Hi! I am

Swapnil Suman.

Thanks for visiting! Listed below are links to my socials. You can scroll down to know more about me.

About Me

👋 Hello, I’m Swapnil, a final-year Computer Science Engineering (CSE) student with a passion for backend development, cloud computing, and DevOps.Besides these, I am also learning about artifical Intelligence these days which i believe is going to affect all of us in some way.

🚀 Currently, I’m working on developing a SaaS platform for cybersecurity companies. My journey has been shaped by hands-on experience in building scalable backends, writing Infrastructure as Code, and creating efficient CI/CD pipelines.

🎥 Outside of coding, I love exploring the art of cinematography and video editing, blending creativity with technology.

🔍 As a kid, I was always tinkering with electronic gadgets,often bricking phones and creating chaos at home. That curious spirit has evolved into a drive to solve complex problems and build innovative solutions today.

I have hands on experience in these areas:
  • Backend Development
  • Infrastructure as Code(IAC)
  • Microservices Architecture
  • Event Driven Architecture
  • DevOps
  • Cloud Technologies

Experience(s)

Backend Engineer - Rosche Systems
Sept 2025 – Present

Tendon is a live fitness marketplace connecting users with personal trainers. I designed and built the entire backend from the ground up — from the first line of code to production deployment — and continue to maintain and expand it today.

What I Built

  • Core API & Auth — Phone OTP, email/password, and social login (Google, Apple, Facebook) via Laravel Sanctum. User and trainer models.
  • Nearby Trainer Discovery — Geo-aware search powered by Meilisearch with a composable query builder. Users filter by distance (geo radius), category, rating, price, gender, and time-of-day availability — all composed into a single search call per request. Results sort by proximity or trainer score. Pagination uses a buffer multiplier to account for post-search availability filtering, ensuring a full page every time. Moving this off the database entirely keeps results under 100ms even with multiple simultaneous filters.
  • Trainer Profiles — Photo galleries, skills, and verified identity documents (Aadhaar, PAN, UPI) via Surepass and Digilocker APIs. Admin approval workflow before trainers go live.
  • Booking System — Real-time timeslot availability, solo/family/co-booking, and installment-based payment tracking.
  • Client Progress & Workout Tracking — When a client books a trainer, the system automatically generates a personalized multi-step journey based on the trainer’s configured workflow. Steps cover health profile collection, lifestyle assessment, fitness evaluation, goal setting, workout planning, and live workout tracking. Each step type has its own executor via a registry pattern — adding new step types doesn’t touch existing code. The workout step supports viewing a session calendar, starting/completing sessions, marking individual sets and reps in real time, rescheduling, and cancelling — all within the same step. Sessions capture an RPE score and notes on completion. Form-based steps (assessments) are linked to the questionnaire system; on submission, an event-driven listener chain auto-advances the client to the next step with no manual orchestration. Every step transition is idempotent — re-triggering the same event never creates duplicate records or double-fires side effects. Clients sharing an account (e.g. family members) each get fully independent progress records.
  • Custom Questionnaires — Trainers create, clone, and assign questionnaire templates; responses feed into progress workflows automatically.
  • Ratings & Reviews — Nested replies, likes, and automatic trainer tier recalculation based on ratings and approval status.
  • Admin Panel — Built with Filament v3; trainer approvals, document verification, user reports, and role-based access control.
  • CI/CD Pipeline — Set up end-to-end deployment automation on AWS using CodePipeline and CloudFormation. Changes pushed to the main branch automatically build, push to ECR, and deploy to ECS — infrastructure defined entirely as code.
  • Notifications & Integrations — AWS SNS (SMS), AWS SES (email), AWS S3 (storage), Sentry (error tracking).

