Andrew Rose

Backend-heavy distributed systems for HSA and 401(k) operations: integrations, financial rails, and the platform that runs them.

• Solely designed and delivered the firm's largest third-party integration: a payroll API that automates biweekly payroll and demographic feeds for 401(k) recordkeeping across 50+ employer connections (scaling toward 300) and 100+ entities. It eliminated hours of manual CSV prep and a recurring source of data-entry errors each pay cycle.
• Led design and development of multiple services within a 40-microservice backend platform (NestJS, PostgreSQL, RabbitMQ, GraphQL/Hasura), extending it from a single product into shared infrastructure that automates fund, performance, and payroll data feeds.
• Engineered automated trade execution, fund networking, and settlement for an HSA platform managing 1,700+ accounts and $15M+ in AUM, interfacing with NSCC/DTCC for trades and generating NACHA/ACH files for deposits and withdrawals.
• Shipped a self-service employer portal that replaced a manual spreadsheet-and-email workflow with authenticated file uploads, automated transaction generation, and full audit history, cutting an estimated 5 to 10 hours of back-office processing per week.
• Containerized three production sites into a Docker Swarm cluster with automated GitLab CI/CD, replacing manual multi-node SSH deployments with push-to-deploy across staging and production.
• Replaced the firm's fund-data provider, automating daily fund and monthly performance ingestion into downstream systems and the public site, cutting licensing costs by roughly 80% (from $70K to $12K annually).

Enterprise IT and infrastructure in a compliance-driven environment (promoted from Technician I).

• Administered 250+ employee accounts and 500+ network devices via Active Directory while maintaining network performance, security, and uptime.
• Automated Windows imaging, deployment, and updates with PowerShell and Python, cutting provisioning and update time.
• Led compliance-driven infrastructure upgrades, deploying and configuring servers and switches to gaming-industry security standards.