Skills and capabilities
What I use, grouped by where it gets used. Keeping FIBC Lanka’s factory running and secure shaped most of it. The Android side came from my own projects.
01
Domains
Infrastructure
The network and the servers everything else sits on.
- Network architecture and security
- Windows and Linux servers
- Hybrid cloud integration
- Capacity planning
Resilience
Backups, recovery targets, and proof that a restore works.
- Disaster recovery
- 3-2-1 backup systems
- Business continuity
- Integrity verification
Security
Keeping the attack surface smaller than it comes by default.
- VLAN segmentation
- DNS security
- System hardening
- IP surveillance
Business systems
The applications the office needs to get through the day.
- Tally Prime
- SignHR
- RBAC and provisioning
- Asset lifecycle
Android and mobile systems
Telephony, connectivity and the privileged services underneath them.
- Kotlin and Android platform
- Telephony, IMS and radio APIs
- Root and Shizuku integration
- Android 16 and 17 compatibility
Product engineering
Turning an awkward technical system into an app people can use without breaking their phone.
- Jetpack Compose and Material 3
- Mobile interaction design
- OTA updates and signed releases
- Diagnostics and report design
Web development
Sites that load fast and stay usable.
- Semantic HTML and modern CSS
- Responsive interaction design
- Accessibility
- Performance
Mobile networks and privacy
What carriers actually do on the air, and what Android will let an app do about it.
- 5G NSA and SA diagnostics
- CarrierConfig and IMS analysis
- IKEv2 and IPsec VPN
- LTE and NR band analysis
Design and CAD
From the print artwork on the bags to garment patterns at Brandix.
- Adobe Photoshop
- CorelDRAW
- AutoCAD
- Lectra Modaris
02
Where it gets used
- Production network
- Segmentation, firewall policy, intrusion detection, encrypted DNS, ERP-priority QoS
- Daily
- Continuity
- 3-2-1 architecture, restore verification, defined RTO and RPO
- Daily
- Servers
- Windows and Linux deployment, hardening, identity, monitoring
- Daily
- Android
- IMS and radio configuration, platform VPN, signed release delivery
- Project work
- Web
- Static sites, design systems, accessibility and performance budgets
- Project work