Security
one-auth
An OAuth2 + JWT identity provider. Issues RS256 tokens and publishes JWKS so services can verify offline.
Spring Boot 3Java 17Spring SecurityOAuth2JWT (RS256)+5
Seattle, WA
Shrawan Adhikari
Software Engineer
I work on backend systems, mostly around platform, security and reliability.
- Working on
- Authentication, authorization, and the systems around them.
- Thinking about
- How to make software easier to operate over time.
- Learning
- More about distributed systems and observability.
Selected work
Projects
A small set of things I have built or helped build — most of them studies in the patterns underneath: identity, infrastructure, messaging, integration. Each one taught me more than it shipped.
Infrastructure · GCP
infra-setup
Unified Terraform for GKE, Artifact Registry, DNS, and federated GitHub Actions identity.
TerraformGCPAWSKubernetesGKE+4
Infrastructure · AWS
jenesisai-infra
AWS CloudFormation stacks that define the cloud footprint for the Jenesis AI platform.
AWSCloudFormationIAMVPCS3+1
Microservices
swa-proj3
A sample microservices stack with Spring Cloud, Kafka, Redis, and Kubernetes.
Spring BootSpring CloudSpring SecurityKafkaRedis+7
1 / 2
Other work
A few smaller things
CodeGrave
Personal blog — engineering notes, patterns, and the occasional mistake.
Leave Management
A leave-tracking app for small teams: requests, approvals, balances.
IAESTE CMS
A content management system for international student exchanges. Volunteer work.
Simple File Upload
A minimal drag-and-drop file upload demo — React front, Spring back.
Tools
What I work with
The list below is what I reach for often — grouped by what it does, not who makes it.
- Security & identity
- OAuth2 / OIDC, SAML, JWT, mTLS, Spring Security, Secrets management
- Languages
- Java, TypeScript, JavaScript, Python, Go, Groovy
- Backend & APIs
- Spring Boot, Spring Cloud, Node.js, GraphQL, REST, gRPC
- Frontend
- React, Angular, Tailwind CSS, RxJS, NgRx, D3.js
- Data & caching
- PostgreSQL, MySQL, Oracle, Cassandra, MongoDB, Redis, Elasticsearch
- Cloud & infra
- AWS, GCP, Docker, Kubernetes, Nginx, Linux
- Automation & delivery
- Jenkins, GitLab CI, GitHub Actions, SonarQube, Liquibase, SOAP UI
- Messaging & integration
- Kafka, RabbitMQ, Event-driven patterns, Webhooks
- Observability
- Grafana, Prometheus, Structured logs, Distributed tracing, Heap-dump analysis
- Practices
- System design and reviews, Security and research, Automation scripts, Scaling and cloud, Testing and integration, Agile / SAFe
Experience
Where I have been
A short arc, mostly in backend and platform work, with a long quiet bias toward security, reliability, and systems that wake up under load.
- 2023 – Present
Senior Software Engineer
Authentication Platform
- Working on the OAuth2 / OIDC platform that authenticates digital channels at serious scale.
- Most of the work sits where security meets performance, reliability, and release hygiene.
Spring BootOAuth2OIDCCassandraJenkinsSOAP UIGroovySonarQube - 2020 – 2022
Senior Software Engineer
R & D
- Built healthcare microservices and Angular UIs used across hundreds of healthcare organizations.
- Spent time on the platform around the code — refactors, test coverage, design reviews.
JavaSpringSpring CloudAngularD3.jsRedisOAuth2RxJSNgRx - 2018 – 2020
Software Engineer
Software Dev
- Shipped banking and healthcare applications held to Fintech compliance standards.
- Small team, steady output; security and CI/CD treated as defaults, not afterthoughts.
JavaSpringSpring SecurityAngularRabbitMQGitLabJenkins
Contact
Say hello
I don’t check this inbox often. A direct message on LinkedIn is the fastest way to reach me.
- shrawan-adhikari