The whole platform: code, cloud and identity.
A tax SaaS that had grown on a monolithic backend, a separate back office and standalone forms. We built the complete platform: domain services that talk through events, shared identity and roles, customer portal and back office, on Kubernetes in Azure with infrastructure as code and GitOps deployment.
- Context
- Tax SaaS - full platform
- Window
- Built in phases, replacing the legacy system
- Delivery
- Domain services, shared library, customer portal, back office and website; identity and roles; Kubernetes in Azure with infrastructure as code, GitOps, managed secrets and observability.
Where each figure comes from is detailed below.
Where it came from
The product worked and had customers, but each piece had been born separately: a monolithic backend, a separate back office and standalone forms for sign-up and onboarding. Growing the product meant touching several of those pieces at once.
The approach
We redesigned the product by domain — customers, accounts, billing, notifications, AI and tools — as independent services on a shared library for authentication, events, metrics and logs. They communicate through events on Azure Service Bus instead of calling each other. A single identity, with organizations and roles, protects every API and the three web applications. Underneath, the platform: Kubernetes in Azure with the infrastructure described as code, GitOps deployment, secrets in Key Vault with role-based, least-privilege access, and observability with metrics, logs and traces.
What reached production
A product that can change piece by piece: each domain deploys on its own, permissions are defined once for everything, and infrastructure and deployments live in the repository instead of in someone’s head.
Delivery components
- Domain services communicating through events
- Shared identity, organizations and roles
- Kubernetes in Azure, infrastructure as code and GitOps
Anonymized case. We work under NDA: we do not publish the client name, their logo or any detail that would identify them. We discuss the technical detail on a call.
Shall we talk about your project?
In 30 minutes we review what you want to build or what you already have running, the data, the integrations and what it still needs to remain reliable once users arrive. Whether the project is yours or a client’s, the call is the same.
Free 30-minute review, no commitment. We sign an NDA beforehand if you need it. We reply the next business day.