Martin Arrua

ChallengeAn aging, unsupported platform version was accumulating security and deprecation risk; years of ad-hoc, unnamespaced browser storage across checkout, cart, and catalog had spread key-collision bugs into production (blank order-success pages, phantom shipping methods, broken toasts); and B2B customers on e-procurement (punchout) systems still authenticated over legacy sessions instead of modern OAuth.

ApproachBuilt Fedex_Automation, a full Okta OAuth token-introspection gateway that replaced legacy session validation for punchout authentication, and decommissioned the legacy ForgeRock identity provider. Delivered a GraphQL order search/lookup API spanning first-party and Mirakl marketplace orders. Designed a namespaced storage component (Fedex_Base) and drove a tracked, 23-batch migration moving nearly every customer-facing module off unnamespaced storage. Led the PHP 8.1/8.2 and Adobe Commerce 2.4.5 → 2.4.7 upgrade across the entire custom module catalog — constructor property-promotion refactors, deprecation fixes in 100+ modules, and dependency upgrades.

ResultEliminated a recurring class of checkout/order-success bugs through an architectural fix rather than one-off patches, modernized procurement authentication from the ground up, and brought the full custom codebase onto a supported, patched platform version without regressing storefront behavior.

ChallengeAs a national food/beverage distributor, UNFI needed state-by-state shipping restrictions and bottle-deposit/container-fee rules enforced correctly across every order, cart, and invoice; the Mirakl-powered marketplace needed to function as a first-class part of the storefront rather than a bolt-on; and a formal SWAT performance/security audit had flagged multiple P1 findings on the Cloud environment.

ApproachBuilt and later rebuilt UNFI_ShippingRestrictions and UNFI_BottleDeposits, carrying compliance fees through cart, checkout, invoices, and credit memos as proper Magento sales totals. Owned the Mirakl connector integration — order sync, offer-driven pricing, salable-quantity validation — and built the B2B company-account approval workflow plus ACH payments via a custom Stripe Connect integration. Led the PHP 8.1 migration across the module suite and third-party connectors, and remediated all 7 SWAT-report P1 findings: OPcache tuning, read-replica scaling, Redis L2 cache, changelog-table growth, render-blocking fixes.

ResultDe-risked regulatory compliance end-to-end for a national distributor, closed every P1 finding from an external security/performance audit, kept the platform on a supported PHP version, and shipped B2B growth features (company approval, ACH, tiered pricing) tailored to wholesale customers.

ChallengeMedelita sells scrubs and lab coats customers personalize with embroidered text — configuration Magento doesn't support natively — and that data had to stay consistent and price-accurate across PDP, cart, mini-cart, and checkout while the platform itself aged through several major Magento versions, each one breaking pieces of the custom logic.

ApproachBuilt and maintained the Medelita\Embroidery module end-to-end: SKU-suffix handling, pricing rules tied to the "has_text" option, mini-cart/cart line-item sync, and propagation of embroidery data from configurable to simple products. Carried the platform through five major Magento upgrades (2.2.9 through 2.4.3-p3), re-validating the embroidery workflow, RMA process, and B2B ordering against each one, and hardened the account with two-factor authentication.

ResultFour-plus years of a fully custom, price-accurate, cart-persistent personalization system in production across multiple platform generations, with the commerce engine kept current on security and feature releases rather than left to stagnate.

ChallengeBuyers of Aladdin Temp-Rite's foodservice equipment needed to compare and document highly configurable products — color and component detail invisible on a standard spec sheet — while the business needed to keep pace with Magento's security-patch cadence and get trustworthy e-commerce analytics.

ApproachExtended the Bss Simple Details module, including a GraphQL layer, to surface a custom "Sales Code" attribute from child products onto the configurable PDP, then built a PDF export pulling those sales codes and rendered swatch colors into a printable document. Progressed the store through four consecutive Magento 2.4.5 security patches, integrated Vertex Tax and Cloudflare image optimization, and fixed a run of GA4 e-commerce tracking bugs — currency, price formatting, revenue reporting — that were silently corrupting analytics data.

ResultAn accurate, print-ready product-configuration reference for customers and sales teams, trustworthy GA4 revenue reporting, and a storefront kept current through four consecutive security releases with zero rollbacks.

ChallengeThis manufacturer of tactical and first-responder medical equipment needed its storefront to stay in lockstep with a Great Plains ERP for order and customer data, screen orders for fraud before fulfillment, and calculate tax correctly across a complex product/customer mix — all while staying current on Magento security releases.

