Engineering leadership · Platform architecture · Information security

Engineering tomorrow’s platforms. Security in every layer.

Gayan Shanaka Thejawansha · Lead Software Engineer & Information Security Manager

An engineer at heart and hands-on technical leader connecting platform architecture, reliable delivery, and ISO/IEC 27001:2022-aligned security.

Operating model Systems online
ENG

Engineer

Hands-on architecture, implementation, and production reliability.

LEAD

Technical lead

Direction, mentoring, delivery systems, and accountable execution.

SEC

Security manager

Risk-led governance translated into enforceable technical controls.

Experience

From implementation to technical direction.

A progression across backend engineering, platform architecture, operational reliability, and information-security leadership.

Feb 2023 – Present

Delupe A/S

Dubai, UAE | Delupe A/S, Denmark

Information Security Manager

Oct 2025 – Present

Owns the strategic development and operation of the information security management system while continuing to provide technical leadership across engineering, infrastructure, risk management, and security governance.

  • Leads the design and operation of an ISO/IEC 27001:2022-aligned ISMS, including organizational context, security objectives, risk treatment, internal audit coordination, and management reporting.
  • Established a structured risk assessment and treatment register that translates technical findings into prioritized controls, accountable owners, and measurable remediation actions.
  • Automates and enforces security controls across Linux and Windows environments, focusing on access control, malware protection, encryption, privilege management, firewall configuration, and network auditing.
  • Coordinates engineering, information security governance, business continuity, data protection, and security awareness requirements across cloud and bare-metal infrastructure.
  • Developed server fleet energy monitoring and operational reporting to improve infrastructure efficiency and management visibility.
  • ISO/IEC 27001:2022
  • ISMS
  • Risk management
  • Linux
  • Windows
  • Infrastructure security
  • Audit coordination

Technical Lead / Lead Software Engineer

Feb 2023 – Present

Leads technical strategy, architecture, and engineering delivery for commerce and advertising technology services, increasing merchant catalogue ingestion throughput by 5× and reducing feed processing latency by 70% across onboarding, reporting, and partner integrations.

  • Defines technical direction and leads architecture and implementation across merchant catalogue ingestion, reporting services, and Google and Microsoft Shopping integrations.
  • Leads sprint planning, technical decision-making, code reviews, engineering mentoring, and collaboration with product and commercial stakeholders.
  • Designs and oversees backend services and data workflows using PHP, Symfony, Python, JavaScript, PostgreSQL, and Redis across Docker and Kubernetes environments.
  • Introduced and enhanced GitHub Actions CI/CD pipelines, structured logging, metrics, and tracing practices to enable faster and safer production changes.
  • Diagnosed and resolved recurring Nginx and PHP-FPM container stability issues through profiling, configuration tuning, service hardening, and operational automation.
  • Developed data pipelines for campaign clicks, advertising costs, conversions, and revenue signals used by internal CPC optimisation systems.
  • PHP
  • Symfony
  • Python
  • JavaScript
  • PostgreSQL
  • Redis
  • Docker
  • Kubernetes
  • Nginx
  • GitHub Actions
  • Observability

Apr 2019 – Nov 2022

Dialog Axiata PLC

Colombo, Sri Lanka

Senior Software Engineer

Jun 2021 – Nov 2022

Provided architecture, integration, middleware, security, and application roadmap leadership for charging platforms.

  • Designed technical solutions for system integration, middleware, security, and continuous service requirements across charging projects.
  • Developed and supported backend services with Java/Spring Boot, Python, PHP, JavaScript, MySQL, and Oracle Database in AWS, Kubernetes, and RHEL environments.
  • Contributed to application modernization, digital transformation, cloud migration, and microservices adoption for prepaid lending and charging platforms.
  • Translated stakeholder requirements and production insights into architecture decisions, technical roadmaps, and service improvement plans.
  • Java
  • Spring Boot
  • Python
  • PHP
  • MySQL
  • Oracle Database
  • Kubernetes
  • AWS
  • RHEL
  • Bash

Software Engineer

Apr 2019 – May 2021

Delivered backend services, integrations, and modernization work for telecom charging and prepaid platforms.

  • Designed technical solutions using system performance, utilization, capacity, integrity, and technology roadmap requirements.
  • Contributed to an Online Charging System upgrade, supplementary application upgrades, and the implementation of a USSD gateway for fixed-line connections.
  • Developed APIs supporting prepaid fixed-line services and contributed to application modernization and digital transformation.
  • Built and operated Java, Spring, Python, PHP, MySQL, and Oracle services in Kubernetes and RHEL environments.
  • Java
  • Spring
  • Python
  • PHP
  • JavaScript
  • MySQL
  • Oracle Database
  • Kubernetes
  • RHEL
  • Bash

Nov 2017 – Mar 2018

Virtusa Pvt. Ltd.

Colombo, Sri Lanka

Software Engineering Trainee

Nov 2017 – Mar 2018

Worked with an R&D team on internal governance platform interfaces, Java backend processes, workflow automation, and database changes.

