Walmart Global Tech · Jul 2026 – present · Enterprise
AccessIntel — HR data authorization control plane
Control plane for Walmart’s centralised, XACML-style authorization platform for HR and people data — who may see or act on employee data, for 15+ business-critical consuming applications across 3 production regions. Technical lead; zero to staging in about five weeks; production rollout in progress.
- Java 21 policy decision point with an OPA/Rego sidecar, a policy information point for subject/organisation attributes, and Kafka + change-feed ingest keeping Cosmos DB in step with the HR system of record.
- Real-time detection: OPA decision-log sink + a second Kafka consumer group cut decision-to-alert latency from a two-hour batch to under a minute.
- Multi-issuer PingFederate OIDC validation, default-deny route authorization, AD nested-group enrolment with single-flight lookups and negative caching; 12 read-only Spring AI MCP tools behind a fail-closed audit gate.
- 30+ ADRs and a 244-test suite that runs fully offline against a Keycloak realm shaped like PingFederate and a Cosmos emulator.
Java 21Spring BootOPA/RegoPingFederate OIDCKafkaCosmos DBBigQueryReactSpring AI MCP
Walmart Global Tech · Jun 2025 – Jul 2026 · Enterprise
Sage — governed agentic analytics
Walmart’s first governed agentic-analytics platform (sage.walmart.com, Azure/AKS + BigQuery on GCP): AI agents turn natural language into row-, column- and attribute-level-secured dashboards. Architected and shipped to production as the sole engineer — first release in ~5 months, ~186K lines of code, 60+ ADRs.
- Five-layer security (OAuth2/OIDC → RBAC → RLS → CLS → ALS) enforced on every query by a Data Firewall that parses generated SQL into an AST and rewrites it per viewer.
- MCP server exposing 31 certified query tools with client allow-listing, so agents run analytics under the same access controls as humans; LangGraph NL-to-SQL built behind a feature flag.
- Java 21 query engine (Virtual Threads, 3-tier BigQuery cache, in-flight dedup): dashboard loads ~20–30s → ~2–3s.
- Dashboard Builder with 26 widget types, event-driven pub/sub, cascading variables with topological resolution.
- Strict two-token identity model (external-IdP bearer, never minted internally; backend context JWT that can never substitute for it); OpenTelemetry golden signals, Grafana alerting, Langfuse tracing with PII masking.
Java 21Spring BootPythonFastAPIsqlglotReact 19BigQueryMCPLangGraphOpenTelemetry
Walmart Global Tech · ULearn International · 2025 · Enterprise
HackerOne bug-bounty remediation
An unplanned security programme: 23 in-scope HackerOne + Snyk findings (15 Critical, 8 High) across 7 microservices, closed under a 3-week SLA with zero production incidents.
- Re-architected the JWT model: single mint point, server-side RBAC, no trust in client-supplied parameters.
- Stood up an 882-assertion SQL-injection regression suite, retained as a permanent CI gate.
JavaSpring SecurityJWTSnykCI gates
Walmart Global Tech · 2022 – 2025 · Enterprise
OIDC SSO for Walmart Mexico (DCP)
OIDC-compliant single sign-on for the Digital Connections Program across Walmart International markets — serving 4M+ customers at an 82% login rate.
- Identity, profile and membership initiatives across Mexico, Canada and Chile.
- Chaired the Operational and Engineering Excellence Council — a weekly DORA-style scorecard across 20+ services — and the daily Change Council.
- Weekly Cloud Cost Council: traffic-based right-sizing and environment decommissioning cut the portfolio’s cloud run rate by 12–20% (roughly $100K a year).
OIDCOAuth2PingFederateSpring BootKubernetes
Walmart Canada · 2023 – 2024 · Enterprise
Walmart Compliance Adapter (Bill C-64)
Privacy-compliance adapter for Walmart Canada’s Bill C-64 Phase 3, integrating OneTrust for centralised consent management.
- Owned Phase 3 delivery end to end; wrote the internal whitepaper on the Privacy Compliance Adapter pattern.
JavaSpring BootOneTrustPrivacy engineering
Applied Materials · 2020 – 2022 · Enterprise
Software Development Accelerator CoE
Code generators, cloud-native and low-code practices, tech-stack standardisation and framework adoption across teams.
Code generationCloud-nativeLow-code
Cognizant · Apple · 2016 – 2020 · Enterprise
Apple customer systems
15+ global projects across Apple’s customer systems — recruitment, contact-centre and internal tooling — combining delivery leadership with daily hands-on coding.
- Brought Apple’s workflow-based recruitment platform out of the red zone: fixed architectural and project-structure issues, worked 1:1 with Apple architects, then owned end-to-end delivery of six modules (Java 8, Spring Boot, MongoDB, Elasticsearch, ReactJS/AngularJS).
- Architected a troubleshooting-intelligence dashboard from scratch to production — 100% accessible, 80% unit-test coverage plus 200+ Selenium UI tests; consistent excellent QBR ratings.
- Turned around an internationalisation tool plagued by performance and memory issues (jMap/jStack/VisualVM/Eclipse MAT profiling) to production grade with zero-defect feature releases; also debugged cluster-performance issues in a visual call-centre scripting tool.
- Built a Siri-integrated audio-streaming proof of concept (Spring Boot + RTP backend, Objective-C client) aimed at replacing analog radio in Apple stores, and an account-automation tool with six modules used for administration, forecasting and billing.
