Built a secure payment gateway backend aligned with PCI-DSS 3.4 and UAE Central Bank SRR. Features include AES-256 encrypted card data, tokenized payments (no raw PAN stored), MFA-secured access, and strict TLS 1.2+. Implemented full audit-safe logging, masked traces, and centralized monitoring. Deployed on AWS using ECS, RDS, S3, and NGINX with CI/CD pipelines running automated security scans.

A clean, production-grade architecture designed for safe payment processing and regulatory compliance.