To deliver a secure, cost-efficient, and scalable workforce management solution, we focused on six core areas of technical implementation:
1. Secure data handling with API isolation
We began by splitting the original monolithic backend into two dedicated APIs:
- General API: Handles non-sensitive data for operational monitoring and debugging.
- Confidential API: Isolated in a separate database to manage sensitive employee information.
This architectural separation ensured that developers had no access to private data while observability remained intact for system reliability.
2. Cost optimization through smart deployment
To minimize infrastructure costs without compromising scalability, both APIs were deployed on a single ECS. nginx was configured to route requests to separate ports, and a ZIP-based deployment strategy enabled parallel updates, preventing API conflicts and improving release stability.
3. Fully automated data migration
We replaced error-prone manual migration with a robust, automated pipeline using AWS EventBridge. The process:
- Pulled snapshots from the legacy database.
- Applied transformations to the new system with rollback-ready backups.
- Triggered migration-specific API calls to ensure data integrity.
This eliminated downtime and ensured repeatable, reliable migrations during system transitions.
4. Deep integration with Google Services
To streamline identity management and onboarding:
- Google Directory API was integrated to validate employee status in real-time on each API call, preventing unauthorized access.
- AdminSDK automated Google Workspace account creation when recruiters added new employees.
- Gmail API enabled templated emails for onboarding, resignation notices, and internal announcements.
This automation enhanced both security and HR efficiency.
5. Integration with internal system administration tool
For asset tracking during offboarding, we:
- Integrated the internal SA tool via secure API calls (credentials stored in AWS Secrets Manager).
- Enabled automatic user creation in the SA system upon new employee onboarding.
- Fetched a full list of assigned assets at resignation, generating pre-filled resignation letters for legal and IT teams.
6. Smart vacation and time-tracking logic
We implemented a flexible Vacation Period entity to support dynamic, policy-driven leave management. The system accounted for:
- Accrual cycles, usage timeframes, and expiration windows.
- Probation-based restrictions and overlapping periods.
- Real-time vacation calculation to ensure compliance and clarity.