AI engineering · Full-stack development · Application security

Suneel Kumar.

Intelligent systems.
Secure foundations.

I build production AI, secure APIs, and the applications around them. 10+ years delivering enterprise software across financial services, healthcare, and commerce—with hands-on AI agents, Java, Python, React, AWS, and application security.

Download résumé Let’s talk

Location: Dallas, TX
Work arrangement: Remote or Dallas-area hybrid
Work authorization: H-1B — sponsorship and transfer required
Availability: Available immediately

Experience across
finance & healthcare

Capital OneFidelity InvestmentsCVS HealthEssendant

01 Selected work

Built for real-world complexity.

A closer look at the systems I’ve helped deliver—and the work I owned.

AI engineering & agent workflows

Production AIfrom reusable skills to operational support

Capital One

AI Skills & Operations Automation

Agent skills for engineering teams and an LLM service supporting payment operations.

My contribution

Built reusable skills, maintained the registry and CLI, and developed the FastAPI inference service and prompt templates.

Explore the engineering

Maintained an internal AI skills registry and CLI for Claude Code and Windsurf, organizing reusable skills for engineering teams.
Authored Jira, pull-request, Confluence, and CI/CD agent skills adopted by partner teams; applied agentic workflows to refactoring and test scaffolding.
Built a FastAPI LLM inference service that summarized historical payment-file processing and surfaced typical patterns and anomalies through a Slack bot for operational decision support.
Designed reusable prompt templates for operational summaries and shared prompt and skill patterns across teams.

Python
FastAPI
Claude Code
Windsurf
Prompt Engineering
AWS ECS Fargate

Full-stack & distributed systems

Millionsof payments processed daily

Capital One

Payments Fulfillment Platform

Secure fulfillment across ACH, debit, checks, balance transfers, and cross-border payments.

My contribution

Built the public fulfillment API, vendor ingestion, and batch-posting pipelines across 40+ file formats.

Explore the engineering

Built the public payment-fulfillment API and core services (Spring Boot on ECS Fargate) and contributed to a real-time money-movement platform in Go — event-driven and active/active across two AWS regions.
Built the vendor-file ingestion and batch-posting pipeline on AWS Step Functions + EMR Spark (40+ file formats) with automated reconciliation to the card processor.
Shipped GenAI ops tooling — an LLM inference service that guides end-of-day payment decisions — and embedded PCI DSS / NIST 800-53 security (OAuth2, mutual TLS, PGP, KMS) across the SDLC.

Java 17/21
Go
Python
Spring Boot
AWS
Spark / EMR
Kafka
GenAI

Application & API security

PCI DSScontrols embedded end to end

Capital One

Real-Time Agent Transfer Payments

A real-time card-transfer service operating inside the Cardholder Data Environment.

My contribution

Built the Fastify service with proof-of-possession tokens, field-level encryption, and structured security logging.

Explore the engineering

Built a Node.js / Fastify microservice inside the Cardholder Data Environment that orchestrates tokenized card lookups, secure detokenization, and real-time transfer posting.
Enforced PCI DSS controls end-to-end — proof-of-possession tokens, field-level encryption, and structured security logging on every request.

Node.js
Fastify
GraphQL
REST / SOAP
AWS
PCI DSS

More enterprise work Healthcare, commerce & web platforms

Fidelity Investments

Campaign Processing Platform

A high-throughput campaign-processing platform for a top asset manager, handling millions of user events.

Led delivery of stateless Spring Boot microservices secured with OAuth2, JWT, and AWS IAM role-based access.
Decomposed monoliths into independent services for scalability and fault isolation, with React and Angular front ends.
Introduced threat modeling into the SDLC and cut incident response time 30% with Splunk / CloudWatch observability.

Java 8/11
Spring Boot
React
Angular
AWS ECS / Lambda
DynamoDB
Splunk

CVS Health

Formulary Alternatives & Derivatives

Pharmacy-benefits tooling that surfaces lower-cost formulary alternatives and drug derivatives for members and providers.

Built Angular 6 single-page apps and containerized Spring Boot microservices deployed to Google Kubernetes Engine with Cloud Build CI/CD.
Wired event-driven integrations with Cloud Pub/Sub and Cloud Functions; modeled data across Cloud SQL, Cassandra, and MongoDB.
Fed analytics datasets into BigQuery for reporting on formulary and pricing trends.