ApproachBuilt a two-way order-status sync to the ERP with admin-configurable rules controlling which statuses trigger a sync, fixing race conditions that had been double-enqueuing orders on customer save. Customized the Signifyd fraud-review workflow so orders move through On Hold → Payment Review based on fraud score before release, integrated Avalara for tax calculation, and added automated carrier-tracking import via Xtento. Also resolved a SendGrid delivery failure that was silently dropping transactional emails to one of the brand's domains.

ResultOrder data flows reliably between storefront and ERP without manual reconciliation, suspicious orders are held for review automatically before they ship, and tax and shipping-tracking data are handled without staff intervention — all delivered within a single year alongside routine security maintenance.

ChallengeDiesel, off-road, suspension, and tire retailers need YMM (Year/Make/Model) vehicle-fitment search — "enter your vehicle, see only parts that fit it" — which stock Shopify/BigCommerce search doesn't provide out of the box, delivered consistently across a shared multi-tenant infrastructure serving a dozen storefronts at once.

ApproachBuild and maintain PHP fitment backends with their own MySQL databases, kept in sync with each store's live Shopify/BigCommerce catalog, plus the storefront widgets (garage selector, fitment-filtered listings, PDP fitment verification) embedded in each client's theme. Migrated one client's catalog sync onto Shopify's asynchronous Bulk Operations API to escape a rate-limit ceiling the old page-by-page GraphQL sync was hitting; designed a versioned PIM ingestion contract with atomic rebuilds for another. Own the shared infrastructure end to end on DigitalOcean: Droplets running the Node.js CDN asset host, DigitalOcean Spaces/CDN serving JS/CSS to every storefront, and DigitalOcean App Platform for deployed services — plus an embedded Shopify admin app (Remix, App Bridge, Polaris, Prisma) giving merchants self-serve control.

ResultFitment search live across 11 client storefronts on a shared, DigitalOcean-hosted infrastructure — with recurring data-integrity and performance issues (duplicate keyword sync skewing search relevance, a silent GraphQL data-loss bug, a Dependabot security backlog) caught and fixed along the way rather than left to compound.

ChallengeUruguayan pharmacy regulations require dual pricing — a private rate and a discounted public rate — computed at render time; two independent supplier feeds (Boticario, DUSA) disagreed on data quality across 30,000+ SKUs; a marketplace channel (PedidosYa) needed its own pricing and promotions pipeline; and the storefront had to stay reliable under bursty automated traffic, payment webhook quirks, and — eventually — an active server compromise.

ApproachBuilt a server-side dual-pricing engine as coordinated Magento plugins that compute prices at render time and coexist with an existing third-party pricing extension without double-applying a discount. Hardened the two-supplier catalog sync, catching a data-quality bug that let a malformed product code slip past validation before it reached a live listing. Shipped a competitive-pricing feature and automated promotions export for PedidosYa, root-causing a vendor export-tool bug that was silently collapsing 11 promo columns into one. Diagnosed production incidents — stuck MercadoPago payments, an admin-crashing cache corruption, an abusive-traffic session-lock exhaustion — by reproducing failures through Magento's own core code paths rather than guessing. When an anomaly in outbound email volume revealed a CVE-based server compromise (cryptominer plus a crontab backdoor), ran a forensics-conscious response: preserved evidence and looped in the host before remediating, then rotated every credential in the stack and patched the exploited CVE.

ResultA pharmacy-specific pricing UX running in production with no reported discrepancies, tens of thousands of SKUs kept in sync daily with data-quality issues caught before reaching a live page, a new marketplace revenue channel shipped with a vendor bug fixed rather than silently shipped, and a full security-incident recovery — malware removed, every credential rotated, the exploited CVE patched — with no lasting customer impact.

ChallengeSelling baby products online to Uruguayan families needed more than a generic WooCommerce install could offer out of the box — local payment processors shoppers already trust, address and shipping logic that matches Uruguay's actual states and cities instead of generic country defaults, and enough merchandising trust-signals for a category where parents want reassurance before buying for an infant.

ApproachBuilt the store on WooCommerce with the Babystreet theme, wiring in three local payment gateways (Mercado Pago, Plexo, Bamboo PCI Integra) and Uruguay-specific states, cities, and places into checkout and shipping in place of generic defaults, plus configurable per-product/category shipping visibility. Layered in trust and merchandising features — product badges, variation swatches, wishlists, AJAX search, WhatsApp click-to-chat — and marketing infrastructure spanning Facebook/Instagram catalog sync and Pixel tracking, multilingual support, and a currency switcher. Kept the build maintainable by isolating custom logic in a snippets plugin outside the theme, with staging-to-production migration tooling for safe releases.

ResultA WooCommerce storefront built around the friction points that actually matter to a Uruguayan shopper — payment methods they already trust, address fields that match how they actually enter their location, and a merchandising layer suited to a purchase category where trust is the deciding factor — rather than a generic international default configuration.