Angelo Melonas

Promoted to Senior on the Identity team, leading several of Castor's most impactful infrastructure and product initiatives.

• Architected and built a migration service end-to-end (PHP/Symfony) to orchestrate the transfer of 75,000+ active CDMS users and credentials to Keycloak across AU, EU and US regions, with an admin UI, statistics dashboard, batch tooling, and rollback capability — achieving zero downtime
• Led end-to-end delivery of a passwordless participant onboarding flow for clinical trials — from concept to production in ~6 weeks — coordinating across Identity, eConsent, and Enrollment Portal teams to significantly reduce participant drop-off and accelerate study enrollment
• Configured and delivered enterprise OIDC SSO integrations for multiple clients, managing IdP connections, session attribute mappers, and domain-based routing across products and regions
• Managed Keycloak production deployments (v24.x through v26.x), including custom SPI development in Java and formalising the Identity release process with deployment plan documentation
• Replaced legacy Datadog clients in eConsent with OpenTelemetry, creating a reusable SDK for standardised observability across projects

Founding member of Castor's Identity team, tasked with unifying authentication across all products under a single Keycloak-based identity platform.

• Led the migration of 40,000+ eConsent users from a standalone Keycloak instance to the centralised Castor Identity platform — the first product fully migrated to the new identity system, executed with zero downtime
• Developed custom Keycloak SPIs in Java: Action Token endpoint for email-link registration, IdP discovery, and custom registration flows
• Created a PHP SDK adopted across Castor applications for Keycloak API integration and Machine-to-Machine access token generation/validation
• Contributed to the establishment of SSO configuration processes and documentation for enterprise customer onboarding (OIDC with Azure Entra ID, Okta)

Joined the eConsent team at its inception, building a greenfield clinical trial product from the ground up over three years.

• Core contributor across the full product lifecycle — from initial architecture and feature development through to production deployment and on-call support
• Built a bulk PII removal endpoint for participant data via CSV upload, with async processing and notification system
• Drove performance improvements to reduce memory usage, including optimising Rights calculation (RBAC) and creating efficient SQL endpoints for subject retrieval
• Took ownership of support tickets, incident handling, and on-call rotation (PagerDuty certified)

Part of the backend team responsible for feature design, implementation, and maintenance. Worked on Apple Pay web payment portal, credit card payment integrations, and maintained public SDKs. Test-driven development with strict coding standards and CI/CD via GitLab Pipelines.

Designed and implemented a browser-based UI for managing custom in-house microservices. Full-stack development with Spring Boot backend, MySQL storage, and Vue.js frontend communicating via RESTful, gRPC APIs, and web sockets.

Security consultant training in finding and resolving website vulnerabilities. Web application penetration testing.