Java 8
Spring Boot
Angular 6
GCP (GKE, Pub/Sub, BigQuery)
Cassandra
MongoDB

Essendant

ORS Nasco Website Redesign

A complete ground-up redesign of the ORS Nasco wholesale-distribution website.

Rebuilt the front end in Angular 2 + Node.js with a component-based architecture and responsive layouts.
Integrated a business rules engine (ILOG JRules) for rule-driven decisioning.
Deployed Dockerized microservices across AWS and Google Cloud (GKE + Compute Engine) with Pub/Sub messaging and Stackdriver monitoring.

Java 8
Spring Boot
Angular 2
Node.js
Docker
AWS
GCP (GKE)

Teleflora

Florist Website Platform

Designed and built a platform generating thousands of personalized websites and templates for florists nationwide.

Architected the system with Spring (IOC/AOP) and Hibernate using UML and GoF design patterns.
Delivered SOAP and REST services (JAX-WS, JAX-RS, Apache CXF) powering template personalization at scale.
Built the JSF 2.0 + PrimeFaces UI, deployed on IBM WebSphere.

Java 7/8
Spring 3.0
Hibernate
JSF 2.0
PrimeFaces
SOAP / REST
WebSphere

Enterprise work; source code is private. These summaries describe my contributions without sharing proprietary code.

02 Career

A decade of building & delivering.

From Java services to cloud platforms and production AI. Finance, healthcare, and commerce.

