Open to opportunities · Mumbai / Hybrid

.NET full-stack developer building secure, production FinTech systems.

I’m Satyam Gupta — nearly three years designing REST APIs, hardening application security, and tuning SQL Server for an equity-research ERP used by 30+ institutional clients across India, the Middle East and Asia Pacific.

View my work Download résumé
  • C#
  • ASP.NET Core
  • Web API
  • EF Core
  • SQL Server
  • Azure
Portrait of Satyam Gupta, .NET full-stack developer
Senior Developer & Team Lead Equitec Software Technology
Experience
~3 yrs
FinTech / enterprise
Backend
ASP.NET Core
C# · Web API · EF Core
Database
SQL Server
T-SQL · tuning · Dapper
Focus
API & Security
JWT · RBAC · OWASP
Cloud
Azure
Docker · GitHub Actions

01 — About

Backend depth, full-stack reach.

I build the parts of software that have to be correct under pressure — authentication, authorization, financial data pipelines, and the SQL underneath them. My day-to-day is ASP.NET Core and SQL Server inside a regulated FinTech product, where a malformed query or a leaky endpoint isn’t a bug ticket, it’s a compliance problem.

At Equitec I own the CRM module’s REST APIs on DREAMS 365, an equity-research ERP serving broking houses and banks from Mumbai to the GCC. That has meant designing multi-tenant portals, an asynchronous distribution pipeline that fans research out over WhatsApp Business API and email, and a platform-wide RBAC model — then hardening all of it against OWASP Top 10 and external VAPT audits.

I care about code that the next person can read: clear boundaries, SOLID where it earns its keep, and query plans I can actually explain. I also lead a small group of junior developers through code reviews and standards. Right now I’m deepening my React and Azure (AZ-204, in progress) to round out the full-stack picture.

  • Based in Mumbai, India — open to Mumbai / hybrid
  • Domain FinTech · equity research · enterprise ERP
  • Languages English (Professional) · Hindi (Native)

02 — Experience

Where I’ve been building.

  1. Senior Developer & Team Lead

    Equitec Software Technology Pvt. Ltd. · Mumbai

    Sep 2023 — Present

    FinTech product company founded by ex-JPMorgan executives, building DREAMS 365 — an equity-research ERP platform for 30+ global broking houses and institutional banks.

    • Architected the CRM module’s RESTful APIs on ASP.NET Core Web API, securing endpoints with JWT authentication and role-based authorization for clients including Kotak Institutional Equities, ICICI Securities and SICO Bank.
    • Cut critical report generation time by 40% — optimising SQL Server stored procedures through index tuning, execution-plan analysis and query restructuring.
    • Built multi-tenant research portals on ASP.NET Core MVC for 30+ broking houses: content authoring, multi-level compliance approvals and client distribution.
    • Designed an asynchronous distribution pipeline (Windows Services + SQL Server Agent Jobs) delivering research over WhatsApp Business API and email with delivery tracking and read receipts — reducing manual effort by ~80%.
    • Led security hardening against OWASP Top 10 and VAPT findings — remediating SQL injection, XSS, CSRF and session-management vulnerabilities.
    • Implemented platform-wide RBAC for Research Analyst, Compliance, Head of Research and Admin roles with granular per-module permissions.
    • Delivered client-specific customisations for SICO Bank (Bahrain) and First Abu Dhabi Bank (UAE), and mentored junior developers on ASP.NET Core, SOLID and clean architecture.
    • ASP.NET Core
    • Web API
    • C#
    • EF Core
    • Dapper
    • SQL Server
    • JWT / RBAC
    • Windows Services
    • WhatsApp Business API

03 — Selected work

Projects, as case studies.

Both projects are proprietary FinTech products — code and live demos are under NDA, so these focus on the engineering problem and what I owned.

DREAMS 365 — Equity-Research ERP Platform

Flagship product · CRM module owner

Problem

Broking houses and banks needed to author equity research, push it through multi-level compliance approval, and distribute it to institutional clients — fast, auditable, and per-tenant. Manual distribution didn’t scale to 30+ clients.

What I built

The CRM module’s REST APIs, a platform-wide RBAC model, and an asynchronous distribution pipeline that pushes approved research to Bloomberg, FactSet and client portals in one click.

My role

Owned API design and delivery for the CRM module end-to-end, drove the security remediation cycle, and led juniors on standards and reviews.

