Sachin Arora

Optus | May 2023 – Present.

• Own strategy for the internal developer platform and enterprise integration patterns (API gateways, Kafka, file streams), enabling secure, compliant integrations across product teams.
• Designed and delivered endorsed integration patterns with self-service provisioning, reducing onboarding time by 40%, and improving adoption across multiple teams.
• Built an abstraction layer to simplify technology complexity, improving developer experience, and reducing dependency on deep infrastructure knowledge.
• Defined and executed integration governance frameworks, ensuring security, compliance, and scalability for enterprise applications.
• Partnered with Cybersecurity, Engineering, and Digital teams to embed security controls and compliance into integration workflows.
• Scaled API Control Plane to enforce authentication, rate limits, and vulnerability scanning across 98% of internet-facing APIs.
• Increased API data quality from 2% to 60% through automated compliance checks and metadata validation.
• Onboarded 235 API specifications and over 1,500 endpoints to the Developer Portal, cutting time to market by 50%.

Strategic Leadership

• Defined and executed the API Presence platform roadmap, aligning capabilities with business outcomes, and cyber risk reduction goals.
• Established the API Presence team identity, fostering a product mindset within Tech Foundations to support scalable, secure, internet-facing applications.
• Contributed to the 2030 Internet Enterprise Strategy, focusing on API management consolidation, API gateway governance, and secure publishing models.

Platform Evolution & Governance

• Built and scaled a centralized API Control Plane, enforcing rate limits, quotas, authentication, and vulnerability scanning across 98% of internet-facing APIs.
• Developed real-time risk dashboards, enabling teams to assess API compliance and posture in under 30 seconds.
• Reduced security event acknowledgment time to under 30 minutes, and uncovered previously undetected brute-force and DDoS attempts.
• Initiated the design and roadmap for an enterprise-wide API and Internet Property Attestation Framework, leveraging the API Registry and Internet Property Registry to clarify asset ownership, improve accountability, and enhance governance across Optus.

Developer Experience and Enablement

• Onboarded 235 API specifications with over 1,500 endpoints to the Developer Portal, improving discoverability, and cutting time to market by 50%.
• Increased API data quality from 2% to 60% through metadata validation and automated compliance checks.
• Provided governed integration patterns and self-service tooling for product teams to build secure applications from scratch.

Strategic Collaboration & Influence

• Partnered with Cyber, Engineering, Digital, and key product tribes (CCAI, Prepaid, DCP, DCET) to embed API governance and adoption frameworks.
• Built the API monetization platform to enable Optus to monetize APIs, with future expansion capabilities.
• Authored platform proposals under Project Salus to address enterprise security gaps, and support long-term improvements.
• Defined and tracked OKRs, reporting measurable outcomes, and progress to senior stakeholders.

• Led distributed development teams across geographies for cloud-native insurance applications, improving service uptime and customer SLAs.
• Defined enterprise-wide integration and security patterns using API Gateway, Lambda, DynamoDB, and OpenShift containers.
• Conducted regular security reviews and compliance audits (PCI-DSS) with tools like Fortify and ZAP.
• Reduced production incidents by 40% through observability and proactive incident playbooks.

• Designed scalable video interviewing features using Spring Boot and REST APIs with Dockerized microservices.
• Enabled AWS-native architecture using ECS, S3, Route53, and ALB.
• Automated CI/CD pipeline with Git and Bamboo, reducing deployment cycles by 60%.

• Delivered cloud-based microservices for real-time stock exchange data on Pivotal Cloud Foundry.
• Collaborated globally on requirement scoping, development, and integration using SOAP, JMS, JWT, and CA API Gateway.
• Led early adoption of test-driven development and behavior-driven testing with Cucumber.