Caleo Pro

Overview

Core engineer on Caleo Pro, a multi-tenant serverless SaaS platform for U.S. public-safety agencies, built on a GraphQL/Apollo API over AWS Lambda with MongoDB and two React + MUI frontends, owning features end-to-end across backend, frontend, and cloud infrastructure. Provisioned a new AWS GovCloud environment from scratch — a partition-aware Serverless configuration, Terraform-managed Cognito authentication, and a cross-partition delivery pattern using commercial CloudFront and ACM in front of GovCloud S3 (since CloudFront isn't available directly in GovCloud). Migrated transactional email infrastructure from Amazon Pinpoint to SES (GovCloud has no Pinpoint), setting up domain identities, DKIM, custom MAIL FROM, DMARC records, and SES production access, and root-caused remaining deliverability failures to the receiving mail systems rather than AWS. Hardened GitHub Actions CI/CD pipelines across 3 apps with TypeScript and ESLint as hard gates on every PR and deploy, and maintained an 880+-test Jest suite under a per-ticket test-plan discipline. Replaced ad hoc per-feature flag plumbing with a shared org-identity tenant gate spanning frontend and backend, and audited a half-migrated RBAC permission layer to eliminate intermittent authorization failures that were blocking QA. Built event-driven notification scheduling on EventBridge Scheduler with retry and dead-letter-queue handling, added MongoDB change-stream detection of shift-time changes, and maintained the DocuSign e-signature overtime-slip pipeline, root-causing misrouted slips to a stale deployment and missing data backfill.

Highlights

• check_circleProvisioned a new AWS GovCloud environment end-to-end — partition-aware Serverless config, Terraform-managed Cognito auth, and a commercial CloudFront + ACM pattern fronting GovCloud S3.
• check_circleMigrated transactional email from Amazon Pinpoint to SES (domain identities, DKIM, custom MAIL FROM, DMARC, production access) and root-caused deliverability failures to receiving mail systems.
• check_circleHardened CI/CD across 3 apps with TypeScript/ESLint as hard PR gates and an 880+-test Jest suite; replaced ad hoc feature-flag tenant isolation with a shared org-identity gate and fixed a half-migrated RBAC layer blocking QA.