Nov 2023 – Present · Assignment ending soonMost recent engagement
Capital One
Richmond, VA
Senior Java Full Stack Developer
AI agents & automation · Payment platforms · Application security
Built payment fulfillment services, production AI tooling, and reusable agent workflows in a regulated banking environment.
Role details & technologies
- Developed a Python/FastAPI LLM inference service that summarized historical payment-file processing, surfaced patterns and anomalies, and supported end-of-day operational decisions through a Slack bot.
- Maintained an internal AI skills registry and CLI for Claude Code and Windsurf; authored reusable Jira, pull-request, Confluence, and CI/CD skills adopted by partner teams.
- Applied agentic workflows to code generation, refactoring, and test scaffolding; shared reusable prompts and skill patterns across engineering teams.
- Built the public-facing Fulfillment API (Java 17, Spring Boot 3.x on ECS Fargate) secured with OAuth2, mutual TLS, and field-level encryption for sensitive payment data.
- Led the first production migration to Java 21 / Spring Boot 4, hardened with Resilience4j circuit breakers and SQS retry/fallback queues.
- Built vendor file ingestion on AWS Step Functions (40+ vendor formats) and the EMR Spark pipeline generating TSYS posting files with automated reconciliation.
- Contributed to a real-time money movement platform in Go — event-driven, outbox-patterned, active/active across two AWS regions.
- Engineered data pipelines with Databricks PySpark, Flink SQL, and Kafka, publishing governed datasets to Snowflake and Microsoft OneLake.
- Remediated Checkmarx, SonarQube, and Mend findings and dependency CVEs; implemented least-privilege IAM, Secrets Manager/Vault, and PGP encryption aligned with PCI DSS and NIST 800-53 controls.
- Java 17/21
- Spring Boot 3/4
- Python / FastAPI
- Claude Code
- Windsurf
- AWS
- Go
- Kafka
- Application Security
Environment: Java 17/21, Spring Boot 3.x/4.x, Go, Python, TypeScript, React, Apache Spark (EMR), Databricks, Flink, Kafka, AWS (ECS Fargate, Lambda, Step Functions, DynamoDB, S3, SQS, EventBridge, EMR, Glue), Snowflake, OneLake, Docker, Jenkins, Splunk, OpenTelemetry
May 2022 – Oct 2023
Fidelity Investments
Durham, NC
Full Stack Java Developer
Full-stack delivery · Threat modeling · Identity & access
Led delivery of the Symphony Campaign Processing platform handling millions of user events.
Role details & technologies
- Designed stateless microservices (Java 11, Spring Boot, OAuth2, JWT + AWS IAM) with role-based access control.
- Migrated monolithic codebases to independent Spring Boot microservices, improving scalability and fault isolation.
- Built UIs in React.js and Angular; introduced threat modeling into the SDLC; reduced incident response time 30% via Splunk/CloudWatch.
- Java 8/11
- Spring Boot
- React.js
- Angular
- AWS ECS
- Lambda
- DynamoDB
- Splunk
Environment: Java 8/11, Spring Boot, React.js, Angular, AWS ECS/Lambda/RDS/DynamoDB, Glue, CloudFormation, Splunk
Aug 2021 – Apr 2022
Capital One
Richmond, VA
Senior Java Full Stack Developer
Full-stack delivery · API authentication · AWS IAM
Built Angular 8 UI with reactive forms, custom directives, and RxJS observables.
Role details & technologies
- Implemented Spring Security with OAuth2/JWT for REST endpoint protection across microservices.
- Managed AWS infrastructure (EC2, S3, RDS, IAM, VPC, Lambda, SQS, SNS, Route 53) with CloudWatch monitoring.
- Java 8
- Spring Boot 2.x
- Angular 8
- Hibernate 5.x
- Docker
- Jenkins
Environment: Java 8, Spring Boot 2.x, Angular 8, Hibernate 5.x, Docker, Jenkins, AWS
Jun 2020 – Jul 2021
CVS Health
Chicago, IL
Java Full Stack Application Developer
Healthcare applications · API security · Cloud access controls
Built SPAs with Angular 6, RxJS, reactive forms, and custom pipes.
Role details & technologies
- Secured Spring REST APIs with OAuth2/JWT and Angular token interceptors; used Cloud IAM for access control and Secret Manager for credential handling.
- Deployed containerized Spring Boot microservices to Google Kubernetes Engine (GKE) on Google Cloud Platform, with Cloud Build CI/CD and Artifact Registry.
- Built event-driven integrations using Cloud Pub/Sub and Cloud Functions, with Cloud Storage for artifacts and Secret Manager for credentials.
- Modeled operational data across Cloud SQL and Cassandra/MongoDB, and fed analytics datasets into BigQuery for reporting.
- Migrated JMS from WebLogic to Apache ActiveMQ with Camel-based async messaging.
- Java 8
- Spring Boot
- Angular 5/6
- GCP
- GKE
- BigQuery
- MongoDB
- Cassandra
Environment: Java 8, Spring Boot, Angular 5/6, Google Cloud Platform (GKE, Cloud Run, Pub/Sub, Cloud Functions, Cloud Storage, Cloud SQL, BigQuery, Secret Manager, IAM), MongoDB, Cassandra
Jul 2018 – May 2020
Essendant
Denver, CO
Java Full Stack Developer
Commerce platforms · Secure REST APIs · Cloud delivery
Built Angular 2 + Node.js responsive UI modules with component-based architecture and Angular routing.
Role details & technologies
- Protected Spring Boot REST endpoints with OAuth2 and JWT while integrating distributed application services.
- Integrated BRMS (ILOG JRules) for rule-based decision services.
- Deployed Dockerized microservices across AWS EC2 and Google Cloud Platform — GKE and Compute Engine — with Cloud Build/Container Registry and Stackdriver monitoring.
- Integrated Cloud Pub/Sub for async messaging and Cloud Storage for object storage, with Cloud SQL alongside MongoDB and Oracle.
- Java 8
- Spring Boot
- Angular 2
- Node.js
- MongoDB
- Oracle
- Docker
- AWS
- GCP
- GKE
Environment: Java 8, Spring Boot, Angular 2, MongoDB, Oracle, Docker, AWS (EC2), Google Cloud Platform (GKE, Compute Engine, Cloud Storage, Cloud Pub/Sub, Cloud SQL, Cloud Build, Container Registry, Stackdriver)
Mar 2017 – Jun 2018
Teleflora
Oklahoma City, OK
Senior Java Developer
Enterprise Java · Authentication & authorization · Web services
Designed architecture with UML/GoF patterns, Spring 3.0 (IOC/AOP), and Hibernate 3.5.
Role details & technologies
- Built SOAP/REST services (JAX-WS, JAX-RS, Apache CXF, JAXB, WSDL, XSLT).
- Integrated authentication and authorization using SiteMinder in the WebSphere application environment.
- Integrated JSF 2.0 + PrimeFaces UI, deployed on IBM WebSphere 8.1.
- Java 7/8
- Spring 3.0
- Hibernate 3.5
- JSF 2.0
- PrimeFaces
- WebSphere 8.1
Environment: Java 7/8, Spring, Hibernate, Angular 2, JSF, PrimeFaces, WebSphere
Sep 2015 – Feb 2017
Credit Acceptance Corporation
Southfield, MI
Java Developer
Service integration · WS-Security · Certificate-based identity
Built SOAP/REST service framework with XML marshalling and Mule ESB orchestration.
Role details & technologies
- Implemented EJB-based business logic and x.509 certificate-based authentication.
- Implemented WS-Security in Mule ESB integrations, with certificate-based authentication and public/private-key encryption for service communication.
- Deployed on IBM WebSphere, built with Apache Ant/Ivy.
- Java
- Spring
- Hibernate
- Mule ESB
- Oracle
- WebSphere
- Ant/Ivy
Environment: Java, Spring, Hibernate, JAX-RS/JAX-WS, Mule ESB, Oracle, WebSphere

