Experience

Work

Associate Technical Lead

WSO2 · Feb 2026 – Present · Colombo, Sri Lanka

• Maintainer of OpenChoreo, a CNCF Sandbox project and an open-source, ready-to-use internal developer platform.
• Contributed to the API gateway architecture of OpenChoreo, designing a modular gateway layer that can integrate any gateway compatible with the Kubernetes Gateway API.

Senior Software Engineer

WSO2 · Feb 2024 – Feb 2026 · Colombo, Sri Lanka

• Contributed to the R&D of WSO2 Choreo, later renamed WSO2 Developer Platform, an AI internal developer platform as a service.
• Infrastructure engineering across ingress and API gateways, traffic management, and Kubernetes networking, with Envoy, NGINX, OpenResty, Lua, Cilium, KEDA, Kubernetes, and Go.
• Operational expertise in running multi-region, multi-cloud distributed systems and large-scale, highly available Kubernetes clusters.

Software Engineer

WSO2 · May 2022 – Feb 2024 · Colombo, Sri Lanka

• Contributed to the R&D of Choreo Connect, a cloud-native API gateway built on Envoy proxy, working across custom filter development, the Envoy data plane, and the xDS control plane.
• One of the initial contributors to WSO2 APK, later renamed WSO2 Kubernetes Gateway, a next-generation Kubernetes-native API gateway built on Envoy proxy.

Software Engineering Intern

WSO2 · Oct 2020 – Mar 2021 · Colombo, Sri Lanka

• Added WebSocket throttling and analytics support to WSO2 API Micro Gateway (later Choreo Connect), an API gateway built on Envoy proxy.
• Wrote the C++ HTTP filter that captures WebSocket frames in the upgrade filter chain, publishes frame metadata over a bi-directional gRPC stream, and enforces throttling in the proxy itself.
• Built the gRPC server backing it in the Enforcer, integrating with WSO2 Traffic Manager over Thrift to publish throttling data and receive throttle decisions back as JMS events.
• Read more about the project

Open source programs

LFX Mentorship 2026, Term 1

kgateway · Mar 2026 – May 2026 · Mentored by Tim Flannagan and Omar Hammami

• Implemented HTTP fault injection (delay, abort, and response rate limiting) in the kgateway TrafficPolicy API, translated down to the Envoy fault filter.
• The implementation merged as kgateway-dev/kgateway#13730.
• Wrote up the experience for the kgateway blog, republished on the CNCF blog.
• Read more about the project

Google Summer of Code 2021

Red Hat 3scale · Jun 2021 – Aug 2021 · Mentored by Alejandro Martinez Ruiz

• Built an in-proxy authorization cache for Envoy as Proxy-Wasm extensions in Rust, cutting the external authorization call out of the hot path for every request.
• Co-authored a two-part series on Red Hat Developer covering the design and the implementation.
• Read more about the project

Certifications

Certified Kubernetes Security Specialist (CKS)	Mar 2026 · Credential
Certified Kubernetes Application Developer (CKAD)	Mar 2024 · Credential
Certified Kubernetes Administrator (CKA)	Jul 2023 · Credential

Education

BSc (Hons) in Computer Science and Engineering

University of Moratuwa, Sri Lanka · 2017 – 2022

• Department of Computer Science and Engineering.
• Co-authored SiTSE: Sinhala Text Simplification Dataset and Evaluation, published in ACM Transactions on Asian and Low-Resource Language Information Processing.