Gaziz Bakyt

BI Group · Astana

• Selected and stood up the core backend architecture for a large-scale internal enterprise platform — type-safe SQL query building in place of a traditional ORM, schema migrations, event-driven messaging, and object storage — decisions that still underpin the system (1,000+ files, 100+ REST controllers, 600+ endpoints).
• Designed multi-tenant JWT authentication supporting two separate identity realms (internal staff and an external mobile app) against a single API, with hardened security headers.
• Built the platform's Kafka integration layer end-to-end, including a message-log-and-replay subsystem that lets failed integration events be re-processed from an admin view instead of manually replaying topics.
• Designed and built an internal workflow board from scratch — configurable status funnels, SLA tracking with automatic overdue detection, and full audit history.
• Built an automated multi-step eligibility engine that validates a business transaction against ~10 independent checks before allowing it to proceed.
• Own the majority of the platform's external-system integrations — accounting/ERP, identity, e-signature, and OCR services — spanning more than a dozen integration clients.

Samgau Holding · Astana

• Contributed across roughly 25 independently-deployed SOAP/REST microservices for a national government records platform covering court records, criminal/administrative case lookups, wanted-persons registries, vital records, traffic-accident records, probation checks, and emergency-incident reporting.
• Found and fixed an XXE (XML External Entity) vulnerability in a shared XML-deserialization utility, hardening it against malicious external entity injection, and applied the fix consistently across multiple services.
• Built several services end-to-end from scratch — contract-first SOAP endpoints (XSD/WSDL), JPA/Flyway-backed persistence, and CI/CD pipelines.
• Reworked an integration client's architecture from an inbound REST server into an outbound OAuth2 client-credentials integration, adding resubmission logic for changed records and audit-history preservation across transaction rollbacks.
• Optimized production SQL queries — replacing expensive subqueries with indexed lookups — and fixed data-precision bugs by correcting field types.
• Built a reusable Kazakhstani national-ID (IIN) checksum validator adopted across multiple services.

QazCloud · Astana

• Contributed to a Security Operations Center platform for malware detection and reporting.
• Owned feature development, bug fixes, and long-term maintenance for a production security system.

Kazakh University of Technology and Business · Astana