UCB One Digital Superapp

UCB One is United Commercial Bank’s flagship digital banking and lifestyle superapp. The platform is engineered as a resilient, polyglot microservices ecosystem built to handle high concurrency, strict cryptographic security, and zero-downtime deployments.

As Lead Software Engineer & Architect, I lead a backend engineering team in collaboration with the broader engineering group, directing backend solution design, microservices architecture, and ongoing system evolution across UCB One’s digital banking platform.

---

🏛️ Major Architectural Pillars

Working alongside the engineering team, I guide the solution design and backend architecture across UCB One’s key technical pillars:

1. Identity, Security & Access Management Pillar

• Subsystems Included: CIAM Edge Auth Service OTP Validation Package Beneficiary Security Vault
• Tech Stack: Golang Echo Python/Django ECDSA-P256 PyJWT AES-256-GCM Redis
• Architecture & Leadership Impact:
  • Polyglot Edge Authentication: Architected an edge auth engine using Go for sub-50ms biometric logins (hardware-backed ECDSA-P256 keys) while leveraging Python/Django for stateful KYC onboarding.
  • Anti-Replay Protections: Engineered Redis-backed nonces and 1:1 cryptographic device fingerprinting (X-Device-Fingerprint) to eliminate session fixation attacks.
  • Encrypted Vault & MFA: Supervised the delivery of an encrypted beneficiary vault (AES-256-GCM) and a pluggable Django OTP validation library with sliding-window anti-bruteforce protection.

2. Dynamic UI & Configuration Orchestration Pillar

• Subsystems Included: Backend-Driven UI (BDUI) Engine App Registry Service
• Tech Stack: Python/Django Golang Redis JSON Schema PostgreSQL
• Architecture & Leadership Impact:
  • Zero-Deployment Rollouts: Designed a high-throughput BDUI engine dictating mobile app layouts dynamically via JSON schemas without requiring App Store releases.
  • Cache Stampede Protection: Implemented Redis SETNX distributed locking with spin-wait loops, converting 5,000 thundering-herd DB queries into 1 DB query and 4,999 memory reads under traffic spikes.
  • Semantic Version Routing: Developed a dynamic fallback matrix ensuring 100% backward compatibility for legacy mobile app versions.

3. Transaction & Ledger Settlement Pillar

• Subsystems Included: High-Availability MFS Fund Transfer Engine Transaction History & Statement Engine
• Tech Stack: Python/Django PostgreSQL Partitioning Redis Fintech
• Architecture & Leadership Impact:
  • Double-Entry Ledger Integrity: Architected core transaction pathways for wallet top-ups and MFS fund transfers, using Redis atomic locks and event-driven confirmation loops.
  • Database Partitioning: Optimized high-volume statement queries using PostgreSQL date-range table partitioning, delivering sub-second PDF exports across millions of ledger records.

4. Integration & Multi-Channel Communication Pillar

• Subsystems Included: Universal Utility Bill Payment Gateway FirePush Notification Engine
• Tech Stack: Golang Echo gRPC Firebase (FCM) Python/Django Kafka
• Architecture & Leadership Impact:
  • FirePush Engine: Designed a Go-based notification dispatcher utilizing gRPC token resolution and async worker pools to push real-time FCM and SMS transaction alerts.
  • Utility Payment Gateway: Guided the team in delivering a flexible utility integration framework for Electricity, Gas, and Water billers with automated status polling.