Systems Architect
Platforms, integration, and identity for regulated enterprises
Twenty-three years designing systems end to end — integration other teams can consume, identity bound to the service or the device, and workflows that are faster without losing control. Healthcare, banking and telecom: a missed check is not a ticket, it is a patient, a payment, or a fibre cut.
Transforms manual, fragmented and tightly-coupled systems into reliable, maintainable platforms — measurable gains in speed, consistency and operational efficiency.
23
Years in architecture
Days → min
Banking reconciliation
40%
Fewer field dispatches
3
Domains: health, bank, telco
01 / Work
mGWPlugin mobile gateway — devices, clouds, identity
Architected — and still building — a plugin platform for moving data between devices and clouds without baking either side into the app. Separate provision, data, device, crypto and local-auth planes.
Independent · Architect, lead developer
ReciprocityAdaptive therapy management
Eliminated home visits for treatment-data collection. An Azure platform takes data up from the cycler and sends updated therapy parameters back — proactive therapy, better patient outcomes.
Life Sciences · Architect, lead developer & mentor
MFUData validation & reconciliation
Eliminated manual validation checks and reduced processing of hundreds of thousands of transactions from days to minutes, with consistent rules and maker-checker auditability.
Banking · Architect, lead developer & mentor
CSPWire-transfer processing
Modernized a monolithic wire-transfer system by decomposing it into modules aligned to business processes, legal vehicles and technical layers. Removed WebSphere lock-in and introduced CI.
Banking · Architect, lead developer
Hyperion & NextGenOptical / Ethernet fault isolation
40% reduction in technician dispatches; improved fault detection accuracy and optimized utilization of expensive network test resources.
Telecom · Architect, lead developer
IRIS + TallymanPOS and debt-collection integration
Seamless synchronization of customer and debt-collection data between the POS system and Experian Tallyman, enabling reliable credit and recovery workflows.
Retail / Rent-to-Own · Integration architect
Identity platformsSSO, SAML, Keycloak and Okta
Independent Keycloak and SAML work for SaaS platforms — including a marketplace and training product — so sign-on is a platform, not a one-off login screen. AWS and GCP with Keycloak as the IdP; not Reciprocity's Azure deployment. Follow-on identity retainers sit alongside Okta, Entrust, mTLS and certificate lifecycle.
Security / Independent · Architect & implementer
Delivery engineeringCI/CD, containers, portable runtimes
Make change cheap: Jenkins and Maven CI, Docker packaging, and runtimes that are not welded to a vendor application server. On Upwork this included a two-year Maven EAR → WebSphere delivery engagement.
DevOps / Independent · Architect / lead
02 / Independent
Direct and Upwork engagements in solution architecture, device identity, IAM/SSO, transition and digital transformation. 18 completed jobs, 5.0 where clients left a rating. Keycloak as IdP on AWS and GCP; Reciprocity's application cloud was Azure — not the same deployment.
Plugin Android gateway: cloud, device and provisioner load at runtime — none baked into the app. First live pair is HTTP enroll plus a data plane (JWT, optional mTLS). Azure DPS/IoT Hub is a second composition, still in progress. Identity sits on the device.
Keycloak as IdP on AWS and GCP for federated SSO — not Reciprocity's Azure cloud. Also Okta, Entrust, SAML, OAuth and OIDC, with mTLS and certificate lifecycle where devices are in the path. The goal is a platform, not a one-off login screen.
Jenkins and Maven CI, Docker, cloud-native packaging. A two-year independent engagement built EAR artefacts with Maven for WebSphere — the same discipline that took a wire-transfer platform off proprietary lock-in.
Current-state and future-state, design assurance, transition and digital transformation. The seams drawn before the build starts, so the team is not inventing a runtime on the day of go-live.
Client notes
“Great to work with Elisha, synced up with the team quickly to get the job done.”
5.0 · May 2021
SAML Expert to troubleshoot a Validation Error
“Elisha has great expertise in Java and spring framework. He solved all the issues I faced in an hour. Extremely helpful and highly talented.”
5.0 · May 2021
Spring Boot test cases using Mockito and PowerMock
“Elisha was flexible, quick, personable, and knowledgeable. Job well done and will hire him again. Thank you!”
5.0 · May 2021
Scala JDBC Connection Troubleshooting
“Excellent working with Elisha. He is skilled and always ready to help, provide support and share knowledge.”
5.0 · Nov–Dec 2021
Keycloak and SAML expert required
“Elisha was excellent to work with. Will work with him again if need arises.”
5.0 · May–Jul 2021
Java consultation over screenshare
Selected engagements
Keycloak SAML / SSO — SaaS marketplace and training platform
May 2023 – May 2024
Building EAR file using Maven to deploy to WebSphere
Jun 2021 – May 2023
Keycloak and SAML expert required
Nov–Dec 2021
Keycloak SAML / SSO — SaaS marketplace and training platform
May–Sep 2021
SAML Expert to troubleshoot a Validation Error
May 2021
Spring Boot test cases using Mockito and PowerMock
May 2021
Scala JDBC Connection Troubleshooting
May 2021
Java consultation over screenshare
May–Jul 2021
Full history — 18 completed, 10 in progress — on the Upwork profile.
03 / Practice
End-to-end solution architecture across telecom, banking, life sciences and IoT. Preparing for TOGAF — not certified yet. Value-chain mapping before a line of code.
Chair reviews with application, data, infrastructure and security domain architects. Publish standards, current-state and future-state views, and keep the meeting cadence honest.
APIs and integration contracts other teams can consume — internal and external. Regulated workflows with explicit control points: maker-checker, traceable therapy and payment data. Faster is not enough if the change is not auditable.
Decompose monoliths, drop proprietary lock-in, introduce CI and unit-testability, replace manual operational processes with platforms that stay changeable after the original team has moved on.
Reciprocity's application cloud was Azure. Separately, AWS and GCP with Keycloak as the IdP for federated SSO — not the same deployment. Docker, Jenkins and Maven CI so a platform is reproducible. Okta, Entrust, mTLS and certificate lifecycle sit with that identity work. Pipelines and identity are architecture, not an operations afterthought.
04 / Path
EEWorx
Jul 2026 – Present
Independent · Chennai
Systems Architect
Virtusa
Dec 2014 – Jun 2026
Chennai
Systems Architect
Mindtree
Sep 2012 – Dec 2014
India
Architect
Verizon
Aug 2005 – Aug 2012
Growth path
Software Engineer → Senior Engineer → Architect
CollabNet
Mar 2003 – Jun 2005
India
Software Engineer
Bachelor of Engineering (B.E.) in Computer Science & Engineering — Madras University (2002)
05 / Stack
06 / Contact
Architecture reviews, platform modernization, IAM/SSO, CI/CD, IoT/edge, and delivery unblocking. Chennai-based, remote by default. Hours posted in IST.