Senior Software Engineer · Microsoft

Ankur Debnath

I build platforms that make other people faster, in domains where being wrong is expensive.

Ten years across Microsoft, Amazon, Paytm, and REVE Systems. Distributed systems, enterprise data security, and the seams between teams that nobody else owns.

10+Years building
4Companies
2Internships
Ankur Debnath
Career

Where I've worked

A decade of shipping systems where mistakes are expensive: payments, fraud, and now enterprise data security.

Microsoft

Senior Software Engineer · Hyderabad, India
JAN 2024 – PRESENT

Technical lead for a program unifying two Purview data loss prevention enforcement stacks onto a single policy platform, spanning four engineering organizations and three product surfaces, delivered from public preview through worldwide General Availability. Sole owner of Administrative Units support for SharePoint Online, shipped world wide. Also the team's security champion: replaced high privilege access tokens with scoped service identities and led a certificate authority migration with zero customer visible downtime.

Microsoft PurviewData Loss PreventionDistributed SystemsSecurity Architecture

Amazon

SDE II · Hyderabad, India
AUG 2021 – NOV 2023

Owned invoice payment compliance end to end. Rearchitected the central view tracking invoice states to a 90% SLA, then built a rule engine that turned ETL queries into a domain specific language, with a self serve interface so customers could write their own rules instead of filing tickets. Auto resolution rose 30%. Also introduced idle EMR cluster auto termination, cutting infrastructure costs 23%.

Rule EnginesDomain Specific LanguagesAWS
P

Paytm

Software Engineer → Senior Software Engineer · Noida, India
SEP 2018 – JUL 2021

Built fraud prevention logic for Cancellation Protect that cut fraudulent activity 25%, alongside demand driven pricing based on travel and booking time. Authored an integration framework that cut insurance partner onboarding time 60%, bringing on 12+ partners in two months. Later built the onboarding engine behind the Paytm for Business platform.

Fraud PreventionPaymentsAPI Integration
R

REVE Systems

Software Development Engineer · New Delhi, India
JUN 2016 – AUG 2018

Built a two factor authentication system for B2B customers spanning CLI terminal and web auth, then packaged the web login flow as a standalone SDK so other teams could integrate it without understanding the internals, cutting unauthorized access attempts 40%. Also led an adaptive payment gateway integrating PayPal and CCAvenue with automatic country based routing, lifting successful transactions 20%.

AuthenticationSDK DesignPayment Gateways
K

KPMG

Summer Intern · Kolkata, India
MAY 2015 – JUN 2015

Assisted the team in formulating client proposals and gained a working understanding of business analytics.

I

Indian Statistical Institute

Summer Intern · Kolkata, India
MAY 2014 – JUL 2014

Studied and implemented WEP and WPA attacks and their variants under Dr. Goutam Paul, alongside a project on practical crypto and security tools under Mr. Vijay Kumar.

Selected work

A closer look

A few of the harder problems, in more depth than a resume bullet allows.

Microsoft

Unifying enterprise data loss prevention

Two separate enforcement stacks protected the same enterprise data through different rules, different APIs, and different rollout paths. I led the technical program that unified them onto a single policy platform, coordinating across four engineering organizations and three product surfaces, and drove the rollout from public preview through worldwide General Availability into Government Cloud.

4 orgs · 3 surfaces
Amazon

From ETL queries to a domain specific language

Defect tagging on disputed invoices meant hand writing ETL queries, a job only engineers could do. I designed a domain specific language that expressed the same logic declaratively, then built a self serve interface so customers could write and test their own rules without filing a ticket.

30% increase in auto resolution
Microsoft

Security by default, not by exception

As my team's security champion, I owned the security and compliance backlog end to end: replacing high privilege access tokens with scoped, forwardable service identities across two platform workloads at zero regression, and serving as directly responsible individual for a service wide certificate authority migration.

Zero regression · zero customer visible downtime
REVE Systems

Turning a feature into a product

A two factor authentication system built for one product became genuinely reusable once I packaged its web login flow as an SDK, spanning both CLI terminal and browser based authentication. Other teams could drop it in without understanding the internals.

40% fewer unauthorized access attempts
Toolbox

What I build with

Languages & Frameworks
JavaC#.NETScalaPythonJavaScriptNode.jsC++Spring BootReactAngular
Cloud & Data
AzureAWSCosmos DBAzure Data ExplorerMySQLMongoDBRedisKafka
Architecture
Distributed SystemsMicroservicesSystem DesignREST API DesignEvent-Driven ArchitectureProgressive Delivery
Security & Compliance
OAuthIAMRBACThreat ModelingData Loss PreventionInformation ProtectionCertificate Management
Education

Where it started

I

Indian Institute of Engineering Science and Technology, Shibpur

B.Tech, Computer Science · 7.25 CGPA · 2012 – 2016

Outside of shipping systems, I shoot photographs. It's where I learned that framing is most of the problem.

Testimonials

What they said then

Two notes from the mentors during my first internships, before any of the rest of this page existed.

Your contributions during the 2 month internship were really noteworthy and commendable. I wish you all the success in your future years in education and going forward.
K
Dr. Indranil Mitra
KPMG
Ankur is a very enthusiastic programmer and has the capability of quickly understanding problems. He likes to explore new things. I wish him all the best in his future.
I
Goutam Paul
Indian Statistical Institute, Kolkata