Java 8Spring BootMongoDBElasticsearchReactJSAngularJSRESTEasyObjective-CJenkinsAnsible
Custologix Solutions · 2015 – 2016 · Enterprise
Cloud retail ERP for a Mexican retailer
Architected and built a cloud ERP from scratch — accounting, inventory, sales orders, receivables, purchasing, payables, call centre, point-of-sale and eCommerce — with real-time drill-down reporting for management; travelled to Mexico and the US quarterly to gather requirements.
- Built and mentored the technical team; developed the JavaFX POS client; also wrote a socket library integrating electronic-shelf-label hardware for the company’s internal product (first release in 3 months).
JavaSpring BootHibernateAngularJSMySQLDockerAWSRedisDrools/jBPMJavaFX
X-ISS Inc. (HealthSignz) · 2014 – 2015 · Enterprise
HPC monitoring & analytics
Decision HPC — a SaaS analytics and monitoring product for high-performance-computing clusters: hardware heat maps for supervisors, cost/usage drill-down reports giving managers ROI on compute and disk assets.
- Owned UI, middleware and database design across a US/Romania/India team.
JavaGWT/GXTEJBJMSActiveMQSpring SecurityMySQL
Techworks Technologies · 2009 – 2014 · Startup
Techworks client & product portfolio
Five years of shipping for global clients as founder: Android game ports (Roulette, Texas Hold’em, an Amazon Fire TV quiz template), Kindle Active Content apps, and embedded Java for a German industrial client — including a custom persistence framework that replaced H2 + Hibernate on a home-automation device (designed onsite in Germany), a reloadable fine-grained logging framework, and an Eclipse RCP field-service suite with video sync.
- Also: a J2ME push-email client with its own aggregation server (“a poor man’s BlackBerry” for low-cost handsets), RFID tram asset tracking, and GWT/Sencha Touch mobile-ticketing prototypes.
AndroidJ2MECore JavaEclipse RCPGWTSpringHibernateMySQL
Techworks Technologies · 2009 – 2014 · Startup
Antida — distributed P2P file sharing
“Anytime Data Anywhere”: a peer-to-peer private cloud that synced multiple computers and transferred files across firewalls and NAT — using the user’s own machines’ bandwidth and disk as securely accessible storage, years before consumer cloud sync was ubiquitous.
- Architected the solution and hired and trained the entire team that built and tested it — concept to shipped product (2008–2010).
JavaJXTASocketsSwingSpringGlassFish
Adept Software Avenues · Ecrio · 2008 – 2009 · Enterprise
Visa Mobile & NFC payments (2008)
Early mobile-payments engineering, a decade ahead of the mainstream: led test development for the Visa Mobile application stack on Android 0.8 (onsite in the US), built an NFC money-transfer demonstrator on J2ME, and wrote a custom SIP/RTCP stack from the RFCs with a streaming-media reference client.
Android (0.8)J2MENFCSIP/RTCPGPS/maps
Elecom Software · Systeme Lauer (Germany) · 2004 – 2006 · Enterprise
WOP-iT — industrial automation HMI
Web Operating Panel: drag-and-drop design of industrial process automation (manufacturing and assembly lines), running on PCs and industrial devices under Personal Java. Joined as a developer, grew to module and group lead.
- Led delivery of the FDA-compliance logging module and the process-archive module with charting-based visualisation.
Personal JavaJDK 1.1/1.2SocketsThreadingAWT
Passion project · ongoing · Passion
A learning portal to teach Hindi and English, built with Claude Code.
WebClaude Code
Passion project · ongoing · Passion
Language-learning activities for kids (Hindi and English), built for my own family first with Claude Code.
WebClaude Code
Personal project · live since Nov 2025 · formerly Quiz Ajit · Passion
Free AI study platform generating quizzes and grounded chat from students’ own notes — ~420 users in 60+ countries with zero paid acquisition. Built with Claude Code; 22 ADRs.
- Spring Boot 3 gateway as the trust boundary (Auth0 JWT validation, guest tokens, rate limiting); Python/FastAPI with FAISS retrieval; a LiteLLM gateway fronting a self-hosted Qwen2.5-7B with budget-capped OpenAI failover, now shared by two other products.
React 19Spring Boot 3FastAPIFAISSPostgreSQLLiteLLM
Personal project · ongoing · Passion
Quiz platform for PPL (pilot licence) exam preparation, on the web and mobile — the project that later grew into QuizWrap. Still live at qajit.com.
WebMobileClaude Code
Personal project · Sep 2026 · Passion
A playable HTML5 tribute to Digger (Windmill Software, 1983), built in one session with Claude Code — WebAudio chiptune sound, six original levels, and a built-in AI watch mode that plans routes with Dijkstra’s algorithm and narrates what it’s doing.
- Tested by a headless simulation (31 straight levels) and by Claude playing it live in Chrome, which found two real bugs; the autopilot then became a feature.
CanvasWebAudioVanilla JSDijkstraClaude Code
Founded by Anindita Sarkar · engineering partner · live with payments since Jun 2026 · Passion
Paid numerology readings plus an LLM chat guide on a credits model — founded by Anindita Sarkar; I am the engineering partner. Java owns identity, money and the deterministic engines; Python/LangGraph owns the AI path via the same public API. 33 ADRs; first prize, Outskill hackathon capstone (Aug 2026).
- Exactly-once credit grants under duplicate Razorpay webhooks via row locks; Firebase identity with stateless offline JWT validation; SSE streaming with heartbeats and cancellation; a human-in-the-loop confirm gate so only a UI action spends credits; an MCP server exposing readings to agents.
Java 25Spring Boot 4React 19FastAPILangGraphPostgreSQLRazorpay