At Blueflag Security, I architected Commit Journey, a distributed traceability service that correlates source commits with deployed container images across five SCM/CI-CD systems and two artifact registries. I own features end-to-end across data ingestion, normalization, analytics, APIs, and UI for a platform serving 56 enterprise tenants.
I built an Azure DevOps policy engine end-to-end after identifying the need on a customer call, and it was ready for the next prospect demo. I also owned the Backstage developer portal integration, including inverted-proxy support for self-hosted and firewall-restricted customers.
At Gojek (GoTo Group), I built an in-house Software Composition Analysis platform serving more than 60,000 repositories, replacing commercial tooling and saving $400K–$600K annually. I also built a vulnerability data pipeline and a repo ownership prediction service adopted across security teams.
At Facebook CIPHER Lab, I built a WhatsApp prototype implementing three techniques for tracing forwarded messages in end-to-end encrypted systems. I’ve also spoken at PGDays Hyderabad about PostgreSQL security.
