Backend Developer | Fresher 2026

Building backend systems that are clean, secure, and easy to scale.

I am Sujal Santosh Patil, a backend-focused developer from Bhiwandi (commuting distance to Mumbai). Strong fundamentals in JavaScript, Node.js/Express, REST API design with modular MVC architecture, JWT authentication with httpOnly cookies, Zod validation, bcrypt hashing, and MySQL schema design. Two production-style projects with real security implementation and DSA practice across 15+ topics. Looking for a fresher backend role where I can own real engineering outcomes from day one.

Hire Me for Backend Role View GitHub LeetCode Profile

Education

ARMIET, Mumbai University B.E. Information Technology — CGPI: 7.41 (upward trend: S3 6.39 → S8 8.05)

Graduated June 2026

Professional Snapshot

Backend-focused developer with strong JavaScript fundamentals — closures, async/await, event loop behavior, prototype chain, and ES Modules. I build modular REST APIs with role-based access control, strict input validation using Zod, and hardened authentication flows (JWT + httpOnly cookies). Comfortable with database schema design including normalization, foreign keys, denormalization trade-offs, and cascading deletes.

I build independently before seeking feedback. Two defensible full-stack projects with real security implementation (bcrypt hashing, rate limiting, CORS, Helmet middleware). Sustained daily DSA practice across 15+ topic areas — 242+ LeetCode problems solved, currently on a 97-day streak.

Technical Skills

Languages JavaScript (Advanced), SQL

Backend Stack Node.js, Express.js, REST API (modular MVC), JWT (httpOnly cookies), ES Modules

Database MySQL: connection pooling, parameterized queries, schema normalization, join tables, FK constraints, denormalized caching

Security & Validation bcrypt hashing, Zod validation (.strict()), JWT auth flows, rate limiting, CORS, Helmet middleware, input sanitization

DSA Topics (Practiced) Arrays, Strings, Two Pointers, Hash Table, DFS, BFS, Stack, Linked List, Binary Tree, Binary Search, Sorting, Dynamic Programming, Graphs, Backtracking

Tools & Environment Git, GitHub, Postman, Linux (development), API testing, debugging, ES Modules

Selected Projects

CivicDesk — Role-Based Civic Complaint Management System

2025 — present (rewrite in progress)

What it is: A platform that lets ordinary citizens file complaints with police — like a digital FIR system — and lets police officers manage and resolve those complaints from their own dashboard. Think of it as a bridge between the public and the police station, replacing in-person paperwork with a tracked digital workflow.

Dual-frontend architecture with separate citizen and police-facing portals. Citizens file complaints with photo/video evidence; police officers manage cases through a Kanban-style workflow (Pending → In Progress → Resolved → Closed). Implements role-based access control, complaint lifecycle tracking, officer assignment, and evidence uploads.

JWT auth flow with role-based access control (citizen vs. officer), httpOnly cookies, protected endpoints, and secure authentication boundaries.
Normalized MySQL schema: citizens/complaints/complaint_assignments join table, complaint_comments system, complaint_evidence dual foreign keys, denormalized is_busy cache on police table.
Strict input validation: phone (VARCHAR(10) + regex), Aadhar (VARCHAR(12)), email format validation using Zod .strict() schemas. Injection-safe parameterized queries throughout.
Modular MVC architecture with clean separation of concerns and meaningful error handling.

View repository

Job Application Tracker — Full-Stack Application Management

2026

What it is: A tool for job seekers to keep their applications organized in one place instead of a scattered spreadsheet — log every application, track which stage it's at (Applied, Interview, Accepted, Rejected), and attach notes at each stage so nothing falls through the cracks during a job search.

Full-stack application tracking system. Backend API complete with 11 RESTful endpoints, role-based auth, and production-grade security. React frontend in progress. Track applications through stages: Applied → Interview → Accepted → Rejected with stage-specific notes.

11 RESTful endpoints (POST/GET/PUT/DELETE/PATCH) with two-tier rate limiting: auth endpoints (10 req/15min) vs general API (100 req/15min). All Zod schemas use .strict() mode.
JWT authentication (HS256, 24h expiry) with httpOnly cookies. Environment-aware secure/sameSite config (prod vs dev). User data isolation — every application query scoped to userId.
bcrypt password hashing (12 salt rounds). Centralized error handling via createError factory pattern. Cascading deletes maintain referential integrity.
Dynamic SQL query building while maintaining parameterization — zero injection risk. 100% ES Modules. Clean architecture: config/, controllers/, routes/, middleware/, schemas/, utils/, db/.