Engineering leadership · Platform architecture · Information security

Engineering tomorrow’s platforms. Security in every layer.

Gayan Shanaka Thejawansha · Lead Software Engineer & Information Security Manager

An engineer at heart and hands-on technical leader connecting platform architecture, reliable delivery, and ISO 27001-aligned security.

Operating model Systems online
ENG

Engineer

Hands-on architecture, implementation, and production reliability.

LEAD

Technical lead

Direction, mentoring, delivery systems, and accountable execution.

SEC

Security manager

Risk-led governance translated into enforceable technical controls.

Experience

From implementation to technical direction.

A progression across backend engineering, platform architecture, operational reliability, and information-security leadership.

Feb 2023 – Present

Delupe A/S

Dubai, UAE · Denmark

Information Security Manager

Oct 2025 – Present

Owns the strategic development and operation of the information-security management system alongside a continuing engineering-leadership remit, including the identification and remediation of 17+ critical infrastructure risks.

  • Leads the design and operation of an ISO 27001:2022-aligned ISMS, including organizational context, security objectives, risk treatment, internal-audit coordination, and management reporting.
  • Established a structured assessment and treatment register that translates technical findings into prioritized controls and accountable actions.
  • Automates and enforces security controls across Linux and Windows environments, focusing on access control, malware protection, encryption, privilege management, firewalling, and network auditing.
  • Connects engineering, governance, business continuity, data protection, and security-awareness requirements across cloud and bare-metal infrastructure.
  • Developed server-fleet energy monitoring and operational reporting to improve infrastructure efficiency and management visibility.
  • ISO 27001:2022
  • ISMS
  • Risk management
  • Linux
  • Windows
  • Infrastructure security
  • Audit coordination

Lead Software Engineer / Tech Lead

Feb 2023 – Present

Leads architecture and delivery for commerce and ad-tech services, increasing merchant catalogue ingestion throughput 5x and reducing feed-processing latency 70% across onboarding, reporting, and partner integrations.

  • Directs architecture and implementation for merchant catalogue ingestion, reporting services, and Google and Microsoft Shopping integrations.
  • Builds backend services and data workflows with PHP/Symfony, Python, JavaScript, PostgreSQL, and Redis across Docker and Kubernetes environments.
  • Introduced and improved GitHub Actions delivery pipelines plus logging, metrics, and tracing practices for faster and safer production changes.
  • Diagnosed and resolved recurring Nginx and PHP-FPM container stability issues through profiling, configuration tuning, service hardening, and operational automation.
  • Developed data pipelines for campaign clicks, cost, conversion, and revenue signals used by in-house CPC optimization work.
  • Leads sprint planning, code review, technical decision-making, and mentoring while partnering with product and commercial stakeholders.
  • PHP
  • Symfony
  • Python
  • JavaScript
  • PostgreSQL
  • Redis
  • Docker
  • Kubernetes
  • Nginx
  • GitHub Actions
  • Observability

Apr 2019 – Nov 2022

Dialog Axiata PLC

Colombo, Sri Lanka

Senior Software Engineer

Jun 2021 – Nov 2022

Provided architecture, integration, middleware, security, and application-roadmap leadership for charging-related platforms.

  • Designed technical solutions for system integration, middleware, security, and continuous-service requirements across charging-related projects.
  • Developed and supported backend services with Java/Spring Boot, Python, PHP, JavaScript, MySQL, and Oracle Database in AWS, Kubernetes, and RHEL environments.
  • Contributed to application modernization, digitization, and cloudification initiatives for prepaid-loan and microservice platforms.
  • Converted stakeholder requirements and production insight into architecture decisions, roadmaps, and improvement plans.
  • Java
  • Spring Boot
  • Python
  • PHP
  • MySQL
  • Oracle Database
  • Kubernetes
  • AWS
  • RHEL
  • Bash

Software Engineer

Apr 2019 – Jun 2021

Delivered backend services, integrations, and modernization work for telecom charging and prepaid platforms.

  • Designed technical solutions using system performance, utilization, capacity, integrity, and technology-roadmap requirements.
  • Contributed to an Online Charging System upgrade, supplementary-application upgrades, and a USSD gateway for fixed connections.
  • Developed APIs supporting prepaid fixed-connection services and contributed to application modernization and digitization.
  • Built and operated Java, Spring, Python, PHP, MySQL, and Oracle services in Kubernetes and RHEL environments.
  • Java
  • Spring
  • Python
  • PHP
  • JavaScript
  • MySQL
  • Oracle Database
  • Kubernetes
  • RHEL
  • Bash

Nov 2017 – Mar 2018

Virtusa Pvt. Ltd

Colombo, Sri Lanka

Software Engineering Trainee

Nov 2017 – Mar 2018

Worked with an R&D team on internal governance-platform interfaces, Java processes, automation, and data changes.