How I work

Ownership beyond
the pull request.

Read the full résumé

I connect the application, infrastructure, and operational details that make a system dependable. My work spans API design and front-end delivery, cloud architecture, security, and the production support that comes after launch.

Java and Spring Boot are my foundation. Go, Python, React, and Angular let me work across the stack. More recently, I’ve shipped LLM inference services and reusable AI workflows for payment operations.

More about my approach

I'm a senior software engineer connecting AI engineering, full-stack delivery, and application security. In my current Capital One assignment, I build payment fulfillment services and AI tooling for engineering and operations teams. The assignment is expected to end soon, and I'm available for my next opportunity immediately.

My foundation is modern Java: I led my team's first production migration to Java 21 and Spring Boot 4, and I've driven Java 8 → 17 modernizations, Jakarta EE 10 upgrades, and zero-downtime monolith decompositions. But I'm deliberately polyglot — production Go, Python, and TypeScript microservices, plus big-data pipelines in Apache Spark on EMR, Databricks, Kafka, and Flink SQL feeding Snowflake and OneLake.

Security isn't an afterthought in my work — it's the architecture. OAuth2, OIDC, JWT, mutual TLS/PKI, field-level and PGP encryption, least-privilege IAM, and PCI DSS / NIST 800-53 compliance are embedded in everything I ship. On AWS I design event-driven microservices across ECS Fargate, Lambda, Step Functions, DynamoDB, SQS, and EventBridge — deployed active/active across regions with automated failover.

My AI work includes a Python/FastAPI LLM inference service for payment operations, reusable agent skills for Jira, pull requests, Confluence, and CI/CD, and an internal skills registry and CLI for Claude Code and Windsurf. I hold AWS Solutions Architect – Professional and Google Cloud Professional Machine Learning Engineer certifications.

03 Role fit & expertise

Three disciplines. One production mindset.

AI Engineer, Full Stack Developer, and Cybersecurity Engineer roles—grounded in enterprise delivery. My security specialization is application and cloud security.

AI Engineer

Applied GenAI · Agent workflows · Engineering automation

Production LLM integration and reusable agent skills that support real engineering and operational workflows—from Jira and pull requests to payment-file analysis.

Python
FastAPI
LLM Integration
AI Agents
Claude Code
Windsurf
Prompt Engineering
RAG
AWS
Vertex AI

Explore AI skills & operations automation

Full Stack Developer

Java & Spring Boot · Distributed systems · Cloud platforms

End-to-end delivery of enterprise applications: secure APIs, event-driven services, responsive interfaces, and production operations.

Java 17/21
Spring Boot
React
Angular
TypeScript
AWS
GCP
Kafka
Docker
Kubernetes
SQL
JUnit / Mockito

See enterprise delivery experience

Cybersecurity Engineer

Application security · Cloud security · Secure software engineering

Security engineering embedded in production software: identity and access controls, API protection, encryption, vulnerability remediation, and compliance-aligned delivery.

