System Architecture
Understanding the IRA FORCE platform architecture, components, and how they work together to deliver a comprehensive workforce management solution.
Architecture Overview
IRA FORCE is built on a modern, cloud-native microservices architecture designed for scalability, reliability, and security. The platform handles millions of clock events, incidents, and real-time communications daily across distributed teams.
Core Services
Each microservice is responsible for a specific domain and communicates via REST APIs and message queues.
Authentication Service
Handles user authentication, JWT token management, OAuth 2.0 flows, SSO integration, and API key management.
Employee Service
Manages employee records, profiles, skills, certifications, and organizational hierarchy.
Scheduling Service
Handles shift creation, assignment, swaps, and AI-powered auto-scheduling based on availability and skills.
Attendance Service
Processes clock-in/out events, manages timesheets, handles geofence validation, and calculates overtime.
Incident Service
Manages security incident reporting, escalation workflows, evidence attachments, and client notifications.
Geofence Service
Real-time location tracking, geofence boundary management, zone alerts, and patrol route monitoring.
Technology Stack
IRA FORCE is deployed on AWS with multi-region support for US, EU, and APAC regions to ensure data residency compliance.
Backend Technologies
Frontend Technologies
Infrastructure & DevOps
Data Flow
Understanding how data flows through the system is crucial for debugging and performance optimization.
Clock-In Flow Example
1. Mobile App → API Gateway (Kong)
↓ JWT validation, rate limiting
2. API Gateway → Attendance Service
↓ Parse clock event, validate geofence
3. Attendance Service → Geofence Service
↓ Check employee location against site boundary
4. Geofence Service → Redis (PostGIS query cached)
↓ Return geofence validation result
5. Attendance Service → PostgreSQL
↓ Persist clock event
6. Attendance Service → RabbitMQ
↓ Publish "clock.created" event
7. Analytics Service → Consume event
↓ Update real-time dashboards
8. Notification Service → Push notification to supervisor
Security Architecture
Security is built into every layer of the IRA FORCE platform.
🔐 Authentication
Multi-factor authentication, biometric support, SSO via SAML/OIDC
🔒 Encryption
TLS 1.3 in transit, AES-256 at rest, field-level encryption for PII
🛡️ Access Control
Role-based access control (RBAC) with granular permissions
📋 Compliance
SOC 2 Type II, ISO 27001, GDPR, CCPA, HIPAA-ready