Dual SaaS & On-Premises Architecture
Spring Boot • Kubernetes • Claude Code • InfoSec AI
PFM B2B Rearchitecture for SaaS & On-Premises Deployments
Perfios's Personal Finance Management (PFM) B2B solutions empower enterprise banking institutions and fintechs to deliver automated transaction categorization, cash flow analysis, and wealth management insights. As enterprise demands diversified across public cloud SaaS and private, air-gapped bank networks, the platform required a ground-up rearchitecture to eliminate divergent codebase maintenance and guarantee strict multi-tenant isolation.
The Challenge
Tier-1 banking clients enforce stringent on-premises data residency, air-gapped network restrictions, and dedicated database clustering, while digital fintechs require high-elasticity multi-tenant SaaS. Maintaining divergent codebases risked release fragmentation and high engineering overhead.
The Engineering Solution
Architected a decoupled, modular microservices framework with environment-agnostic configuration layers. Standardized containerized deployments with Docker and Kubernetes/Helm, implemented InfoSec AI guardrails for financial data sanitization, and leveraged Claude Code agentic workflows to accelerate large-scale codebase refactoring.
Multi-Tenant SaaS
On-Premises Banking
InfoSec AI & Guardrails
Claude Code Workflows
Automated VAPT & Dependency Remediation
Google ADK • Claude Slash Commands • Harbor API • Tenable API • GitLab Ultimate
InfoSec VAPT & Dependency Scanning Automation with Google ADK & Claude Code
In mission-critical banking and fintech infrastructure, continuous vulnerability assessment and penetration testing (VAPT) and third-party dependency scanning are non-negotiable compliance imperatives. Manual vulnerability triage between container registries, security dashboards, and code repositories previously caused remediation latency and high developer overhead.
The Challenge
Security findings across Harbor container registries and Tenable vulnerability scans required manual correlation against source repositories, manual CVE impact assessment, and repetitive pull request drafting for GitLab Ultimate pipeline blockers.
The Engineering Solution
Engineered an agentic DevSecOps automation workflow leveraging Google ADK (Agent Development Kit) and custom Claude slash commands. Directly interfaced with Harbor and Tenable REST APIs to automatically query scan reports, extract high/critical CVEs, correlate impacted dependencies, and synthesize automated GitLab Ultimate VAPT fixes and dependency upgrade merge requests with automated test suites.
Google ADK
Claude Slash Commands
Harbor API
Tenable API
GitLab Ultimate VAPT
DevSecOps Automation
10,000,000+ Daily Transactions
Spring Boot Reactive • Java
Account Aggregator Reactive Framework
The Perfios Account Aggregator platform powers secure, consented financial data transfers between Financial Information Providers (banks) and Financial Information Users (fintechs/lenders). As transaction volumes accelerated, conventional blocking synchronous servlet threads faced severe connection pool exhaustion.
The Challenge
Under peak surge traffic, thread-per-request blocking I/O caused thread exhaustion, increased JVM garbage collection pauses, and degraded tail latency for banking partners.
The Engineering Solution
Engineered non-blocking reactive microservices leveraging Project Reactor and Spring WebFlux. Achieved near-constant memory footprint, non-blocking backpressure handling, and optimized system throughput to handle 1 Crore+ daily operations.
Reduced Onboarding from Months to Weeks
Java • RESTful APIs • Microservices
Enterprise API Orchestration Layer
Integrating dozens of diverse banking systems with differing protocols, encryption schemes, and payload structures introduced technical debt and lengthy onboarding cycles for new products.
The Challenge
Fragmented external service invocation logic required custom code duplication across teams for every new banking integration.
The Engineering Solution
Architected an abstracted API Orchestration Layer that standardized token management, signature verification, request retries, and data transformations into reusable shared service components.
High Availability & Strict Compliance
Spring Boot • MongoDB • Oracle • AWS
Financial Information Provider (FIP) Core Module
Owned the complete lifecycle from architectural design to deployment of the FIP module, enabling banks to securely process customer consent artifacts and stream encrypted financial data packets.
The Challenge
Processing millions of high-value banking requests while complying with stringent Reserve Bank of India (RBI) security, encryption, and audit trail guidelines.
The Engineering Solution
Built fault-tolerant, horizontally scalable services backed by MongoDB and Oracle DB, featuring robust transaction isolation, tamper-proof audit trails, and automated failover.
Real-Time Telemetry & Streaming
Apache Kafka • React JS • Docker
Event-Driven Kafka Telemetry Pipeline
To provide continuous operational visibility across all financial institutions connected to the Account Aggregator, engineered an asynchronous event streaming backbone feeding the internal Admin Dashboard.
The Challenge
Relational database polling created query bottlenecks and delayed incident response when diagnosing bank downtime or API timeouts.
The Engineering Solution
Transitioned system metrics and status heartbeats to decoupled Apache Kafka topic streams, enabling instant latency monitoring, anomaly alerting, and zero query pressure on primary transactional databases.
Need the 1-Page Summary for Recruiting?
The 1-page resume encapsulates these scale metrics in an ATS-optimized format.