocked from using the Banking API site when deployment is going on.

•Design and Set Up Jenkins Pipeline to Automate Drupal Code Deployment – Was tasked to design and set up Jenkins pipeline for Drupal CMS development that host content for a Bank’s API (for a client in the financial institution).

• Set up Apigee Edge Micro Gateway – Was tasked to set up Apigee Edge Micro Gateway in the client’s internal network, this is to allow single ingress point to the client’s internal network, and have all the internal endpoints be accessible by the micro-gateway by merely configuring the endpoints in Apigee.

• Jenkins Pipeline to Generate Apigee Proxy Code – Create a Jenkins pipeline that would allow user to fill in some details about the new Apigee Proxy and then generate the Apigee code (via Yeoman), and the pipeline will automatically check in the new code into a GitLab repository. The same code generator pipeline will also then create a new Jenkins pipeline for the newly generated code, to stage code deployment to different environments.

• Setup Jenkins Pipeline For Apigee Code Generation and Deployments – Was tasked to create code Apigee Code generation pipeline that would accelerate on-boarding of new Apigee proxy developers (for a government agency).

• Set Up Azure API Manager – Set up Azure API Manager with private access to front the Kubernetes hosted microservice, the API Manager acts as a façade for clients to employ any policies they want to enforce, but it is predominantly used for authorization when new API consumers request for access. Also need to set up developer portal to document APIs • Set up Azure Application Gateway (as public ingress point) – This gateway is a public ingress point, it is there to secure and protect all API consumptions.

• Set Up Virtual Private Network in Azure – Set up private Virtual Network and set up VPN Tunnel from azure private virtual network to client’s on-prem network to allow access to client’s on-prem data points. • Set Up Azure Kubernetes Cluster – Set up both Development and Production kubernetes cluster that sits on the Azure Private Virtual Network, deploy microservices to kubernetes cluster.

• Set Up SonarQube for Code Scans – Set up SonarQube to do code scans on Nodejs rest API to catch OWASP security vulnerabilities and to catch unnecessary complexities in code. • Introduce Client to Azure DevOps Platform – Show case Azure DevOps Plat from and create build and release pipelines for the Nodejs microservices.

• Design and Implement Full Stack Azure API Microservices – Was tasked to design and implement Azure microservice APIs for a government agency that is regulating the education industry. • Build NodeJS Microservices – Build a number of REST microservices in Nodejs, that talks to clients back end on prem data points, at the same time introduce Nodejs REST API code generator to client.

• Implemented Munit Automated Testing – I was in charge of implementing Munit automated testing and creating test coverage criteria for all integration builds. • OData Property API Delivery – create OData property api via MuleSoft for NZ public consumption, implemented generic error handling for HTTP error responses from 4** to 500. Written up RAML specifications for public API. Deployed public API to CloudHub, configuring VPC settings.

Finance and Competitive Strategies

Computing 2nd Class Upper Division