Computer Engineering undergraduate at the University of Ruhuna
Backend engineering · AI security · Cloud-native systems · Sri Lanka 🇱🇰
I build secure backend and cloud-native systems, with a current focus on infrastructure for AI-powered applications.
My current priorities:
- 🔒 Building: AgentIAM, a zero-trust SQL firewall for controlling database access from large language model agents
- ⚙️ Exploring: Go systems programming, distributed systems, backend architecture, and security policy enforcement
- 🤝 Collaborating: Backend engineering, cloud infrastructure, and AI security projects
These projects represent my strongest work across backend engineering, application security, and AI infrastructure.
🔒 AgentIAM
Built a Go database proxy that parses PostgreSQL and MySQL queries into an abstract syntax tree. Deterministic policies block unsafe queries before they reach the database. The repository includes integration tests, Python client support, and Kubernetes deployment assets.
Core stack: Go · PostgreSQL · MySQL · Docker · Kubernetes
Evidence: Integration tests
🔐 SecXfer
Built an end-to-end encrypted file-transfer platform whose central server stores ciphertext only. Local FastAPI services handle Extended Triple Diffie-Hellman (X3DH) key exchange and XChaCha20-Poly1305 encryption. A Next.js dashboard provides the user interface.
Core stack: Python · Django · FastAPI · Next.js · X3DH · XChaCha20-Poly1305
Evidence: Automated tests
Built a document intelligence platform for querying PDF, DOCX, and CSV files through retrieval-augmented generation. The Docker-based architecture combines a TypeScript backend, ChromaDB vector search, local Ollama inference, and object storage.
Core stack: TypeScript · Node.js · React · ChromaDB · Ollama · Docker
Evidence: Development status and known limitations
Additional work spans cloud infrastructure, DevOps automation, and multi-tenant software.
View additional engineering projects
Developed a cloud-native inventory and order-management system on Azure. It combines asynchronous processing, automated testing, observability, and infrastructure as code.
Core stack: TypeScript · Node.js · Azure · Docker · Bicep · GitHub Actions
Developed a multi-tenant Applicant Tracking System with tenant isolation and role-based access control. Redis queues handle background work, Meilisearch supports full-text search, and MinIO provides S3-compatible storage.
Core stack: PHP · Laravel · MySQL · Redis · Meilisearch · MinIO · Docker
These projects highlight my contributions within shared codebases and team-owned systems.
Role: Payment service contributor
Contributed to the Node.js payment service, which uses PostgreSQL and RabbitMQ to support booking workflows. The wider platform uses containerized microservices and automated deployment workflows targeting Azure Kubernetes Service.
Core stack: Node.js · Express.js · PostgreSQL · RabbitMQ · Docker · AKS
Role: Contributor
Contributed to a team project that uses a deterministic OpenCV pipeline to authenticate Sri Lankan Rupee banknotes by evaluating physical and visual security features.
Core stack: Python · OpenCV · Tkinter
I use these technologies most often across my current projects:
