Project
Enterprise Security Platform (Securitas Global)
Role System Architect

Summary
This cloud-based security access management platform modernizes multi-site access control by integrating RFID badge scanning, real-time authentication, and centralized role-based permissions into a highly secure AWS-powered system. By bridging legacy security hardware with cloud infrastructure, the platform enables instant access updates, real-time monitoring, and automated compliance logging, ensuring GDPR-compliant security operations. Built on Node.js and C# microservices, it seamlessly integrates with on-site RFID/badge scanners, while AWS Cognito and OAuth 2.0 authentication provide multi-tier authorization for employees, contractors, and security teams. With an intuitive React-based dashboard, security managers can grant, revoke, and audit access permissions across multiple facilities instantly. The system reduced manual security tasks by 60%, streamlined access for 1,000+ employees, and secured new high-value contracts for Securitas, proving its effectiveness in large-scale, high-security environments.
Challenges
- Managing access control for 1,000+ external employees across multiple facilities while ensuring top-tier security and real-time updates.
- High dependency on legacy security hardware that lacked cloud connectivity and centralized control.
- Lack of real-time access control logs made it difficult to track who accessed which facility and when.
- Inconsistent role-based permissions, leading to security gaps and manual intervention issues.
Solution
- Cloud-Based Security Management – Designed a modular AWS-based platform that connects on-site access control devices (RFID/badge scanners) to a centralized cloud dashboard, enabling remote monitoring and role-based user authentication.
- Real-Time Access Control Updates – Implemented a secure, event-driven architecture that propagates access changes instantly across all security checkpoints.
- Custom Role-Based Permissions & Multi-Tier Authorization – Developed granular user roles and security levels for security staff, facility managers, external contractors, and administrators.
- Automated Logging & Compliance System – Every access attempt, permission change, and security alert is encrypted and logged for auditability and compliance with GDPR and corporate policies.
- Security Manager Portal – Built an admin portal allowing security teams to configure access rules, revoke permissions, and monitor live entry logs across multiple locations.
Impact
- Enhanced facility security with real-time monitoring and instant access control updates.
- Successfully handled 1,000+ external employees, enabling seamless access across multiple sites.
- Reduced manual security tasks by 60%, saving time and minimizing human error in access management.
- Helped Securitas secure 5+ major new industrial security contracts per year, proving the platform’s effectiveness in high-security environments.
How it was built
- BackendNode.js and C# microservices for real-time integration with legacy security systems and external authentication providers.
- FrontendReact dashboard with role-based access control (RBAC) and real-time monitoring UI.
- Cloud InfrastructureAWS (Lambda, EC2, S3) for scalable, high-availability services, with AWS Cognito for secure user authentication.
- DatabasePostgreSQL for structured access control policies, Redis for low-latency session management.
- Security & ComplianceRFID & badge scanner integration, OAuth 2.0 authentication, end-to-end encryption, GDPR-compliant access logs.
- MethodologiesCI/CD pipelines, DevSecOps practices, and agile deployment strategy to support multi-site security environments.
Gallery
Contact
Before you commit the budget, let's make sure the plan makes sense.
Book a 30-minute call. We'll discuss the investment you're considering, the decisions you need to make, and whether the Sprint is the right fit.
Book a callThe booking will ask:
- What you're considering building or changing
- The approximate investment
- When you need a decision
Prefer email? Write to hello at pedrobalas dot com





