Curriculum vitae

Gayan Shanaka Thejawansha

Lead Software Engineer & Information Security Manager

Dubai, United Arab Emirates gthejawansha2@gmail.com +971 58 567 2580 linkedin.com/in/gayan-thejawansha/ github.com/Gayan-Thejawansha gayan-thejawansha.github.io/

Professional Summary

Lead Software Engineer and Information Security Manager with 7+ years of full-time experience designing, modernizing, and securing commerce, ad-tech, and telecom platforms. Combines hands-on backend and infrastructure engineering with technical leadership, delivery ownership, and ISO 27001-aligned security governance across cloud and bare-metal environments.

Core Competencies

Architecture & leadership

System architecture, Technical leadership, API design, Data pipelines, Mentoring, Agile delivery, Observability

Backend & data platforms

PHP, Symfony, Java, Spring Boot, Python, JavaScript, PostgreSQL, Redis, MySQL, Oracle Database, Elasticsearch

Cloud & platform engineering

Docker, Kubernetes, Linux / RHEL, Bash, Nginx, PHP-FPM, GitHub Actions, CI/CD, AWS, Hetzner

Security & governance

ISO 27001:2022, ISMS, Risk assessment, Risk treatment, Internal audit, Access control, Data privacy, Infrastructure hardening, Vulnerability management

Professional Experience

Delupe A/S

Dubai, UAE · Denmark

Feb 2023 – Present

Information Security Manager

Oct 2025 – Present

Owns the strategic development and operation of the information-security management system alongside a continuing engineering-leadership remit, including the identification and remediation of 17+ critical infrastructure risks.

  • Leads the design and operation of an ISO 27001:2022-aligned ISMS, including organizational context, security objectives, risk treatment, internal-audit coordination, and management reporting.
  • Established a structured assessment and treatment register that translates technical findings into prioritized controls and accountable actions.
  • Automates and enforces security controls across Linux and Windows environments, focusing on access control, malware protection, encryption, privilege management, firewalling, and network auditing.
  • Connects engineering, governance, business continuity, data protection, and security-awareness requirements across cloud and bare-metal infrastructure.
  • Developed server-fleet energy monitoring and operational reporting to improve infrastructure efficiency and management visibility.

Technologies: ISO 27001:2022, ISMS, Risk management, Linux, Windows, Infrastructure security, Audit coordination

Lead Software Engineer / Tech Lead

Feb 2023 – Present

Leads architecture and delivery for commerce and ad-tech services, increasing merchant catalogue ingestion throughput 5x and reducing feed-processing latency 70% across onboarding, reporting, and partner integrations.

  • Directs architecture and implementation for merchant catalogue ingestion, reporting services, and Google and Microsoft Shopping integrations.
  • Builds backend services and data workflows with PHP/Symfony, Python, JavaScript, PostgreSQL, and Redis across Docker and Kubernetes environments.
  • Introduced and improved GitHub Actions delivery pipelines plus logging, metrics, and tracing practices for faster and safer production changes.
  • Diagnosed and resolved recurring Nginx and PHP-FPM container stability issues through profiling, configuration tuning, service hardening, and operational automation.
  • Developed data pipelines for campaign clicks, cost, conversion, and revenue signals used by in-house CPC optimization work.
  • Leads sprint planning, code review, technical decision-making, and mentoring while partnering with product and commercial stakeholders.

Technologies: PHP, Symfony, Python, JavaScript, PostgreSQL, Redis, Docker, Kubernetes, Nginx, GitHub Actions, Observability

Dialog Axiata PLC

Colombo, Sri Lanka

Apr 2019 – Nov 2022

Senior Software Engineer

Jun 2021 – Nov 2022

Provided architecture, integration, middleware, security, and application-roadmap leadership for charging-related platforms.

  • Designed technical solutions for system integration, middleware, security, and continuous-service requirements across charging-related projects.
  • Developed and supported backend services with Java/Spring Boot, Python, PHP, JavaScript, MySQL, and Oracle Database in AWS, Kubernetes, and RHEL environments.
  • Contributed to application modernization, digitization, and cloudification initiatives for prepaid-loan and microservice platforms.
  • Converted stakeholder requirements and production insight into architecture decisions, roadmaps, and improvement plans.

Technologies: Java, Spring Boot, Python, PHP, MySQL, Oracle Database, Kubernetes, AWS, RHEL, Bash

Software Engineer

Apr 2019 – Jun 2021

Delivered backend services, integrations, and modernization work for telecom charging and prepaid platforms.

  • Designed technical solutions using system performance, utilization, capacity, integrity, and technology-roadmap requirements.
  • Contributed to an Online Charging System upgrade, supplementary-application upgrades, and a USSD gateway for fixed connections.
  • Developed APIs supporting prepaid fixed-connection services and contributed to application modernization and digitization.
  • Built and operated Java, Spring, Python, PHP, MySQL, and Oracle services in Kubernetes and RHEL environments.

Technologies: Java, Spring, Python, PHP, JavaScript, MySQL, Oracle Database, Kubernetes, RHEL, Bash

Virtusa Pvt. Ltd

Colombo, Sri Lanka

Nov 2017 – Mar 2018

Software Engineering Trainee

Nov 2017 – Mar 2018

Worked with an R&D team on internal governance-platform interfaces, Java processes, automation, and data changes.

  • Supported the Global Technology Office governance platform through interface work, Java backend processes, and database changes.
  • Automated weekly and monthly workflows spanning frontend and backend processes.
  • Worked with Java, MySQL, OrientDB, and system-automation tooling in a collaborative R&D environment.

Technologies: Java, MySQL, OrientDB, System automation

Selected Impact Projects

Merchant data and reporting platform — Commerce & ad-tech

Led service and data-flow design across PHP/Symfony, PostgreSQL, Redis, Docker/Kubernetes, partner APIs, CI/CD, and observability. Increased merchant catalogue throughput 5x and reduced feed-processing latency 70%, while improving release safety and production visibility.

Telecom platform modernization — Charging & integration

Designed APIs, integrations, middleware, and cloudification work using Java/Spring, Python, PHP, Kubernetes, Oracle, MySQL, RHEL, and Bash. Supported charging-system upgrades, prepaid fixed services, USSD integration, application modernization, and microservice adoption.

Security governance to technical controls — Information security

Built an ISO 27001-aligned risk and treatment process, coordinated audit activity, and automated controls across Linux, Windows, cloud, and bare-metal systems. Identified and remediated 17+ critical infrastructure risks while establishing accountable treatment, stronger technical enforcement, and management-ready reporting.

Engineering leadership as a delivery system — Technical leadership

Combined hands-on architecture with sprint planning, technical decision-making, code review, mentoring, CI/CD, observability, and cross-functional alignment. Created shorter feedback loops, safer production changes, clearer technical direction, and a stronger engineering culture around shared ownership.

Certifications

Internal Auditor of Management Systems

T-CERT SYSTEM Academy. ISO 9001:2015 and ISO/IEC 27001:2022 according to ISO 19011:2018 · Apr 2026 · TC-0063-26MK-0657

Education

Bachelor of Science in Engineering — Computer Engineering

University of Peradeniya, Sri Lanka

Nov 2014 – Feb 2019