4fc14b7HEAD -> mainMay 2024 — PresentChennai
Software Engineer@ Grootan Technologies
Java Backend Engineer with 2+ years building enterprise identity and authentication systems using Java, Spring Boot, Quarkus, and microservices. Specialize in IAM and security engineering with Keycloak, OAuth 2.0, and mTLS/PKI, with production ownership on Kubernetes-based healthcare platforms.
IBM · Identity Provider Platform (IDP) for IBM e-Health
- Led the 2-month technical onboarding of two interns, defining milestones, assigning tasks, conducting code reviews, and guiding them to independently take project tickets.
- Own the GitHub Actions CI/CD workflow, PR validation, Sonar checks, Helm chart and image publishing, scheduled smoke tests with Slack notifications.
- Manage Kubernetes and Helm changes across the services including deployment manifests, configuration, secrets, and pod/log troubleshooting.
- Diagnosed a production mTLS failure affecting service-to-service communication by tracing OpenTelemetry, Prometheus and application logs, identified a certificate configuration issue, and coordinated certificate rotation to restore connectivity.
- Write and present Architecture Decision Records to IBM architects, evaluating backend design alternatives and documenting technical trade-offs for implementation decisions.
- Implemented end-to-end mTLS for owned microservices, integrating PKI-issued certificates, IBM Secrets Manager, Kubernetes External Secrets, and Java keystores/truststores and HTTP clients to secure automated service-to-service communication across environments.
- Designed and implemented 50+ client-facing REST APIs for device management, identity history, usage tracking, and IDP access, including the Quarkus-based device management architecture.
- Develop and maintain 3 of 8 production Java microservices supporting secure identity verification, authentication, device management, and usage tracking for IBM e-health applications, built with Spring Boot and Quarkus and serving tens of thousands of users.
Migros · Consumer Identity Platform
- Implemented an omnichannel activation flow, supporting mobile push notifications, activation codes, and manual-letter verification.
- Redesigned the cluster-wide event propagation architecture using Infinispan as a distributed pub/sub layer, owning the architecture and flow design.
- Reduced the flow from 4 components to 2, removing the intermediary failure points from the previous socket.io-based setup.
- Redesigned real-time authentication event delivery from 1-second client polling to Server-Sent Events served directly from the IdP, cutting event delivery latency to near-immediate.
Product PoC · ShiftPen, multi-signer digital e-signing platform
- Delivered the backend ahead of a 4-week deadline in a 3-engineer team, enabling stakeholder demos and first-client onboarding across workflow, provider integration, secure signing, and document lifecycle management.
- Implemented OTP-based signer re-authentication on session expiry, ensuring signer identity is re-verified before continuing the signing flow.
- Built the core multi-signer document signing workflow on Java, Spring Boot, and Flowable, coordinating multiple signers and the interactions with external signing providers.
- Designed and implemented a provider-agnostic e-signature architecture, decoupling the core signing workflow from third-party APIs and enabling multiple providers to integrate through a common interface.
GROOT OF THE QUARTER – Q3 2024. Recognized for driving the SSE-based authentication redesign, reducing the latency and system size by two components.
