Alex Iarko · Solution Architect

I build systems that stay quiet at 3 a.m.

Clean boundaries. Recovery by design. No heroics required.

Explore selected work
Aleksandr (Alex) Iarko

About

I work where systems meet.

I'm a Solution Architect at EPAM Systems. I design cloud-native systems and legacy-to-cloud migrations, establish API practices, and mentor engineering teams. Most of my work sits at the boundaries between systems: APIs, event streams, identity, and the operational decisions that keep a platform running after launch.

Before EPAM I led architecture on online banking at Sberbank-Technology, worked as lead engineer and architect at Luxoft, and started out on PKI and secure document exchange at E-Portal. I still prototype, review code, and estimate the work I propose.

Experience
24+ years · 50+ project deliveries
Industries
Healthcare, finance, aerospace, retail, consulting, PKI and publishing
Certified
MuleSoft Platform & Integration Architect, MuleSoft Developer, Claude Certified Architect

Selected work

Systems I designed and delivered

Healthcare

  1. Merck / MSD

    MuleSoft platform and multi-region recovery

    Introduced MuleSoft integration platform with multi-regional Disaster Recovery (Active/Active, Active/Standby) and infrastructure-as-code designed to support 100+ federated teams. Established C4E practices, accelerators, and blueprints.

    • MuleSoft
    • DR
    • IaC
    • C4E
  2. Wolters Kluwer

    Clinical surveillance, rules and application security

    Real-time clinical surveillance platform used by 700+ hospitals to flag at-risk patients and send evidence-based alerts for conditions such as sepsis, processing 10M+ HL7 messages a day on a distributed GigaSpaces and Drools grid. As a core team member for two years I designed the Java and C# testing frameworks, implemented and benchmarked the clinical rules engine, built CI/CD as infrastructure-as-code, and introduced AppSec controls for legacy components (injection defense via AOP and web filters).

    • HL7
    • GigaSpaces
    • Drools
    • Java / C#
  3. Cigna

    MDM error correction and message reprocessing

    Designed error handling and reprocessing for an event-driven MDM integration that aggregates millions of messages via Kafka into MongoDB, Neo4j and Oracle (Java, Spring Boot). Architected a correction interface that lets non-technical teams fix messages in real time or queue them for reprocessing by error type, with metadata-driven validation and REST/Kafka distribution.

    • Kafka
    • Spring Boot
    • MongoDB
    • Neo4j
    • Oracle

Financial services

  1. Edward Jones

    API platform architecture and DB2 migration

    Led the DB2 migration PoC (data replication, COBOL evaluation, multi-domain transformation) and designed the enterprise API platform: MuleSoft gateway, Salesforce integration, CI/CD and developer portal. Established the Center for Enablement (C4E) for API maturity and started application onboarding within a $1B technology modernization program. After this phase the platform grew to integrate 900+ applications and convert 1,000+ legacy EJBs to REST APIs.

    • MuleSoft
    • Salesforce
    • DB2
    • COBOL
    • CI/CD
  2. UBS

    Real-time product hierarchy dashboard

    Led a cross-functional team (BA, DBA, DevOps, developers) building a real-time product hierarchy dashboard for hundreds of traders. Architected a Java/Spring application on Oracle materialized views for sub-second response, with scheduled batch jobs keeping trading systems in sync. Result: faster trading decisions and the same critical metrics visible across regions.

    • Java
    • Spring
    • Oracle
    • Materialized views
  3. SberBank

    Non-blocking transaction auditing

    Designed a non-blocking transaction audit log for an online banking platform serving 108M+ users, handling 2.15M daily transactions (Java, optimized Oracle queries), validated with JMH and JMeter stress tests. Led AppSec integration into the SDLC: penetration testing with OWASP ZAP, SAST/DAST coverage, AppScan and Veracode.

    • Java
    • Oracle
    • JMH
    • JMeter
    • AppSec

Aerospace & secure documents

  1. Boeing

    REDARS architecture and Exostar supplier activation

    Grew from programmer to architect on REDARS, a 50-person Java program delivering 1.56M+ aircraft technical drawings and parts lists to maintenance engineers worldwide. Championed a REST/SPA architecture with domain-driven design to replace the monolithic MVC/EAD4J stack, and drove defect analysis, code review and mentoring. Applied the same approach to the Exostar supplier activation redesign (.NET/SPA) and introduced AppSec tooling (AppScan, Veracode, HP Fortify).

