Hasitha Nanayakkara
Associate Technical Lead
Galle, Southern Province, Sri Lanka
Summary
👤
Senior🎓
Top SchoolHasitha Nanayakkara is an Associate Technical Lead with nine years of engineering experience, currently driving security and compliance efforts at WSO2 after progressing from senior engineer to technical lead. He specializes in open banking, OAuth2/OpenID Connect, and API security—having implemented regional regulatory requirements (UK, AU, Berlin), mutual-TLS, certificate validation, token binding, and ID token encryption improvements. Comfortable leading patches and production hot fixes, he blends hands-on backend development with mentoring and client-facing technical discussions across time zones. His open-source contributions include hardening identity/OAuth components (notably signing-before-encrypting ID tokens and improving JWKS handling) for widely used WSO2 extensions. An electrical and information engineering graduate from University of Ruhuna, he pairs strong systems thinking with a track record of delivering secure, compliant platforms and developer tooling.
9 years of coding experience
8 years of employment as a software developer
BSc Engineering (Hons), Electrical and Information Engineeering, BSc Engineering (Hons), Electrical and Information Engineeering at University of RuhunaJava Developer, Computer Software Engineering, Java Developer, Computer Software Engineering at Institute of Software Engineering in Sri Lanka (IJSE)Physical Sciences, Physical Sciences at Richmond CollegeSiridhamma College, Galle
Sinhalese, English
Stackoverflow
149reputation
312kreached
9answers
0questions
Github Skills (19)
identity10
web-token10
java10
javas10
jsonwebtoken10
jwt10
encryption10
oauth10
openid-connect9
xml6
encode6
php6
android6
spring-boot6
validation6
Programming languages (6)
Github contributions (5)
wso2-extensions/identity-inbound-auth-oauth
May 2021 - Mar 2022
Role in this project:
Back-end Developer
Back-end DeveloperContributions:15 reviews, 23 commits, 5 PRs in 9 months
Contributions summary:Hasitha primarily focused on enhancing the security and functionality of the identity and OAuth-related components. Their contributions involved modifying the ID token encryption logic by signing before encrypting and refactoring the code. They also fixed several issues related to ID token encryption in tests and improved the JWKS (JSON Web Key Set) handling. Additionally, the user addressed documentation and code review comments, further refining the codebase.
identity
hasithakn/docs-open-banking
Sep 2021 - Nov 2024
Contributions:5 pushes, 5 branches in 3 years 3 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.