---
type: proposal
status: early
client: "[[Meridian Financial]]"
value: 60000
submitted: null
decision_due: 2026-05-01
priority: medium
tags:
  - proposal
  - sales
  - finance
  - api
  - enterprise
---
# [[Meridian Financial]] API Modernization Proposal

## Overview

Legacy .NET API audit and modernization roadmap for [[Meridian Financial]], a regional investment firm. High-value engagement — similar to [[GlobalBank API Audit]] but 3x scope.

**Client**: [[Meridian Financial]]
**Contact**: [[Catherine Park]], COO
**Value**: $60,000
**Duration**: 3 months (May - July 2026)
**Status**: Early — intro meeting scheduled 2026-03-25
**Decision expected**: 2026-05-01

## Background

[[Catherine Park]] (COO) reached out after seeing the [[GlobalBank]] case study. Referred by [[Robert Williams]]. [[Meridian Financial]] has legacy .NET APIs serving their wealth management platform that need modernization to REST. PCI-DSS compliance is mandatory.

Catherine wants a phased approach. This would be Carter Strategy's largest single engagement to date.

## Proposed Team (TBD)

| Team Member | Role | Hours (est.) | Rate |
|-------------|------|-------|------|
| Carter | Architecture Lead | 50 | $350/hr |
| [[Dan Oliveira]] | API Development | 60 | $250/hr |
| [[Marcus Webb]] | Data Layer | 40 | $275/hr |
| [[Priya Kapoor]] | Compliance Analysis | 20 | $275/hr |
| **Total** | | **~170** | **$60,000 est.** |

## Proposed Scope

### Phase 1: API Audit & Assessment ($18,000)
- Legacy .NET API inventory
- Architecture review
- Performance analysis
- Security vulnerability scan
- PCI-DSS compliance check
- Duration: 3 weeks

### Phase 2: REST API Design ($22,000)
- Target API architecture
- OpenAPI specification
- Authentication & authorization design
- Rate limiting strategy
- Duration: 4 weeks

### Phase 3: Migration Roadmap ($12,000)
- Phased migration plan
- Parallel running strategy
- Risk assessment
- Rollback procedures
- Duration: 2 weeks

### Phase 4: PCI-DSS Compliance Review ($8,000)
- Compliance gap analysis
- Remediation recommendations
- Documentation for auditors
- Duration: 2 weeks

## Dependencies

**On Client**:
- Intro meeting 2026-03-25
- Access to existing API documentation
- Technical team availability ([[David Kim]])
- PCI-DSS audit reports

**On Us**:
- Complete intro meeting assessment
- Draft formal proposal post-meeting
- Confirm team availability for May start

## Notes

- Enterprise financial rate: $350/hr
- Would reference [[GlobalBank API Audit]] methodology
- [[API Security Checklist]] directly applicable
- PCI-DSS expertise — [[Leila Farouk]] could assist if available
- Largest potential engagement — handle carefully

## Tasks

- [ ] Prepare for intro meeting with [[Catherine Park]] 📅 2026-03-24
- [ ] Research [[Meridian Financial]] .NET stack 📅 2026-03-24
- [ ] Draft proposal after meeting 📅 2026-03-28

## Related

- Client: [[Meridian Financial]]
- Referral: [[Robert Williams]], [[GlobalBank]]
- Methodology: [[GlobalBank API Audit]], [[API Security Checklist]]

---

*Early stage — intro meeting 2026-03-25*
