Headline

Full-Stack Engineer | Data Platforms & Access Control/Security | React, TypeScript, Python/Flask, PostgreSQL | Apache Superset, JWT/OAuth

About

I'm a full-stack software engineer with ~2 years of experience building data-intensive, multi-tenant web applications — with a particular focus on analytics platforms, access control, and security-hardened architecture. My core stack is React.js, TypeScript, Python/Flask, and PostgreSQL, and I've worked extensively with Apache Superset, ECharts.js, and AG Grid to turn complex datasets into actionable, visual experiences. At Appler, I've owned end-to-end features across two client engagements. On the analytics side, I designed UI-driven onboarding workflows and a scalable role-to-dashboard mapping system, and automated Row Level Security (RLS) across 100+ datasets — eliminating manual operational overhead and improving platform maintainability. On a multi-tenant data pipeline platform, I implemented authentication and session security — JWT verification, OAuth/PKCE login flows, and migrating session storage from localStorage to secure HTTP-only cookies to close an XSS token-theft vector — along with production-hardening safeguards like JWT secret validation and token revocation on sign-out. I thrive at the intersection of frontend craft, backend logic, and security — equally comfortable building clean, reusable UI components and hardening the systems underneath them. Currently exploring opportunities at product teams building data-rich platforms, where engineering quality and security are treated as first-class concerns. 📍 Open to remote, hybrid, or on-site roles across India.

Location

Bengaluru

AI stack

cursor

github copilot

langchain

openai

Work experience

Software Developer at Appler, Jun 2024 - Present · 2 yrs 1 mo, Panaji, Major Contributions : • Implemented authentication and session security for a multi-tenant data pipeline platform (Sensyze), including JWT verification, OAuth/PKCE login flows, and migration from localStorage to Secure HTTP-Only cookies to close an XSS token-theft vector. • Built production-hardening safeguards for the auth service, including JWT secret strength validation that blocks deployment on weak or default secrets, and a token revocation system enabling secure sign-out across password, magic-link, and social login flows. • Implemented a multi-tenant onboarding and admin module — team-scoped data isolation, role-based access control, and encrypted storage of third-party credentials (SMTP, OAuth secrets). • Streamlined Row Level Security (RLS) workflows by implementing bulk dataset automation (100+ datasets) and auto-sync mechanisms, ensuring existing rules remain current while reducing ongoing operational overhead. • Implemented a scalable, configurable role-to-dashboard mapping system based on established designs, replacing hard-coded configurations and improving maintainability and onboarding consistency. • Automated client onboarding, role creation, and access control by implementing UI-driven workflows and backend APIs in collaboration with senior engineers, eliminating manual database operations and reducing onboarding effort and errors.

Education

Master of Computer Applications - MCA, Computer Science, Sikkim Manipal University - Distance Education