OAuth2 / OIDC
JWT
Mutual TLS / PKI
AWS IAM
KMS
Secrets Manager
Vault
PGP
Checkmarx
Threat modeling
PCI DSS
NIST 800-53

See secure payment-platform work

Explore the complete technology toolkit

Languages

Java 8/11/17/21
Go
Python
TypeScript
JavaScript (ES6+)
SQL
Scala

Backend

Spring Boot 2.x–4.x
Spring Security
Spring Cloud
Hibernate/JPA
Node.js
FastAPI
RESTful APIs
OpenAPI/Swagger
GraphQL
Microservices

Frontend

React
Angular 2–14
TypeScript
RxJS
HTML5
CSS3
Bootstrap
Responsive Design

Cloud (AWS)

ECS Fargate
Lambda
Step Functions
DynamoDB
S3
SQS
SNS
EventBridge
EMR
Glue
RDS
KMS
Secrets Manager
IAM
Route 53
CloudWatch
CDK
CloudFormation

Cloud (GCP)

GKE
Cloud Run
Cloud Functions
Pub/Sub
Cloud Storage
Cloud SQL
BigQuery
Dataflow
Vertex AI
Cloud Build
Artifact Registry
Secret Manager
IAM

Data & Streaming

Apache Spark
Apache Kafka
Apache Flink
Databricks
Snowflake
Microsoft OneLake
ETL Pipelines

Databases

DynamoDB
Oracle
PostgreSQL
MySQL
MongoDB
Cassandra
IBM DB2
SQL Server

AI / GenAI

LLM Integration
AI Agents & Agentic Workflows
Reusable Agent Skills
Claude Code
Windsurf
Prompt Engineering
RAG
GenAI Inference Services
Vertex AI
MLOps

Security

OAuth2
OIDC
JWT
SAML
Mutual TLS / PKI
KMS Encryption
PGP
Vault
Checkmarx
Mend / SCA
CVE Remediation
Threat Modeling
Least-Privilege IAM
WS-Security
SiteMinder
PCI DSS
NIST 800-53
LDAP/AD

DevOps & CI/CD

Docker
Kubernetes
Jenkins
GitHub
Maven
Gradle
Terraform
SonarQube

Testing

JUnit 5
Mockito
Cucumber
Behave
Godog
WireMock
Playwright
JMeter
TDD/BDD

Observability

Splunk
OpenTelemetry
CloudWatch
New Relic
PagerDuty
X-Ray

04 Credentials

Cloud & AI certifications.

AWS Certified Solutions Architect – Professional

Amazon Web Services · 2025

Verify on Credly

Professional Machine Learning Engineer Certification

Google Cloud · 2025

Verify on Credly

05 Foundation

Education

Master of Science in Computer Science

Houston, TX

Bachelor of Technology in Computer Science and Engineering

India

06 Start a conversation

Let’s build something dependable.

Hiring for Java full stack, application security, or cloud security? Share the role, team, and engineering challenge. I’d welcome a conversation about where my experience can contribute.

281-786-5856 suneeluhcl@gmail.com

View Résumé Download PDF

Suneel Kumar.

Built for real-world complexity.

AI Skills & Operations Automation

Payments Fulfillment Platform

Real-Time Agent Transfer Payments

Campaign Processing Platform

Formulary Alternatives & Derivatives

ORS Nasco Website Redesign

Florist Website Platform

A decade of building & delivering.

Capital One

Fidelity Investments

Capital One

CVS Health

Essendant

Teleflora

Credit Acceptance Corporation

Ownership beyondthe pull request.

Three disciplines. One production mindset.

AI Engineer

Full Stack Developer

Cybersecurity Engineer

Languages

Backend

Frontend

Cloud (AWS)

Cloud (GCP)

Data & Streaming

Databases

AI / GenAI

Security

DevOps & CI/CD

Testing

Observability

Cloud & AI certifications.

AWS Certified Solutions Architect – Professional

Professional Machine Learning Engineer Certification

Education

Master of Science in Computer Science

Bachelor of Technology in Computer Science and Engineering

Let’s build something dependable.

Ownership beyond
the pull request.