AKM Ashrafuzzaman
Director of Engineering @ MoneyLion
- zmn.ashraf@gmail.com
- +601133032936
- Kuala Lumpur, Malaysia
- ashrafuzzaman.github.io
- Blog
- ashrafuzzaman
- ashrafuzzaman-jitu
Architecture & Data
- Architecture strategy and governance
- Compliance and confidential data protection
- API-first design and event-driven microservices
- Security architecture (identity, authorization, fraud)
- Cloud-native infrastructure (AWS)
AI Engineering
- AI strategy, agent skills, and knowledge-base design
- Agent eval frameworks (ablation testing, multi-model CI)
- AI tooling standardization and org-wide governance
- PydanticAI, MCP, RAG
Technologies
- Distributed systems and event-driven microservices
- Serverless architectures
- Node.js, Flask, DRF, FastAPI, Rails
- React.js, Angular
- MongoDB, PostgreSQL, MySQL
- Kafka, Kinesis, Apache Spark
- REST, GraphQL, HATEOAS
- Docker, Terraform, Ansible, CI/CD
- Object-oriented and functional design
- TDD, BDD
- TypeScript, Python, Java, Ruby
Engineering director at MoneyLion, where I own architecture for the backend platform, auth, and fraud at a consumer fintech serving millions of users. Recent work includes confidential-data protection (PII tokenization, field-level encryption), org-wide architecture review, and standing up AI-assisted development with eval gates and shared knowledge bases. Previously scaled teams and platforms at Optimizely and NewsCred/Welcome through microservices migrations and platform modernization. I hire, set hiring guidelines, and develop senior ICs and managers; several reports have moved into leadership roles.
Experience
Director of Engineering,
MoneyLion
Jan 2024 - Present
- Own enterprise architecture across Backend Platform, Authentication & Authorization, and Fraud for a consumer fintech serving millions of users.
- Established org-wide Architecture Review Process — RFC standards, governance lifecycle, and cross-functional review with SRE, Security, and Data Engineering.
- Lead capacity planning, load testing, and hardening that absorbed ~5M signups (35× normal traffic) during the MrBeast Challenge.
- Devised and led Confidential Data Protection strategy and implementation using PII tokenization and field-level encryption.
- Partner with Security leadership on identity, authorization, and fraud-prevention architecture — common auth, Device Service, KBA MFA, and confidential-data handling aligned with Gen classification and SOC2/SOX requirements.
- Set AI engineering strategy and governance — canonical Shared Knowledge, validated agent skills, and drove org-wide adoption of eval-driven quality gates.
- Design API-first services and event-driven integration patterns; drove Kafka reliability.
- Collaborate with peer engineering directors on company-wide architecture, platform investments, and delivery practices.
- Mentor senior engineers and architects on system design, data-protection tradeoffs, and operational excellence.
- Authored PII tokenization RFC and led multi-team Confidential Data Protection roadmap with Gen Security architects.
Director of Engineering,
Optimizely
Sep 2018 - Dec 2023
- Directed 4 engineering teams (30+ engineers) delivering experimentation and digital experience platforms at enterprise scale.
- Drove platform modernization — defined target architectures, sequenced migrations, and retired legacy systems.
- Built technical and leadership pipelines through hiring, coaching, and promoting ICs and managers.
- Aligned platform engineering investments with product and go-to-market priorities through cross-functional partnership.
- Mentored engineers and engineering managers on distributed systems design and sustainable delivery practices.
Engineering Manager,
NewsCred
Apr 2015 - Sep 2018
- Led the migration from a monolithic Node.js/Python stack to event-driven microservices, improving deployability and team autonomy.
- Strengthened ingestion platform reliability and implemented data-lake disaster recovery for business continuity.
- Eliminated production performance bottlenecks and expanded observability with Elastic APM and Stackdriver tracing.
- Shipped serverless analytics pipelines and embeddable publishing widgets for customer-facing products.
- Designed partner-facing REST APIs conforming to JSON:API and HATEOAS standards.
- Coached engineers who progressed into tech lead and engineering manager roles.
Technologies
- Node.js, Python, ReactJs, Angular, MySQL, MongoDb, Ansible, EKL stack, AWS services
Lead Software Engineer,
NewsCred
Oct 2014 - Apr 2015
- Designed and built high-availability services with explicit performance and cost-optimization goals.
- Partnered with DevOps and BI teams to automate operations and expand metrics and tracing coverage.
- Defined technical roadmaps with Product Management and delivered against quarterly commitments.
- Contributed to architecture reviews and technical interviews as a senior IC and hiring partner.
Lead Software Engineer,
Tasawr
Apr 2012 - Oct 2014
Hotel management platform built with Ruby on Rails and MySQL.
- Shipped production features using TDD and BDD with consistent code review and quality gates.
- Ran Agile ceremonies and delivery practices that improved release predictability across iterations.
- Established design and testing standards across internal tools and client-facing deliverables.
Technologies
- Ruby on Rails, MySQL, MongoDb
Sr. Technology Analyst,
Orbund, LLC
Oct 2011 - Apr 2012
Student management system built with J2EE and MySQL.
Consultant,
Simple Signup, Sweden
Oct 2009 - Apr 2011
Part-time remote consultant from Stockholm; built an online event management system with Ruby on Rails and MySQL.
Technologies
- Ruby on Rails, MySQL
Software Engineer,
Code71
May 2008 - Aug 2009
Scrum management platform built with Ruby on Rails and MySQL.
Technologies
- Ruby on Rails, MySQL
Senior Software Developer,
DSi
Jan 2007 - Feb 2008
Enterprise cargo and container management systems using J2EE, Struts, Spring, and Hibernate.
Technologies
- Java, Struts, Spring, Hibernate, MySQL
Director of Engineering,
MoneyLion
Jan 2024 - Present
- Own enterprise architecture across Backend Platform, Authentication & Authorization, and Fraud for a consumer fintech serving millions of users.
- Established org-wide Architecture Review Process — RFC standards, governance lifecycle, and cross-functional review with SRE, Security, and Data Engineering.
- Lead capacity planning, load testing, and hardening that absorbed ~5M signups (35× normal traffic) during the MrBeast Challenge.
- Devised and led Confidential Data Protection strategy and implementation using PII tokenization and field-level encryption.
- Partner with Security leadership on identity, authorization, and fraud-prevention architecture — common auth, Device Service, KBA MFA, and confidential-data handling aligned with Gen classification and SOC2/SOX requirements.
- Set AI engineering strategy and governance — canonical Shared Knowledge, validated agent skills, and drove org-wide adoption of eval-driven quality gates.
- Design API-first services and event-driven integration patterns; drove Kafka reliability.
- Collaborate with peer engineering directors on company-wide architecture, platform investments, and delivery practices.
- Mentor senior engineers and architects on system design, data-protection tradeoffs, and operational excellence.
- Authored PII tokenization RFC and led multi-team Confidential Data Protection roadmap with Gen Security architects.
Director of Engineering,
Optimizely
Sep 2018 - Dec 2023
- Directed 4 engineering teams (30+ engineers) delivering experimentation and digital experience platforms at enterprise scale.
- Drove platform modernization — defined target architectures, sequenced migrations, and retired legacy systems.
- Built technical and leadership pipelines through hiring, coaching, and promoting ICs and managers.
- Aligned platform engineering investments with product and go-to-market priorities through cross-functional partnership.
- Mentored engineers and engineering managers on distributed systems design and sustainable delivery practices.