Security & IAM

Building Enterprise Software & Intelligent AI Solutions

Security & IAM

Authentication, authorisation and data protection built in from the start — OAuth/JWT flows, role-based access, secrets management, and compliance-ready audit trails.

Most products past a certain size need the same things: authentication, fine-grained authorization, single sign-on with partners, user lifecycle, and an audit trail an auditor will accept. I've built all of it — including AegiSense, a self-hosted, multi-tenant Identity & Access Management platform that resolves role-, attribute- and relationship-based checks through a single policy decision point.

Whether you need a green-field auth design, a review of what you already have, or help replacing a per-seat SaaS with something you own, the approach is the same: security as part of the architecture, not a hardening pass at the end — with the compliance and observability to prove it.

OAuth2 / OIDC / JWT

RBAC & ABAC authorisation

Secrets & key management

API hardening & rate limiting

Audit trails & compliance

Threat modelling

Tools & technologies

OAuth2 / OpenID Connect SAML 2.0 / federation RBAC · ABAC · ReBAC Spring Authorization Server WebAuthn / passkeys (FIDO2) Google CEL policy conditions PostgreSQL row-level security Secrets & key management Rate limiting & API hardening Audit trails & governance

Track record

15+

Years shipping secure systems

3

Authorization models (RBAC / ABAC / ReBAC)

1

Self-hosted IAM platform built end to end

Related work

AegiSense — Multi-Tenant Identity & Authorization Platform
  • Spring Boot 4 · Java 25 · Spring Modulith

AegiSense — Multi-Tenant Identity & Authorization Platform

A self-hosted, multi-tenant Identity & Access Management platform that unifies authentication, RBAC/ABAC/ReBAC authorization, SSO and federation, user lifecycle and identity governance behind a single policy engine — for regulated, on-premise and high-scale environments.

Read case study
API Service Platform
  • Java 25 · Spring Boot 4 · Spring Security

API Service Platform

A multi-vendor identity, KYC and financial-verification platform for Indian financial institutions — three APIs behind a shared schema, architected, built, tested and deployed end to end as a single full-stack developer.

Read case study
about
15+
Years
Experienced

Why Clients Choose to Work With Me

Modern Technology Stack

I choose the right & future-proof technologies for long-term success.

Business-Focused Solutions

I focus on solving business challenges rather than simply writing code

Security First

Security is integrated into every layer including compliance and auditing

AI-Native Development

I build AI-powered applications using LLMs, RAG, Agentic AI, MCP, workflow automation

Own your identity layer. Let's design it right.

Book a call