Finance

Engineering for the regulators in the room — and the velocity the business demands.

Banking platforms, payment processors, fintech infrastructure, real-time fraud detection. We build for the audit, the regulator, and the trader — at the same time. Tier-1 banks, payments processors at 10⁹ events/day, hedge-fund infrastructure with sub-millisecond decision budgets.

What's at stake

Finance engineering operates with the lowest tolerance for error and the highest scrutiny. Every system needs to be auditable from day one.

PCI DSS 4.0

The new requirements (multi-factor auth at every CDE boundary, continuous monitoring) demand engineering changes, not just policy updates. We've cleared 4.0 audits with zero material findings.

SOX, SOC 2, regulatory reporting

FedRAMP, GLBA, FINRA, BCBS 239 (risk data aggregation), Basel III. Audit-grade event sourcing so historic state reconstruction is queryable, not archaeological.

Real-time at financial latencies

Fraud scoring at <10ms P99. Trading paths at single-digit microsecond budgets. Settlement systems at five-nines. We've shipped all three.

Multi-region resilience

Active-active across regions for fraud, payments, settlement. RTO/RPO measured in seconds, not hours. Chaos engineering as standing practice, not an annual drill.

How our six pillars serve finance

Software Engineering →

Event-sourced ledgers, audit-grade transaction systems, real-time fraud and risk platforms.

DevOps & SRE →

PCI-scope-segmented Kubernetes platforms, multi-region active-active deployments, chaos-engineering practice.

AI →

Real-time fraud scoring, document understanding for KYC/AML, predictive credit decisioning with explainability for regulator-facing decisions.

Cloud & CRM →

BigQuery / Snowflake risk data warehouses, Salesforce-driven enterprise sales / contract lifecycle, regulator-cleared cloud architectures.

Security & Compliance →

PCI scope reduction via tokenization, zero-trust architecture for trading floors, SIEM / detection engineering for SOCs.

Management & Strategy →

Engineering OKR rollouts at scale, post-merger technology integration, regulatory program leadership.

Frameworks & standards we work to

PCI DSS 4.0
SOC 2 Type II
SOX
GLBA
FINRA
BCBS 239
Basel III
ISO 27001
FedRAMP
FIX Protocol
SWIFT
ISO 20022
FpML
FdC3
DTCC
CHIPS
FedNow

Selected finance work

Names anonymized.

PaymentsPCI DSS 4.0

PCI scope reduction — Tier-1 payments processor

Problem
CDE encompassed 60% of engineering estate. Repeat audit findings. PCI DSS 4.0 multi-factor requirements approaching.
Approach
Tokenization at front edge. CDE re-scoped to 4 services. Zero-trust at boundary.
Outcome
CDE 60% → 8% of estate. PCI DSS 4.0 cleared with zero findings. Engineering velocity outside CDE doubled.
BankingEvent sourcing

Audit-grade transaction ledger — mid-size commercial bank

Problem
20-year-old stored-procedure ledger. Year-end audit took 6 weeks. Fraud rules required DBA intervention.
Approach
.NET 8 event-sourced ledger on EventStoreDB + PostgreSQL projections. Strangler-pattern migration.
Outcome
Audit time 6 weeks → 8 days. Fraud rules now ship as event-stream consumers.
PaymentsML

Real-time fraud scoring — Tier-1 payments processor

Problem
Rules engine at fraud-loss ceiling. Each new rule took 6 weeks. Recall plateauing.
Approach
Gradient-boosted ensemble via Triton. Feature store with hot Redis. Shadow scoring 6 weeks before cutover.
Outcome
Fraud loss down 31% in Q1 post-launch. P99 scoring latency 8ms. New models deploy in days.

Finance engineering challenge?

30-minute call with a senior architect who's shipped to PCI / SOX / Basel-regulated production. No slides.