Modernizing a Regulated Bank's API and Application Layer

Challenge

A regulated banking platform was running on an aging API gateway and a monolithic application layer. Every change carried compliance risk, releases were slow, and the team needed a path off legacy infrastructure without disrupting a live, regulated system.

Approach

Led the migration of the API management layer from a legacy gateway to Azure API Management, and incrementally refactored the monolith toward a Next.js and microservices architecture. Introduced JWT-based auth and Key Vault–backed secrets management to tighten the security posture as part of the migration, sequencing the work in phases so the platform stayed live and compliant throughout. Also served as Scrum Lead, running the delivery process for the team executing the migration.

Impact

• —Migrated API management to Azure APIM with zero unplanned downtime
• —Reduced release risk by decomposing the monolith into independently deployable services
• —Strengthened the security posture with JWT auth and centralized secrets management
• —Kept delivery on track via Scrum leadership across a multi-phase migration