Gayan Shanaka Thejawansha

Technical Lead & Information Security Manager

Dubai, United Arab Emirates gthejawansha2@gmail.com +971 58 567 2580 linkedin.com/in/gayan-thejawansha/ github.com/Gayan-Thejawansha gayan-thejawansha.github.io/

Professional Summary

Technical Lead and Information Security Manager with more than seven years of experience leading the architecture, delivery, modernisation, and security of commerce, advertising technology, and telecommunications platforms. Combines hands-on backend, data, and infrastructure engineering with technical strategy, engineering mentoring, delivery ownership, cross-functional decision-making, and ISO/IEC 27001:2022-aligned security governance across cloud and bare-metal environments.

Core Competencies

Technical leadership & architecture

technical leadership, system architecture, engineering delivery, technical strategy, engineering mentoring, API design, data pipelines, Agile delivery, cross-functional decision-making, observability

Backend & data platforms

PHP, Symfony, Java, Spring Boot, Python, JavaScript, PostgreSQL, Redis, MySQL, Oracle Database, Elasticsearch

Cloud & platform engineering

Docker, Kubernetes, Linux, RHEL, Bash, Nginx, PHP-FPM, GitHub Actions, CI/CD, AWS, Hetzner

Security & governance

ISO/IEC 27001:2022, ISMS, risk assessment, risk treatment, internal auditing, access control, data privacy, infrastructure hardening, vulnerability management, business continuity

Professional Experience

Delupe A/S

Dubai, UAE | Delupe A/S, Denmark

Feb 2023 – Present

Information Security Manager

Oct 2025 – Present

Owns the strategic development and operation of the information security management system while continuing to provide technical leadership across engineering, infrastructure, risk management, and security governance.

  • Leads the design and operation of an ISO/IEC 27001:2022-aligned ISMS, including organizational context, security objectives, risk treatment, internal audit coordination, and management reporting.
  • Established a structured risk assessment and treatment register that translates technical findings into prioritized controls, accountable owners, and measurable remediation actions.
  • Automates and enforces security controls across Linux and Windows environments, focusing on access control, malware protection, encryption, privilege management, firewall configuration, and network auditing.
  • Coordinates engineering, information security governance, business continuity, data protection, and security awareness requirements across cloud and bare-metal infrastructure.
  • Developed server fleet energy monitoring and operational reporting to improve infrastructure efficiency and management visibility.

Technologies: ISO/IEC 27001:2022, ISMS, Risk management, Linux, Windows, Infrastructure security, Audit coordination

Technical Lead / Lead Software Engineer

Feb 2023 – Present

Leads technical strategy, architecture, and engineering delivery for commerce and advertising technology services, increasing merchant catalogue ingestion throughput by 5× and reducing feed processing latency by 70% across onboarding, reporting, and partner integrations.

  • Defines technical direction and leads architecture and implementation across merchant catalogue ingestion, reporting services, and Google and Microsoft Shopping integrations.
  • Leads sprint planning, technical decision-making, code reviews, engineering mentoring, and collaboration with product and commercial stakeholders.
  • Designs and oversees backend services and data workflows using PHP, Symfony, Python, JavaScript, PostgreSQL, and Redis across Docker and Kubernetes environments.
  • Introduced and enhanced GitHub Actions CI/CD pipelines, structured logging, metrics, and tracing practices to enable faster and safer production changes.
  • Diagnosed and resolved recurring Nginx and PHP-FPM container stability issues through profiling, configuration tuning, service hardening, and operational automation.
  • Developed data pipelines for campaign clicks, advertising costs, conversions, and revenue signals used by internal CPC optimisation systems.

Technologies: PHP, Symfony, Python, JavaScript, PostgreSQL, Redis, Docker, Kubernetes, Nginx, GitHub Actions, Observability

Dialog Axiata PLC

Colombo, Sri Lanka

Apr 2019 – Nov 2022

Senior Software Engineer

Jun 2021 – Nov 2022

Provided architecture, integration, middleware, security, and application roadmap leadership for charging platforms.

  • Designed technical solutions for system integration, middleware, security, and continuous service requirements across charging projects.
  • Developed and supported backend services with Java/Spring Boot, Python, PHP, JavaScript, MySQL, and Oracle Database in AWS, Kubernetes, and RHEL environments.
  • Contributed to application modernization, digital transformation, cloud migration, and microservices adoption for prepaid lending and charging platforms.
  • Translated stakeholder requirements and production insights into architecture decisions, technical roadmaps, and service improvement plans.

Technologies: Java, Spring Boot, Python, PHP, MySQL, Oracle Database, Kubernetes, AWS, RHEL, Bash

Software Engineer

Apr 2019 – May 2021

Delivered backend services, integrations, and modernization work for telecom charging and prepaid platforms.

  • Designed technical solutions using system performance, utilization, capacity, integrity, and technology roadmap requirements.
  • Contributed to an Online Charging System upgrade, supplementary application upgrades, and the implementation of a USSD gateway for fixed-line connections.
  • Developed APIs supporting prepaid fixed-line services and contributed to application modernization and digital transformation.
  • Built and operated Java, Spring, Python, PHP, MySQL, and Oracle services in Kubernetes and RHEL environments.

Technologies: Java, Spring, Python, PHP, JavaScript, MySQL, Oracle Database, Kubernetes, RHEL, Bash

Virtusa Pvt. Ltd.

Colombo, Sri Lanka

Nov 2017 – Mar 2018

Software Engineering Trainee

Nov 2017 – Mar 2018

Worked with an R&D team on internal governance platform interfaces, Java backend processes, workflow automation, and database changes.

  • Supported the Global Technology Office governance platform through interface development, Java backend processes, and database modifications.
  • Automated weekly and monthly workflows spanning frontend and backend processes.
  • Worked with Java, MySQL, OrientDB, and system automation tooling in a collaborative R&D environment.

Technologies: Java, MySQL, OrientDB, System automation

Selected Achievements

Certifications

Internal Auditor of Management Systems

T-CERT SYSTEM Academy · April 2026

Internal auditing of ISO 9001:2015 and ISO/IEC 27001:2022 management systems in accordance with ISO 19011:2018

Certificate No. TC-0063-26MK-0657

Education

Bachelor of Science in Engineering — Computer Engineering

University of Peradeniya, Sri Lanka

Nov 2014 – Feb 2019