By the Numbers

  • 286 database migrations across a schema of 67 models
  • Versioned API (V1 + V2) with 49 controllers serving mobile and web clients
  • 57 test files covering features, integrations, and API endpoints

Stack: PHP/Laravel · PostgreSQL · Redis · AWS · Meilisearch

Backend Development Intern - The Lean Product Studio
Feb 2024 - Aug 2024

Rosche is a full-stack, enterprise-grade Risk and Vulnerability Management Platform designed to help security teams manage the full lifecycle of security engagements — from asset discovery and vulnerability assessment to remediation tracking and executive reporting.

Phase 1 — Foundation — NestJS backend scaffold, PostgreSQL schema, JWT auth, base CRUD for assets and engagements.

Phase 2 — Core Features — Vulnerability management, CVSS/DREAD scoring engine, RBAC and permissions system, React frontend with Material UI.

Phase 3 — Advanced Features — AI-powered CVSS generation (Google Gemini), PDF report generation, MeiliSearch full-text search across findings, assets, and engagements, Redis caching.

Phase 4 — Infrastructure — Docker/Nginx containerization, AWS ECS Fargate deployment, CloudFormation IaC, AWS Cognito with MFA.

Phase 5 — Polish & Testing — Playwright E2E tests, Storybook component documentation, admin panel (Refine), multi-tenancy hardening.

Architecture — 7-service Docker Compose setup: NestJS API · Admin API · React frontend · Admin panel (Refine) · PostgreSQL · MeiliSearch · Nginx reverse proxy. Cloud deployment via AWS ECS Fargate with ALB, KMS-encrypted secrets, and CloudFormation IaC.

Backend: NestJS · TypeScript · PostgreSQL (TypeORM) · Redis · MeiliSearch · AWS (ECS, S3, KMS, Cognito, SES)

Frontend: React 19 · Vite · Material UI v7 · Redux Toolkit · CKEditor 5 · ECharts · @react-pdf/renderer

Android Development Intern - KhetAI
Nov 2022 - Jan 2023

I contributed to the development KhetAI’s MVP, an android application designed to facilitate precision farming for farmers through machine learning predictions. My role involved seamlessly integrating Google Maps into the application, enabling precise mapping of farm boundaries.

I worked on the following tech stack:

  • Android Studio
  • Java, Kotlin
  • Firebase

Education

2021 - 2025
Bachelors in Computer Science & Engineering
KIET Group Of Institutions
CGPA: 7.7

Extracurricular Activities

  • Cinematography
  • Video Editing
2020
12th (CBSE)
SKP Vidya Vihar
Percentage: 83%
2018
10th (ICSE)
Mount Assisi School
Percentage: 93%

Key Projects

IRCTC Bot
API Reverse Engineering Automation NodeJs
IRCTC Bot
A Bot for the Indian Railway Ticket Booking site IRCTC. It imitates network calls (and does not clicks buttons using puppeteer) with pre-saved details which helps increases your chance of booking a seat during peak hours (tatkal). It can also autofill captcha(s) for you which means you just need to scan the QR code and pay for your seat. Although it does not do any fancy stuffy ; just makes network requests but I count it as a key project of mine as it was very difficult to reverse engineer API payloads and headers. Due to legality issues,source code cant be made public but if you are an employer and would like to have a look please send an email.
Quick Quill
Blogging Site GraphQL
Quick Quill
Quick Quill is place where anyone can register with few clicks and start blogging. Still in testing phase but fairly stable. Users can write blogs which will only be made public once approved by the administrator. It uses GraphQL instead of traditional REST APIs. It uses MongoDB for storing the blog contents and uses React on the frontend. Although I wrote quite a bit of React for this project, I am convinced that frontend is something I do NOT enjoy. Hence you are seeing my portfolio made with HUGO :)
User Authentication System
ExpressJS JWT Javascript
User Authentication System
A user authentication system built with Node JS provides secure user registration, login, and access control for web applications. It makes sure that only authorized users can access restricted resources or perform certain actions.

Get in Touch

My inbox is always open. Whether you have a question or just want to say hi, I’ll try my best to get back to you!