Engineering

REST API design · JWT auth · role-based authorization · multi-tenant data isolation · background processing (Windows Services + SQL Agent) · SQL performance tuning.

  • ASP.NET Core MVC
  • Web API
  • EF Core
  • SQL Server
  • JWT

International Client Portals — SICO Bank & First Abu Dhabi Bank

White-labelled · GCC financial institutions

Problem

Two GCC banks needed their own branded research portals with distinct compliance rules — and one had to pass the Central Bank of Bahrain’s security requirements.

What I built

White-labelled portals with publishing, multi-level approvals, custom branding and client-specific compliance rule sets layered over the shared platform.

My role

Adapted workflows, UI and distribution pipelines per institution, and completed the security remediation cycle required for Central Bank of Bahrain compliance.

Engineering

Multi-tenant configuration · per-client compliance rules · secure publishing workflows · regulatory hardening (SQLi / XSS / CSRF remediation).

  • ASP.NET Core MVC
  • SQL Server
  • RBAC
  • Multi-tenant

04 — Skills

The toolkit, organised.

/01 Languages & Web

  • C#
  • T-SQL
  • JavaScript
  • HTML5
  • CSS3
  • Bootstrap
  • jQuery
  • AJAX
  • Razor Views
  • JSON
  • XML

/02 Frameworks & APIs

  • ASP.NET Core MVC
  • ASP.NET Core Web API
  • .NET 8
  • .NET Framework 4.x
  • WCF
  • REST API
  • LINQ
  • Dependency Injection

/03 Data

  • SQL Server 2022
  • Entity Framework Core
  • Dapper
  • Stored Procedures
  • Indexes & Triggers
  • Transactions
  • Execution Plans
  • Query Optimization

/04 Architecture

  • REST API Design
  • N-Tier
  • Repository Pattern
  • SOLID
  • Clean Architecture
  • CQRS + MediatR
  • Design Patterns
  • Multi-Tenant

/05 Security

  • JWT Authentication
  • Authorization
  • RBAC
  • OWASP Top 10
  • VAPT Remediation
  • HTTPS / SSL

/06 Integration & Jobs

  • Bloomberg / FactSet
  • WhatsApp Business API
  • SMTP / Email
  • Windows Services
  • SQL Server Agent Jobs
  • Batch Processing

/07 Cloud & DevOps

  • Azure App Service
  • Azure SQL Database
  • Container Registry
  • Docker
  • GitHub Actions CI/CD
  • IIS

/08 Testing & Tools

  • xUnit
  • Moq (working knowledge)
  • Visual Studio 2022
  • VS Code
  • SSMS
  • Postman
  • Swagger
  • SQL Profiler
  • Git

05 — Engineering approach

How I think about the work.

Principles I actually apply — grounded in what I’ve shipped, not aspirational labels.

Secure by default

Auth and authorization are design inputs, not afterthoughts. JWT, RBAC and OWASP-aware coding are how I’ve had to work in a regulated FinTech product facing external VAPT audits.

Data that performs

I read execution plans before I add indexes. Cutting report generation by 40% came from understanding the query, not guessing — profiling, then restructuring.

Clear boundaries

N-tier separation, the repository pattern and SOLID where they earn their keep — so a module can change without the whole platform flinching.

Design for scale & tenancy

Multi-tenant portals and asynchronous pipelines mean thinking about isolation, retries and back-pressure early — one platform, many institutions, each with its own rules.

Readable & reviewed

I lead code reviews and set standards for juniors. Maintainable beats clever — code is read far more often than it’s written.

Always levelling up

Currently deepening React on the frontend and Azure on the cloud side (AZ-204 in progress) to make my full-stack reach match my backend depth.

Strong & shipping

  • ASP.NET Core & Web API
  • SQL Server & performance tuning
  • Application security (JWT · RBAC · OWASP)

Currently learning

  • React (frontend depth)
  • Microsoft Azure — AZ-204 in progress
  • CQRS + MediatR in practice

Growing toward

  • Cloud-native .NET on Azure
  • Deeper automated testing culture
  • System & architecture ownership

06 — Contact

Have a project, role, or engineering challenge in mind?

I’m open to .NET / full-stack roles in Mumbai or hybrid. The fastest way to reach me is email — I read every message.

Emailmail.g.satyam@gmail.com LinkedInsatyam-gupta-a5034a3b4 Phone+91 84335 08332 RésuméDownload PDF

Opens your mail client with the message ready to send.