About Me
I'm a third-year Computer Science & Engineering undergraduate at the University of Moratuwa, specializing in Cyber Security. I build and deploy containerized DevOps pipelines, design databases, and work on database forensics — and I'm drawn to the security side of all of it: penetration testing, application security, and secure system design.
Outside of coursework, I'm President of the Mora Athletics Society and vice-captain of the university men's athletic team, competing as a 400m hurdler. I'm an AWS Academy graduate in Cloud Foundations and Microservices & CI/CD Pipeline Builder.
Tech Stack
Languages
Backend
Frontend
Database
DevOps & Cloud
Systems & Other
Projects
Large-scale software engineering group project for a smart agriculture platform. I containerized 14 microservices — a FastAPI backend, React dashboard, MQTT–Kafka bridge, Spark, and 6 ML inference services — authoring 27 Dockerfiles with multi-stage builds, and owned the CI/GitOps pipeline into ArgoCD.
A rail and road logistics platform built for a Database Systems group project. I designed the relational schema and ERD for 15+ entities, enforced business rules through triggers and procedures, built the Elysia.js backend API with JWT auth, and implemented the Store Manager Dashboard in Next.js.
An independent project: a FastAPI + PostgreSQL backend with Pydantic validation, API-key authentication, rate limiting, and structured logging. I own the full delivery pipeline — GitHub Actions CI running pytest and Trivy image scanning, versioned images to GHCR, deployed live on Render.
A Semester 5 cyber security group project building a digital forensics tool for MySQL. I built the utility adapter layer that parses raw forensic tool output into canonical models, and designed the SQLite persistence layer backing it.
A custom 8-register processor designed from scratch in VHDL and deployed to a Basys 3 FPGA. I extended a 4-bit base core into a 5-bit datapath with a dedicated ALU and hardware multiplier, and built the decoder for a 13-bit instruction set.
A cross-platform mobile app built for the SLIoT Competition, with real-time GPS bus tracking via Firebase, an animated and responsive UI, a booking interface, bus search, and profile management.
Hands-on offensive security work against the intentionally vulnerable OWASP Mutillidae II app: intercepting and manipulating HTTP traffic and exploiting SQL injection with Burp Suite.