← Back to projects

Tax Computation Infrastructure

AWS · Software Development Engineer · July 2025 – Present
Infrastructure-as-Code Networking & TLS Security Idempotency

The problem

Tax computation on cloud transactions worldwide happens at the line-item level — far finer-grained and higher-throughput than invoice-level processing. In this domain, a miscalculation isn't a cosmetic bug; it has direct monetary consequences for customers and the business. The infrastructure underneath it has to be built to be right.

What I built

As one of the engineers owning this platform's foundation, I architected its infrastructure end to end: the Infrastructure-as-Code and CI/CD foundation, DNS and hosted-zone architecture per environment stage, VPC-based integration with internal services, and TLS termination at the load balancer. This was foundational work built from the ground up, so early decisions here shaped how the rest of the team could build on top of it.

Reliability and security

Designing for correctness: idempotency

In a financial system, "just retry" is not a safe default — a duplicate request after a network blip or timeout could mean double-charging or double-computing tax. I designed idempotency guarantees directly into the platform's API so that retries are always safe, regardless of what failed partway through.

This infrastructure now underpins tax computation for cloud transactions worldwide — the decisions made here (networking, security, reliability, correctness guarantees) are the foundation the rest of the team builds on for new markets and regions.