Serghei Grajdean

Achieved HashiCorp Certified: Vault Associate (003), strategically extending PAM architecture for enhanced secrets management.

Developed a proof-of-concept Microsoft Teams bot on Azure AI Foundry, leveraging Retrieval-Augmented Generation (RAG) to provide instant answers from PDF documentation.

Spearheaded the development of internal tooling, including a Blazor CRM and invoicing app, utilizing agentic coding workflows with Claude Code and OpenAI Codex on Microsoft Agent Framework.

Designed and implemented the company website and internal tools using React, TypeScript, and a GraphQL API with HotChocolate.

Managed Ozius Solutions' Entra ID and Microsoft 365 tenant, implementing a fully passwordless sign-in solution with FIDO2 security keys and a comprehensive identity lifecycle.

Led the end-to-end architecture of a strategic PAM platform, covering 30,000+ endpoints across diverse estates and integrating user sign-in with Entra ID (OIDC) via domain-driven design.

Engineered a high-availability architecture for Docker workloads on AKS, featuring active-active setup across two Azure regions and PostgreSQL Flexible Server with zone-redundant HA.

Authored comprehensive Solution Architecture Documents (UML, ArchiMate, BPMN), ensuring consistent approval in architecture and SDLC reviews.

Led architecture for a strategic access governance platform, expanding coverage to 80+ integrated platforms and 250,000+ endpoints, with SSO via OIDC/OAuth 2.0.

Directed the migration of a legacy Java application to Docker containers on OpenShift, establishing an active-active setup across two data centers.

Designed 15+ critical system integrations, onboarding platforms like Active Directory, Entra ID, Delinea Suites, Denodo, and various databases for comprehensive access management.

Developed a Data Lake ETL integration for audit reporting, utilizing a medallion-style layered architecture to support internal and external banking audits against FINMA controls.

Implemented a Kafka-based event-driven integration, enabling asynchronous processing and enhancing data flow efficiency between the platform and downstream applications.

Reduced provisioning time from hours to under three minutes by implementing an automated Just-In-Time (JIT) workflow, adhering to least-privilege and Zero Trust principles.

Owned and drove technical architecture and excellence standards across a portfolio of projects, ensuring high-quality solutions.

Collaborated with the sales team, providing technical expertise, accurate project estimations, and defining optimal team compositions for new engagements.

Designed and delivered a serverless integration between HR and project management systems in under a month, utilizing Azure Functions and Bicep.

Architected the technical solution for migrating a legacy PHP/MySQL e-learning system to Java/MongoDB on AWS, including comprehensive risk analysis and high-level estimates.

Conducted 70+ technical interviews annually and provided mentorship to architects and leads, fostering professional growth.

Architected a multi-tenant stock management platform for oil & gas, featuring offline mobile synchronization via custom REST APIs and customer identity on Azure AD B2C (OIDC), leading a 9-engineer team.

Served as architect for a 30+ engineer e-learning content delivery platform, translating functional requirements into technical specifications and maintaining architectural consistency across diverse technologies.

Designed a microservices architecture on Azure for a greenfield apprenticeship e-learning platform, securing client approval and winning the contract.

Led 3 engineering teams (15 engineers) as Tech Lead for a multi-tenant SaaS e-signing platform for major UK banks, implementing strict tenant isolation, RBAC, and audit trails with weekly production releases via Azure DevOps Pipelines.

Directed a 10+ engineer team on a multi-tenant SaaS e-learning platform for UK private schools, driving platform modernization and new feature design with continuous deployment.

Designed and contributed to the implementation of a serverless file parsing and ingestion solution for an AI project on Azure Functions.

Actively contributed to the internship program as a trainer and participated in recruitment efforts during significant office scaling.

Developed desktop tools (WPF, MVVM) and ASP.NET MVC web applications for a leading e-learning platform as part of a 10+ member team.

Initiated and automated build and deployment pipelines using TeamCity and TFS Deployment, enhancing development efficiency.

Created WiX Toolset installers for WPF applications, streamlining software distribution.

Co-founded an internship program, contributing to talent development and recruitment.

Successfully published and monetized Windows Phone apps, including "Ice Piano" which achieved a top rating in its category (MVVM), managing the full development lifecycle.

Adopted microservices architecture early (2011), collaborating with senior developers on multiple services for distributed systems.

Contributed to high-load systems, including a top Moldovan news portal and a public advertising platform serving a significant user base.

Implemented Single Sign-On (SSO) using OAuth and OpenID for Moldova's largest web portals, serving 100K-500K users.