Architecture Overview

Zero-trust cloud-native architecture with secure workload identity and end-to-end encryption.

OIDC
Identity Federation
Vault
Secrets Management
SPIFFE/SPIRE
Workload Identity
AWS Infrastructure
VPC
Network
RDS
Database
EKS
Orchestration
Terraform
IaC
mTLS
Zero-Trust
CloudWatch
Monitoring
Project Details

Overview

The Enterprise Banking Platform modernization initiative involved designing a cloud-native architecture using Infrastructure as Code and secure workload identity. The platform improved scalability, security, and deployment consistency across all production-critical banking systems while maintaining strict regulatory compliance.

Key Features

Zero-trust architecture with OIDC-based identity federation
Vault for dynamic secrets rotation and encryption
SPIFFE/SPIRE workload identity for mTLS between services
Fully automated IaC with Terraform modular design
End-to-end observability with centralized logging and alerting

Enterprise project — source and documentation are confidential.

Quick Stats
99.99% uptime
6 clusters
800+ deploys
Zero breaches
40+ services
8m deploy time
Tech Stack
AWS Terraform EKS Vault SPIFFE/SPIRE OIDC Istio RDS GitHub Actions CloudWatch Prometheus
Team & Links
Lead: Dishant Pandya
10 contributors
#banking-platform
Last updated: 1 week ago