Engineered the server side of a multi-tenant workspace suite: a unified admin and IAM layer spanning roles, departments, granular permissions, and tenant-/department-level app access, backing product domains for documentation (Wordy), project management, and chat behind one API surface.
Architected the service on NestJS with PostgreSQL and Drizzle ORM, integrating Better Auth and ORPC/OpenAPI contracts with Zod validation to ensure strongly typed handlers and stable client contracts.
Operationalized production readiness by implementing critical security and observability features, including Helmet, trust proxy handling, global throttling, structured logging (nestjs-pino), and Sentry error tracking.
Implemented real-time data updates for administrative workflows using Server-Sent Events (SSE) alongside REST, strategically avoiding less efficient polling.
Hardened API quality and maintainability through comprehensive testing with Jest (unit, integration, e2e), rigorous TypeScript type-checking, and ESLint enforcement.