    • Java
    • .NET
    • REST / SPA
    • DDD
    • AppSec
  2. E-Portal

    Secure documents and certificate lifecycle

    Built an electronic document exchange system for thousands of small businesses, processing 100K+ regulated documents through encrypted workflows. Implemented automated X.509 certificate renewal for planned and unplanned key changes, plus a centralized software update agent (C++/MFC core with CSP integration, C# renewal components).

    • PKI
    • X.509
    • C++ / MFC
    • C#

Retail & publishing

  1. AutoZone

    Mapping dependencies for a safe microservices migration

    Architected a monolith-to-microservices migration using API-led integration. Instrumented legacy Java services with AOP agents to correlate use cases, services and data-source queries, then built a Neo4j dependency graph that exposed domain boundaries and read/write patterns — the basis for the CQRS schema and REST API boundaries. Designed a safe cutover with an anti-corruption layer and canary releases.

    • AOP
    • Neo4j
    • CQRS
    • API-led
    • Canary releases
  2. 3S-Studio

    Publication design systems and layout automation

    Led corporate design and layout automation for 3+ publications over three years, reaching 300K+ combined circulation. Built InDesign templates and scripted production workflows, and created design systems, brand books and style guides for print and digital.

    • InDesign
    • Illustrator
    • QuarkXPress

Expertise

Architecture and hands-on engineering

System Design

Designing distributed, event-driven architectures that balance scalability, reliability, and maintainability at every stage of growth.

Microservices, API First, Event-Driven, DDD, CQRS

Cloud & Infrastructure

Building and operating cloud-native platforms with IaC, CI/CD and observability as defaults, not add-ons.

AWS, MuleSoft, Kong, Terraform, Kubernetes

Backend Engineering

Building high-performance APIs and data pipelines with a focus on correctness, observability, and developer ergonomics.

Java, Python, (No)SQL, Graph DB, Kafka, REST

Security & Compliance

Embedding security into architecture decisions — threat modelling, identity, secrets management, and compliance-aware design.

Zero Trust, OAuth 2.0, OWASP, CWE

Technical Leadership

Bridging product and engineering — shaping roadmaps, setting standards, reviewing designs, and growing engineering culture.

RFC Process, ADR, Mentoring, Code Review

AI Integration

Integrating LLM APIs into production systems — RAG architectures, vector stores, and eval-driven development: prompt, retrieval and model changes ship only when they pass the eval suite, like any other release gate.

LLM APIs, RAG, Vector DBs, Evals / EDD, Cursor / Claude

Experience

Career journey

  1. August 2016 — Present

    Solution Architect, EPAM Systems

    Lead Software Engineer 2016–2021 → Solution Architect since 2021

  2. June 2015 — August 2016

    Architect / Lead Software Engineer, Sberbank-Technology

  3. October 2014 — June 2015

    Software Developer, freelance

  4. June 2010 — September 2014

    Architect, Luxoft

    Developer → Senior Developer → Lead Software Engineer 2010–2013 → Architect 2013–2014

  5. July 2007 — December 2009

    Developer, E-Portal

  6. May 2003 — April 2006

    Developer, 3S-Studio

EPAM Systems

Architected and directed legacy-to-cloud migrations to AWS. Established API practices (MuleSoft iPaaS, Kong API Platform) for client teams. Conducted technical interviews and hiring assessments. Delivered cloud-native solutions leveraging AI tools (Cursor, Claude) with focus on scalability, security, and architectural maturity.

Luxoft

Established architectural foundations (REST, API-first, TDD, DDD, SOLID, GRASP) across client engagements. Mentored developers — all progressed to tech lead roles. Introduced AppSec practices: led AST/SAST/DAST/SCA testing and remediation, applied OWASP principles, integrated Veracode, AppScan & HP Fortify into development workflows.

Education

Academic background and certifications

2008–2009
Postgraduate studies & research, Communication and Information Security — Omsk State Technical University
1999–2005
M.S. in Computer Science, Computing Machines, Complexes, Systems and Networks — Omsk State Technical University
  • Claude Certified ArchitectAnthropic
  • Certified Platform ArchitectMuleSoft
  • Certified Integration ArchitectMuleSoft
  • Certified DeveloperMuleSoft

Off-hours

Beyond the keyboard

  • Racing

    Motorcycle and kart racing, plus car track days.

  • Guitar

    Rock and some classical.

  • Billiards

    Pool and Russian pyramid: angles, physics, and planning a few shots ahead.

Contact

Get in touch

For architecture challenges, engineering collaboration, or a conversation about complex systems.

Show email address