Pedro Balas

← All work

Project

Enterprise Security Platform (Securitas Global)

Role System Architect

  • Security Tech
  • Enterprise Software
  • Access Control
  • Biometric Authentication
  • Real-Time Monitoring
  • Encryption

Summary

This cloud-based security access management platform modernizes multi-site access control by integrating RFID badge scanning, real-time authentication, and centralized role-based permissions into a highly secure AWS-powered system. By bridging legacy security hardware with cloud infrastructure, the platform enables instant access updates, real-time monitoring, and automated compliance logging, ensuring GDPR-compliant security operations. Built on Node.js and C# microservices, it seamlessly integrates with on-site RFID/badge scanners, while AWS Cognito and OAuth 2.0 authentication provide multi-tier authorization for employees, contractors, and security teams. With an intuitive React-based dashboard, security managers can grant, revoke, and audit access permissions across multiple facilities instantly. The system reduced manual security tasks by 60%, streamlined access for 1,000+ employees, and secured new high-value contracts for Securitas, proving its effectiveness in large-scale, high-security environments.

Challenges

  • Managing access control for 1,000+ external employees across multiple facilities while ensuring top-tier security and real-time updates.
  • High dependency on legacy security hardware that lacked cloud connectivity and centralized control.
  • Lack of real-time access control logs made it difficult to track who accessed which facility and when.
  • Inconsistent role-based permissions, leading to security gaps and manual intervention issues.

Solution

  • Cloud-Based Security Management – Designed a modular AWS-based platform that connects on-site access control devices (RFID/badge scanners) to a centralized cloud dashboard, enabling remote monitoring and role-based user authentication.
  • Real-Time Access Control Updates – Implemented a secure, event-driven architecture that propagates access changes instantly across all security checkpoints.
  • Custom Role-Based Permissions & Multi-Tier Authorization – Developed granular user roles and security levels for security staff, facility managers, external contractors, and administrators.
  • Automated Logging & Compliance System – Every access attempt, permission change, and security alert is encrypted and logged for auditability and compliance with GDPR and corporate policies.
  • Security Manager Portal – Built an admin portal allowing security teams to configure access rules, revoke permissions, and monitor live entry logs across multiple locations.

Impact

  • Enhanced facility security with real-time monitoring and instant access control updates.
  • Successfully handled 1,000+ external employees, enabling seamless access across multiple sites.
  • Reduced manual security tasks by 60%, saving time and minimizing human error in access management.
  • Helped Securitas secure 5+ major new industrial security contracts per year, proving the platform’s effectiveness in high-security environments.

How it was built

  • BackendNode.js and C# microservices for real-time integration with legacy security systems and external authentication providers.
  • FrontendReact dashboard with role-based access control (RBAC) and real-time monitoring UI.
  • Cloud InfrastructureAWS (Lambda, EC2, S3) for scalable, high-availability services, with AWS Cognito for secure user authentication.
  • DatabasePostgreSQL for structured access control policies, Redis for low-latency session management.
  • Security & ComplianceRFID & badge scanner integration, OAuth 2.0 authentication, end-to-end encryption, GDPR-compliant access logs.
  • MethodologiesCI/CD pipelines, DevSecOps practices, and agile deployment strategy to support multi-site security environments.

Gallery

← All work

Contact

Before you commit the budget, let's make sure the plan makes sense.

Book a 30-minute call. We'll discuss the investment you're considering, the decisions you need to make, and whether the Sprint is the right fit.

Book a call

The booking will ask:

  • What you're considering building or changing
  • The approximate investment
  • When you need a decision

Prefer email? Write to hello at pedrobalas dot com