Product · Engineering · AI
Product enthusiast and software developer from India . I write about building products, working with teams, and shipping software.
01 / Now
Airbus · Apr 2024 – Present
5 → 1
IAM platforms consolidated into one product
10 mo
sooner release, at 40% lower build cost
80%
first-contact resolution for the agentic AI assistant
3 Platform obsolescence
Decommissioned 3 critical IAM platforms and simplified operations
02 / Timeline
Consolidating five IAM platforms into one product; agentic AI assistant in UAT.
Retired two legacy IAM platforms; launched voice-based self-service password reset.
CI/CD for 4 IAM applications — release time from 1 day to ~2 hours.
Electrical load analysis web app for Airbus R&D; .NET Core & Angular SME.
Cross-functional full-stack development on evolving client requirements.
Scalable applications for information extraction, retrieval and indexing.
Computer Science.
03 / Writing
Identity & Security · 5 min read
A mobile app cannot hide a client secret, so a stolen authorization code becomes free tokens. PKCE fixes this with a fresh, one-time proof invented at the start of each login — walked as diagrams, plus the full flow in one picture.
Identity & Security · 8 min read
Letting an app act for you, without handing over your password. The authorization code flow walked step by step, why the code is useless without a client secret, and the access-token-as-hotel-key-card analogy that makes refresh tokens click.
Identity & Security · 4 min read
Who are you, and how does a system prove it? Identity, attribute, account and authentication, pinned down with John Wick's first day at a fictional aerospace supplier.
Identity & Security · 5 min read
Being authenticated gets you in the door. Authorization decides which rooms you can open. Covers authorization vs AuthN, coarse vs fine-grained access, Active Directory, and how an identity provider makes SSO work.
Identity & Security · 6 min read
Passwords, OTPs, push approval, number matching, FIDO2. Each MFA method exists because the one before it broke — walked through the attacks that forced each upgrade, ending with why AAL3 requires a hardware key.
Identity & Security · 8 min read
The signed statement behind SSO, opened up: SP-initiated vs IdP-initiated flows, why SAML assertions resist replay, why certificate expiry is the most common SAML outage, and where the standard starts to break.
04 / Contact
