Ecochic - Internal Business Management Platform

Project Overview

Ecochic is a comprehensive internal enterprise platform powering Human Resource Management (HRM), Financial Management, and distributed Digital Signing Workflows. The system is engineered using a modern microservices-oriented architecture, clearly isolating responsibilities across autonomous backend services to achieve high availability, enterprise security, and seamless scalability.

Key Responsibilities & Implementations

• Financial Reconciliation: Developed mission-critical backend modules for automated financial reconciliation. Handled high-volume bank statement transaction imports, applied two-way transaction matching algorithms, generated candidate matching sets, supported flexible reconciliation rollbacks/cancellations, designed idempotent transaction execution pipelines, and optimized heavy multi-sheet Excel report exports.
• Digital Signing Workflows & Orchestration: Architected and developed secure orchestration flows connecting FNM (Financial Management), Signing Service, and the Signing PWA. Enabled multi-step approval gates and role-based signer orchestration secured by signed payload tokens and asynchronous callback notifications.
• PAdES/PKCS#7 (CMS) Digital Signature Integration: Researched and integrated cryptographic digital signatures adhering to international PAdES (PDF Advanced Electronic Signatures) and PKCS#7 / Cryptographic Message Syntax (CMS) standards. Automated cryptographic PDF signing operations, digital certificate validation, and signature integrity verification endpoints.
• Asynchronous Queue Processing & Caching (BullMQ & Redis): Offloaded compute-intensive workflows (PDF rendering, cryptographic bulk signing, notifications, and reconciliation exports) to background worker queues powered by BullMQ and Redis. Leveraged multi-tier Redis caching to accelerate frequently accessed endpoints and reduce database stress.
• API Standardization & Production Testing: Built RESTful APIs adhering to strict OpenAPI/Swagger specifications, coupled with unified JWT and Single Sign-On (SSO) authentication. Authored extensive End-to-End (E2E) and unit test suites to validate complex distributed business logic prior to production release.