Backend engineer building systems for products that can't afford to fail.
I design and build security-critical infrastructure, real-time device platforms, and the mobile apps that sit on top of them. For the last nine years I've worked closely with founding teams, taking products from the first commit through to production.
📍 Sri Lanka (CET +3.5h) · 🌐 shehan.dev · 📫 info@shehan.dev
- Trust & signature infrastructure: PKI design, eIDAS-aligned digital signatures, HSM and EJBCA integration
- Real-time systems at scale: device fleet management, telemetry, video and alarming pipelines
- Product builds: from the API all the way to iOS and Android clients
Signum: a document-signing platform that produces PAdES-BASELINE-LT signatures on the customer's own PKI. Eight Spring Boot services behind a Next.js editor.
| Project | What it is |
|---|---|
| Video surveillance platform | Flutter app, Go provisioning and device discovery, self-hosted maps. Manages ~5,000 devices. |
| SIMS distribution management | Android field app and director dashboard that digitalised telco distribution (4.7× revenue lift). |
| SAAT | Time-tracking SaaS with Keycloak OAuth2 and a Flutter desktop client. |
| Provi | Multi-vendor device provisioning tool. |
| EzDeal | Offline-first van sales app with local sync. |
Backend
Mobile
Trust & identity
Data & infrastructure
Protocols: ONVIF · RTSP · MQTT · Bluetooth SPP
Geospatial: MapLibre · OpenMapTiles · Nominatim
- Constraints first. Compliance, latency and data residency shape the architecture, not the other way round.
- Observable from the first deploy. Metrics, traces and logs are there on day one.
- Boring technology, on purpose. Postgres, Kafka, Spring and Go over whatever is new this month.
- Written decisions. Architecture decision records so the next team can pick it up cleanly.
Co-founder of Signum & QuickPath Technologies · Open to backend and architecture engagements from Q4 2026 → shehan.dev