  • Supported the Global Technology Office governance platform through interface development, Java backend processes, and database modifications.
  • Automated weekly and monthly workflows spanning frontend and backend processes.
  • Worked with Java, MySQL, OrientDB, and system automation tooling in a collaborative R&D environment.
  • Java
  • MySQL
  • OrientDB
  • System automation

Capabilities

Broad enough to connect the system. Deep enough to change it.

Capabilities are grouped by work delivered—not subjective percentage bars.

Technical leadership & architecture

System design, technical roadmaps, delivery planning, code review, mentoring, cross-functional alignment, and reliability.

  • technical leadership
  • system architecture
  • engineering delivery
  • technical strategy
  • engineering mentoring
  • API design
  • data pipelines
  • Agile delivery
  • cross-functional decision-making
  • observability

Backend & data platforms

Hands-on development of integrations, services, processing pipelines, and reporting systems.

  • PHP
  • Symfony
  • Java
  • Spring Boot
  • Python
  • JavaScript
  • PostgreSQL
  • Redis
  • MySQL
  • Oracle Database
  • Elasticsearch

Cloud & platform engineering

Containerized delivery, Linux operations, automation, performance tuning, and production support.

  • Docker
  • Kubernetes
  • Linux, RHEL
  • Bash
  • Nginx
  • PHP-FPM
  • GitHub Actions
  • CI/CD
  • AWS
  • Hetzner

Security & governance

Risk-led security management that connects governance requirements to enforceable technical controls.

  • ISO/IEC 27001:2022
  • ISMS
  • risk assessment
  • risk treatment
  • internal auditing
  • access control
  • data privacy
  • infrastructure hardening
  • vulnerability management
  • business continuity

Engineering impact

Leading across architecture, delivery, and assurance.

Representative outcomes from hands-on engineering, technical leadership, platform modernization, and security management.

Commerce & ad-tech

Merchant data and reporting platform

Challenge
Scale merchant onboarding, catalogue ingestion, partner feeds, and campaign reporting while maintaining reliable operations.
Approach
Led service and data-flow design across PHP/Symfony, PostgreSQL, Redis, Docker/Kubernetes, partner APIs, CI/CD, and observability.
Outcome
Increased merchant catalogue throughput by 5× and reduced feed processing latency by 70%, while improving release safety and production visibility.
  • Architecture
  • Data pipelines
  • Partner APIs
  • Reliability

Charging & integration

Telecom platform modernization

Challenge
Modernize business-critical prepaid and charging services while preserving capacity, integrity, and continuous availability.
Approach
Designed APIs, integrations, middleware, and cloud migration work using Java/Spring, Python, PHP, Kubernetes, Oracle, MySQL, RHEL, and Bash.
Outcome
Supported charging-system upgrades, prepaid fixed services, USSD integration, application modernization, and microservice adoption.
  • System integration
  • Modernization
  • Cloud migration
  • Telecom

Information security

Security governance to technical controls

Challenge
Establish risk-led governance for infrastructure and merchant data without separating policy from engineering reality.
Approach
Built an ISO/IEC 27001:2022-aligned risk and treatment process, coordinated audit activity, and automated controls across Linux, Windows, cloud, and bare-metal systems.
Outcome
Identified and remediated 17+ critical infrastructure risks while establishing accountable treatment, stronger technical enforcement, and management-ready reporting.
  • ISMS
  • Risk treatment
  • Control automation
  • Audit readiness

Technical leadership

Engineering leadership as a delivery system

Challenge
Scale delivery and ownership across evolving platforms without losing implementation quality, reliability, or engineering context.
Approach
Combined hands-on architecture with sprint planning, technical decision-making, code review, mentoring, CI/CD, observability, and cross-functional alignment.
Outcome
Created shorter feedback loops, safer production changes, clearer technical direction, and a stronger engineering culture around shared ownership.
  • Technical leadership
  • Mentoring
  • CI/CD
  • Observability

Project archive

Curiosity, built into working systems.

About

An engineer’s detail. A leader’s view.

Illustrated portrait of Gayan surrounded by software, cloud, data, and AI systems

I work where software architecture, operational reliability, and information security meet. My background spans telecom charging systems, high-volume merchant data and reporting platforms, API integrations, containerized infrastructure, and security-management systems.

An engineer at heart, I stay close to implementation while leading technical direction: shaping architecture, reviewing code, improving delivery systems, mentoring engineers, translating risk into practical controls, and partnering with product and business stakeholders.

Credentials

Formal foundations.

Verified education, academic records, and a management-systems auditor credential.

T-CERT System Academy

Professional credential

Internal Auditor of Management Systems

T-CERT SYSTEM Academy · April 2026

Internal auditing of ISO 9001:2015 and ISO/IEC 27001:2022 management systems in accordance with ISO 19011:2018

Certificate No. TC-0063-26MK-0657

View credential

Contact

Let’s build what comes next.

Open to thoughtful conversations around technical leadership, platform engineering, and information security.

Dubai, United Arab Emirates