Shota Sawada is a software engineer based in Tokyo with nine years of experience specializing in backend identity and authorization infrastructure, primarily implemented in Go. He led the migration from a Django-based identity system to an OpenID Connect–certified Go/Ory stack at an autonomous driving company, contributing multiple PRs to Ory projects (Hydra, Kratos) and presenting at Ory Summit. His work spans design and operation of OAuth2/OIDC authorization servers, gRPC/REST APIs, client SDKs, 2FA (TOTP, WebAuthn), and large-scale migrations that cut latency and eliminated downtime. Shota favors designing cross-cutting, reliable platforms with clear boundaries that multiple teams can depend on, and he has driven company-wide practices like blue/green deployments and staged feature releases. He also has hands-on SRE and migration experience from earlier roles—moving services to ECS, codifying IaC, and improving observability with Datadog tracing. Notably, his contributions helped harden widely used open-source projects relied on by organizations at web scale, reflecting both product and security-minded engineering.
9 years of coding experience
5 years of employment as a software developer
Bachelor's degree, EDUCATION, Bachelor's degree, EDUCATION at Tokyo Gakugei University
The only web-scale, fully customizable OpenID Certified™ OpenID Connect and OAuth2 Provider in the world. Become an OpenID Connect and OAuth2 Provider over night. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters. Relied upon by OpenAI and others for web-scale security.
Role in this project:
Back-end Developer & Security Engineer
Contributions:2 reviews, 25 commits, 42 PRs in 3 years 6 months
Contributions summary:Shota Sawada's contributions focused on enhancing the security and stability of the Ory Hydra project. They implemented changes related to OAuth2 and OpenID Connect, addressing issues such as client registration endpoints and PKCE enforcement. The user also worked on logging improvements, making the server more traceable and added support for datadog tracing, while also fixing issues to enhance the overall robustness and reliability of the system.
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
Role in this project:
Back-end Developer
Contributions:9 reviews, 12 commits, 10 PRs in 1 year 11 months
Contributions summary:Shota primarily contributes to the back-end of the `ory/kratos` project. Their commits involve fixing bugs and implementing features related to user settings, including password updates and the handling of return URLs after successful actions. They also demonstrate skills in testing, particularly in the context of OIDC strategy and PBKDF2 password hash verification. Additionally, the user has worked on security-related fixes like managing 2FA settings.
yubikeyidpsignheadachesthink
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.