Case Study

Infrastructure as Code (IaC) on Google Cloud Platform for a FinTech Startup

BFSI
Industry
Banking & Financial Services / FinTech
Services
Architecture Design, Backend Development, Frontend Development, DevOps, Quality Assurance
Company Size & Location
FinTech Startup & Singapore
Technology Stack
Spring Boot Microservices (Java), Spring Web MVC, REST APIs, CQRS, React, Axon Server, Apache Pulsar, Apache Camel, Kong, Keycloak SSO, Eureka, Ingress Controller, MongoDB, MySQL, Redis, GCP, EKS layer, HPA auto-scaling, Terraform (cloud-independent IaC), Blue-Green deployment, Jenkins, Bitbucket, RPA (FaaS), Firebase, Payroll Data Partners (Argyle, Pinwheel, Atomic)
Team
Solution Architect · Backend Engineers · Frontend Engineers · DevOps Engineers · QA Engineers
Timeline
Fixed Engagement
01

Client Vision

The client is a FinTech startup building an ecosystem of financial services linked to payroll. Their product is a safe, secure digital payment platform used to access liquidity, avail financing options, or borrow.

They have built a SaaS that runs on an Infrastructure-as-Code platform, letting their own clients stand up a platform for lending to customers across multiple applications - loans, bill payment, and direct/indirect merchant purchases. The core concept: collect installments directly from salary accounts as soon as they are credited, avoiding the complications of managing multiple accounts for repayment.

02

Challenge

The client’s product is a digital payment-transaction platform designed for seamless transactions across any interface and any location — breaking down time, cost, and location barriers.

They set out to build a modular, scalable, multi-tenant SaaS platform with several defining requirements:

Cloud-native, cloud-independent

A platform built on cloud-native architecture that remains independent of any single cloud provider.

Security as paramount  

As a financial-services product, multi-level security was a non-negotiable priority.

Plug-and-play extensibility

The platform had to allow seamless integration with other financial services.

03

Solution

After evaluating the requirements, we recommended a domain-driven, reactive microservices architecture that can be terraformed across different cloud vendors. Microservices and APIs were built in Java with Spring Web MVC, and the web application in React. We designed and configured Blue-Green deployment to reduce downtime and risk, with DevOps integration via Jenkins.

-Services communicate through Axon Server and Apache Pulsar, using event streaming and pub-sub.

-Data transformations are handled with Apache Camel; synchronous executions are queued.

-Data is stored in MongoDB and cached using Redis.

-Authentication and authorization are managed by a combination of Keycloak SSO and the Kong gateway across cluster nodes.

-Application-specific services are maintained via Eureka and Kong.

-Multi-tenancy is achieved through realms and database separation.

-A cloud-platform-independent DevOps Infrastructure-as-Code solution was designed, automating infrastructure creation based on needs and configuration.

04

Our Approach

Phase 1: Architecture Design

We evaluated the business requirements and designed a domain-driven, reactive microservices architecture - cloud-native yet portable across vendors via Terraform with multi-level security and multi-tenancy at its core.

Phase 2: Backend & Frontend Development

We built the microservices and APIs in Java/Spring, the React web application, and the event-driven backbone (Axon Server, Apache Pulsar, Camel) with MongoDB and Redis for storage and caching.

Phase 3: Security & Multi-Tenancy

We implemented authentication and authorization through Keycloak SSO and the Kong gateway, and achieved multi-tenancy through realms and database separation.

Phase 4: DevOps & Infrastructure as Code

We designed a cloud-independent IaC solution that automates infrastructure creation, configured Blue-Green deployment to minimise downtime, set up horizontal auto-scaling, and automated delivery with Jenkins.

05

Result / Impact

For the Client

  • Multi-level security enforced across the platform meeting the rigorous standards expected of a financial-services product
  • Cloud-independent DevOps designed and implemented freeing the platform from any single cloud vendor and enabling flexible deployment across environments
  • Resilience & disaster recovery well established across the platform ensuring continuity in a zero-tolerance industry
  • ~Zero-downtime releases achieved through Blue-Green deployment

For End Users

  • Horizontal auto-scaling of microservices based on live load delivering consistent performance during demand spikes with no manual intervention
  • Adaptive orchestration enabling communication flows that adjust dynamically to different business requirements
  • A platform that remains fast, secure, and available regardless of load or release activity

For the Business

  • A portable multi-tenant SaaS foundation - plug-and-play ready to integrate further financial services as the product evolves
  • Infrastructure as Code via Terraform ensuring every environment is reproducible, auditable, and cloud-independent
  • A scalable, resilient architecture built to grow with the business without re-platforming

06

Why It Matters

In financial services, a platform is only as valuable as it is secure, available, and adaptable. A FinTech building on payroll-linked payments cannot afford downtime, cannot be boxed into a single cloud, and cannot stop evolving. By engineering a cloud-native, cloud-independent platform on Infrastructure as Code with multi-level security, multi-tenancy, event-driven microservices, and automated horizontal scaling the client gained a foundation that is secure by design, portable by default, and built to plug in new financial services as the ecosystem grows.

Let's build

Building a secure, scalable financial platform that can’t be locked into one cloud?

Focaloid helps FinTechs and product startups design cloud-native, cloud-independent platforms from domain-driven microservices and multi-tenant SaaS architecture to Infrastructure as Code, security, and DevOps. Whether it’s zero-downtime deployment, auto-scaling, or plug-and-play integration, we can help you build it securely and at scale.