  • Supported the Global Technology Office governance platform through interface work, Java backend processes, and database changes.
  • Automated weekly and monthly workflows spanning frontend and backend processes.
  • Worked with Java, MySQL, OrientDB, and system-automation tooling in a collaborative R&D environment.
  • Java
  • MySQL
  • OrientDB
  • System automation

Capabilities

Broad enough to connect the system. Deep enough to change it.

Capabilities are grouped by work delivered—not subjective percentage bars.

Architecture & leadership

System design, technical roadmaps, delivery planning, code review, mentoring, cross-functional alignment, and reliability.

  • System architecture
  • Technical leadership
  • API design
  • Data pipelines
  • Mentoring
  • Agile delivery
  • Observability

Backend & data platforms

Hands-on development of integrations, services, processing pipelines, and reporting systems.

  • PHP
  • Symfony
  • Java
  • Spring Boot
  • Python
  • JavaScript
  • PostgreSQL
  • Redis
  • MySQL
  • Oracle Database
  • Elasticsearch

Cloud & platform engineering

Containerized delivery, Linux operations, automation, performance tuning, and production support.

  • Docker
  • Kubernetes
  • Linux / RHEL
  • Bash
  • Nginx
  • PHP-FPM
  • GitHub Actions
  • CI/CD
  • AWS
  • Hetzner

Security & governance

Risk-led security management that connects governance requirements to enforceable technical controls.

  • ISO 27001:2022
  • ISMS
  • Risk assessment
  • Risk treatment
  • Internal audit
  • Access control
  • Data privacy
  • Infrastructure hardening
  • Vulnerability management

Engineering impact

Leading across architecture, delivery, and assurance.

Representative outcomes from hands-on engineering, technical leadership, platform modernization, and security management.

Commerce & ad-tech

Merchant data and reporting platform

Challenge
Scale merchant onboarding, catalogue ingestion, partner feeds, and campaign reporting while maintaining reliable operations.
Approach
Led service and data-flow design across PHP/Symfony, PostgreSQL, Redis, Docker/Kubernetes, partner APIs, CI/CD, and observability.
Outcome
Increased merchant catalogue throughput 5x and reduced feed-processing latency 70%, while improving release safety and production visibility.
  • Architecture
  • Data pipelines
  • Partner APIs
  • Reliability

Charging & integration

Telecom platform modernization

Challenge
Modernize business-critical prepaid and charging services while preserving capacity, integrity, and continuous availability.
Approach
Designed APIs, integrations, middleware, and cloudification work using Java/Spring, Python, PHP, Kubernetes, Oracle, MySQL, RHEL, and Bash.
Outcome
Supported charging-system upgrades, prepaid fixed services, USSD integration, application modernization, and microservice adoption.
  • System integration
  • Modernization
  • Cloudification
  • Telecom

Information security

Security governance to technical controls

Challenge
Establish risk-led governance for infrastructure and merchant data without separating policy from engineering reality.
Approach
Built an ISO 27001-aligned risk and treatment process, coordinated audit activity, and automated controls across Linux, Windows, cloud, and bare-metal systems.
Outcome
Identified and remediated 17+ critical infrastructure risks while establishing accountable treatment, stronger technical enforcement, and management-ready reporting.
  • ISMS
  • Risk treatment
  • Control automation
  • Audit readiness

Technical leadership

Engineering leadership as a delivery system

Challenge
Scale delivery and ownership across evolving platforms without losing implementation quality, reliability, or engineering context.
Approach
Combined hands-on architecture with sprint planning, technical decision-making, code review, mentoring, CI/CD, observability, and cross-functional alignment.
Outcome
Created shorter feedback loops, safer production changes, clearer technical direction, and a stronger engineering culture around shared ownership.
  • Technical leadership
  • Mentoring
  • CI/CD
  • Observability

Project archive

Curiosity, built into working systems.

About

An engineer’s detail. A leader’s view.

Illustrated portrait of Gayan surrounded by software, cloud, data, and AI systems

I work where software architecture, operational reliability, and information security meet. My background spans telecom charging systems, high-volume merchant data and reporting platforms, API integrations, containerized infrastructure, and security-management systems.

An engineer at heart, I stay close to implementation while leading technical direction: shaping architecture, reviewing code, improving delivery systems, mentoring engineers, translating risk into practical controls, and partnering with product and business stakeholders.

Credentials

Formal foundations.

Verified education and a single combined management-systems auditor credential.

T-CERT System Academy

Professional credential

Internal Auditor of Management Systems

T-CERT SYSTEM Academy

ISO 9001:2015 and ISO/IEC 27001:2022 according to ISO 19011:2018 · Apr 2026 · TC-0063-26MK-0657

View credential

Nov 2014 – Feb 2019

Bachelor of Science in Engineering

Computer Engineering

University of Peradeniya · Sri Lanka

University website

Contact

Let’s build what comes next.

Open to thoughtful conversations around technical leadership, platform engineering, and information security.

Dubai, United Arab Emirates