Context

Risk and compliance needed to spot suspicious activity across all products as it happened, and to change rules without a deploy.

What I did

As architect in a team of six:

  • The core real-time rule engine: it consumes events from every money service and evaluates CEL rules over per-merchant features.
  • A rule management UI, so risk and compliance teams author and test rules themselves.
  • Deduplicated alerts fed into a third-party case management system for investigations.
  • ETL pipelines that combine transaction data from multiple upstream sources.