Building secure, scalable systems — one commit at a time. (And reverting them twice.)
Senior Software Engineer with 10+ years of experience designing and building scalable microservices, API gateways, and security libraries in Java. Active open-source contributor under the Eclipse ECSP organization with 538+ contributions in the last year. Specializes in distributed systems architecture, JWT/OAuth2 security, and cloud-native deployments on Kubernetes.
| 🏷️ Category | 🔧 Technologies |
|---|---|
| 💻 Languages | Java (17 / 21 / 25), SQL |
| 🌱 Frameworks | Spring Boot 4.x, Spring Cloud Gateway, Spring Framework 7.x, Spring Security |
| 📨 Messaging | Apache Kafka |
| 🗄️ Databases | PostgreSQL, MongoDB, Redis |
| 🔐 Security | JWT, OAuth2, JWKS, RSA/EC key management, nimbus-jose-jwt |
| ☁️ DevOps & Cloud | Docker, Kubernetes, Helm, AWS, Jenkins, GitHub Actions, CI/CD |
| 🧪 Build & Quality | Maven, Checkstyle, SonarCloud, JUnit 5, Mockito, Testcontainers |
| 📊 Observability | Micrometer, Logback, SLF4J |
| 🤝 Practices | Agile, System Design, Performance Optimization, Security Best Practices |
🚦 ecsp/api-gateway — The Bouncer of My Microservices Club
A Spring Cloud Gateway-based API Gateway serving as the single entry point for microservices in the Eclipse ECSP ecosystem.
- 🏗️ Architected support for static and dynamic routing via OpenAPI annotations stored in PostgreSQL
- 🔐 Implemented OAuth2/JWT token validation to authorize client requests at the gateway edge
- 📡 Built request fan-out — distributing a single request to multiple downstream services
- ⚡ Integrated Redis-backed rate limiting, circuit breakers, and response caching
- ☸️ Deployed via Kubernetes Helm charts (
ecsp-helm-charts) - 📦 54 releases (latest:
1.5.4) · 3 ⭐ · 6 🍴 · 7 contributors
Java 21 Spring Boot 4.x Spring Cloud Gateway PostgreSQL MongoDB Redis Docker Kubernetes
🕵️ ecsp/token-validator — The JWT Police (Zero Tolerance for Bad Tokens)
A reusable Java library for validating JWT tokens and managing public keys across microservices.
- 🧩 Designed a fully decomposable validation pipeline — every stage replaceable via interfaces (parsing → algorithm → signature → claims → scope)
- 🔄 Implemented JWKS endpoint integration with in-memory LRU key cache, per-issuer refresh, and exponential-backoff retry
- 🛡️ Supports RSA and EC public keys, PEM loading, algorithm whitelisting (
alg=noneunconditionally denied) - ⏱️ Validates
exp,nbf,isswith configurable clock-skew tolerance; optional per-issueraudvalidation - ⚙️ Spring Boot auto-configuration with
@ConditionalOnMissingBeanoverrides at every step - 📈 Integrated Micrometer metrics with fully configurable
TokenValidatorMetricsConfig - 🔗 Currently integrating into api-gateway via PR #258
Java 25 Spring Boot 4.x Spring Framework 7.x nimbus-jose-jwt Maven
📅 Contributions (last 12 months) ████████████████████ 538+
💾 Commits ████████████████░░░░ 82%
🔃 Pull Requests ██░░░░░░░░░░░░░░░░░░ 11%
👀 Code Review █░░░░░░░░░░░░░░░░░░░ 4%
🐛 Issues ░░░░░░░░░░░░░░░░░░░░ 3%
🏆 Achievements: Pull Shark ×2 · YOLO 🌐 Contributed to 22+ repositories across the Eclipse ECSP organization
Previously a core contributor to MOSIP — Modular Open Source Identity Platform, an open-source digital identity platform adopted by governments worldwide. Served on the core team responsible for creating building blocks for platform template processing (freemarker, velocity), master data management, file storage (HDFS), sync-master data and other various libraries. Contributed to the design and implementation of the MOSIP Identity System used in national ID programs across multiple countries.