Head of Engineering · Apache Software Foundation PMC member · AWS Solutions Architect
Colombo, Sri Lanka 🇱🇰
I lead engineering teams that build SaaS products from a blank canvas — distributed systems, API gateways, security tooling, and the occasional hardware side-quest. Over the last decade I've shipped products at startups, contributed to widely-used open source, and written about most of it along the way.
- 🪶 PMC member at the Apache Software Foundation — helping steward open governance and releases.
- ☁️ Veteran AWS Solutions Architect — designing resilient, cost-aware cloud systems.
- 🛡️ Long-time contributor to the OWASP application-security ecosystem.
- 🧑💼 Head of Engineering at Revocare.
A few projects you may have already used without realising it:
| Project | What it is | |
|---|---|---|
| 🛡️ OWASP ZAP | The world's most widely used web app security scanner | 15k+ ⭐ |
| 🚪 Apache APISIX | Cloud-Native API Gateway & AI Gateway | 16k+ ⭐ |
| ⚙️ zap-action-baseline | GitHub Action for ZAP baseline scans in CI | 350+ ⭐ |
| 📝 react-transcript-editor | BBC News Labs transcript correction UI | 600+ ⭐ |
| 🪪 NIMBLE identity-service | Identity for the EU H2020 NIMBLE platform |
- 🔍 line-segmentation-algorithm-to-gcp-vision — turns Google Vision's word-level OCR into line-level structure (Kotlin, 96⭐).
- 🏛️ bim-visualizer — browser-based BIM model viewer.
- 🪞 A tabletop hologram projector — yes, with mirrors and Pepper's-ghost optics. Write-up here.
I write occasionally on Medium — a mix of engineering practice, security tooling, and weekend curiosities:
- Automate Security Testing with ZAP and GitHub Actions
- APISIX as a high-performance micro-gateway
- Building a tabletop hologram projector
- Scrum for Weddings 💍
- Would you survive the Titanic? — a classic Kaggle adventure
Always happy to chat about API gateways, application security, multi-tenancy, or how to start contributing to OSS.