Multi-Year Embedded Team for a Live Compliance-Training Platform

Client situation

An OSHA HAZWOPER hazardous-materials training provider runs a live, publicly indexed training platform used by working learners across multiple certification tracks. Rather than a single build, the engagement has run as an embedded team working in structured sprints release after release.

Business problem

A production platform already serving paying learners needed continuous feature delivery, a legacy front-end that was getting harder to maintain, and a security posture that needed to keep pace with a growing, publicly reachable system -- all without interrupting active course access.

Constraints

• Zero downtime tolerance: the platform serves active learners mid-certification at all times.
• A multi-level compliance program (general site workers, managers/supervisors, emergency responders, specialists) where content and access logic must stay correct.
• An aging Angular front-end that needed replacing without a feature freeze.

Q-Solutions approach

1. 01.Ran delivery as fixed 10-day sprints grouped into successive releases, each with its own scoped feature set.
2. 02.Migrated the course player from Angular to React incrementally, alongside feature work rather than as a separate rewrite phase.
3. 03.Ran a dedicated security remediation pass: penetration testing, a vulnerability-assessment report, and staged fixes across sprints.
4. 04.Tracked organic search performance monthly so content and technical SEO work could be prioritized against real traffic data.

Delivered solution

• A bundled course-purchasing flow for multi-course package buys.
• A DOL card ordering and shipment-tracking feature for certification card fulfillment.
• A redesigned course catalog with an in-house course builder.
• An Angular-to-React migration of the course player for long-term maintainability.
• Authentication hardening (moving off a weaker legacy token scheme to JWT) and a decoupled front-end/back-end API boundary, verified by penetration testing.