Sanjeev Hegde

Azure Arc Kubernetes

• Worked on various key security improvements for Azure Arc Kubernetes
• Migrated various clients of CosmosDB, EventHub, Blob Storage and Service Bus to use azure managed identity instead of key based authentication. This involved working closely with dependant partner teams, handling dependencies during upgrades, updating client libraries, rewriting business logic. Overall this resulted in securing more than 450+ accounts across various regions of Azure Public and Sovereign clouds, improving the overall security.
• Identified various vulnerabilities and token validation logic that were missing and provided fix for improving the security.

Azure Data Transfter

• Worked on designing automation strategy and implementation for hardware layer, to support the transfer of data across Microsoft Public and sovereign cloud. I came up with approach of using simulated network for development and testing, built using exact simulators of each hardware devices used. This reduced development and testing time by more that 50%.

• Worked for GitHub Package Registry that helps clients store multiple build artifacts like containers, Maven, npm, NuGet and RubyGems packages. GitHub Registry easily handled around 2M packages upload and 40M packages download per day.
• Migrated npm, RubyGems and NuGet registries with 11k organizations and 6M+ package versions successfully from GitHub monolith to a separate microservice having its own database without any downtime. For this migration, designed the proxy, migrator logic and v2 registry low level designs.
• Performance testing was very crucial since we started adding more registries to an existing microservice that handled all registries CRUD operations. Designed and built a robust load test framework that can easily run 0-250 action jobs in parallel to create around 5-10 times of production load easily. We were also able to use this framework for optimizing and testing existing queries.
• Designed upstreaming flows for all these registries to allow customers to download public registry packages via GitHub packages.
• Collaborated with Site Reliability team to define Service level objectives(SLO) and Service level Agreements(SLA) for packages. This also helped us define multiple dashboards which depicted the availability of each registry in real time. We did multiple process improvements to improve the overall SLO

EZReach: Invoice Financing for MSME's built on Open Credit Enablement Network (OCEN) api specification

• Interacted with external Account aggregators, specification providers etc and translated requirements to detailed system interaction design and flows.
• Built core Lender service involving concurrency using reactor core.
• Built other core services like Serverless Authentication and Authorizers using Node.js, integrations with external service providers.

Tweedle: Crowdsourcing platform powered by blockchain

• Designed and developed user ethereum wallet and related backend services. Developed oauth2 integrations, user transaction signing module, websocket security, hashicorp vault integration and openshift deployment templates.
• Tweedle was made live for all employees with many successful campaigns with more than 400+ campaigns, with tokens as rewards for employees

• Digitized commodity trading process using blockchain technology.
• Live trading of oil and other soft commodities were tested with 30% increase in efficiency. The project was showcased in international petroleum week (London 2017) and is a separate startup now called Komgo.
• Collaborated with a team of developers from multiple banks across different geographical region in building backend application. I owned the design and development of backend implementation which integrated with quorum blockchain

• Developed backend services and UI components for a post trade platform and solved customer issues