Product engineer. The pages are Next.js and TypeScript. Under them: Django, agents, and boards that have to move when the interface says they moved. This is the long version. The one-page PDF is the short one.
I build the interface and I stay for the system underneath it. By day that is a lender’s internal desk: the loan origination screens, a shared authenticated proxy, and the bulk email and inventory services. On the side, a set of products on one host: a coding studio, a classroom, a job-packet drafter, and a fix checker. Before that, the work was boards: a radio stylus, a wearable that speaks, and pages served by the microcontroller itself.
I build with Cursor, Claude, and Codex in the loop, and the commit trailers say so. The security research at the college centre of excellence is on the record under Experience; the repositories here are the products, the desk, and the hardware.
Experience
October 2025 — present
Product engineer
Saarathi Finance
Founding product engineer for web. Next.js frontends in front of Django: the loan origination screens from underwriting through recommendation, financial sanction and final sanction to maker and checker disbursal; one shared authenticated proxy that replaced five copies; read and write permission codes enforced in Django as well as in the UI. Started the Pravesh intake app, the Connector field-agent app and the Central Access console, with their Docker builds and a cookie, CSRF and token-refresh layer. Wrote the bulk email service (Celery scheduling, a circuit breaker) and the inventory service (AES-GCM secrets, an audit trail), front and back, plus the consent OTP over SMS and WhatsApp and UTM lead attribution for the public website. 900+ pull requests authored and 270+ reviewed on GitHub.
October 2025 — December 2025
Electronics mentor
The Innovation Story
Robotics and hardware development training.
March 2022 — October 2025
Security research scholar
CoE CNDS, VJTI
Reverse engineering, backend and API security, OS security, IoT and drone security, cryptographic implementation, and device and network reliability analysis.
November 2024 — October 2025
Math model trainer
Outlier
Writing and checking math so a model’s answers get clearer: chain-of-thought reasoning, and correcting hallucinations.
June 2024 — November 2024
IoT engineer
Dataviv Technologies
PCB design and assembly, wireless links over LAN and WLAN, real-time web interfaces, embedded Linux, and getting the system deployed and tuned.
2021 — present
Freelancing
Self employed
Web, security consultancy, hardware repair and assembly, teaching, and product work for small clients.
January 2022 — June 2024
Lead
GDSC VJTI
Started on the cyber security committee, then cyber security lead: workshops on cyber security and ethical hacking. From July 2023, GDSC VJTI lead, organising workshops, guest lectures and events for student developers.
June 2023 — October 2024
Student marketeer
Red Bull India
Campus presence across VJTI, ICT, XIE, and IES.
October 2020 — December 2021
Teaching assistant
Xavier Institute of Engineering
Online workshops on web development, security, Python, and robotics.
June 2020 — November 2021
Volunteer teacher
Awami Jr. College
Information technology for 11th and 12th grade. Exams, notes, and the lab machines.
Systems
What a one-page CV has to flatten into a line.
SYS-012026
Whip
Agent coding studio
Invite-only workspace. A planner council writes the plan and never touches a file. A fleet of workers edits a sandboxed tree under per-agent write scopes, and every attempt passes mechanical gates (scope, syntax, compile, tests) and an LLM reviewer, all of which fail closed. The preview opens on a separate origin whose proxy strips cookies and credentials. A run trace records the model and reasoning effort for each attempt, and web research drops any claim whose source the search did not return. Next.js cockpit, Django, Channels, Celery, LangGraph on Postgres, Azure OpenAI with explicit prompt caching, and stack-aware rules for 27 stack profiles. GitHub gets a pull request and nothing more. Blue/green deploys with a health gate.
A professor uploads a lecture. A chain of seven Celery tasks turns it into a transcript, a translation, a summary and an index, a flowchart, a mind map, and a quiz, and the professor watches the run over a websocket. The tutor retrieves from a FAISS index and carries the subject’s syllabus in its prompt, a prompt-level guard. Generated visualizers render in a sandboxed iframe under a strict CSP. Token allowances per organisation and per user. Blue/green deploys.
Scores a posting against a real CV and drafts the resume, the letter, and the interview kit. It does not click Apply, and below 4 out of 5 it says not to send the packet. Built on the open-source career-ops (MIT) as an invite-only, multi-tenant product: HMAC-hashed OTP, revocable refresh tokens, one Azure call site with a token ledger and a monthly cap, and a host agent that pulls deploy jobs so docker.sock never enters the web container.
A finding becomes an issue, then a patch. The same detector runs again on the patched tree before a fix is proposed, a person approves, and a draft pull request opens on a Cloudflare preview where the detector runs once more. If GitHub, the preview, and the dashboard disagree, the check fails closed. There is no merge button, and the read-only analyst cannot approve. So far it has run against a seeded-bug repository.
Frontend on a lender’s internal desk, with Django behind it. Underwriting, recommendation, financial sanction, final sanction, then maker and checker disbursal. One authenticated proxy replaced five per-module copies, and read and write permission codes are enforced in Django as well as in the UI. The sanction screens and much of disbursal are mine; the rest is a team’s. The same desk holds the bulk email, deviations, incentives, and off-boarding consoles.
Underwrite→Recommend→Sanction→Disburse
Next.jsTypeScriptDjangoCeleryKeycloak
FIN-062025 — 2026
Pravesh
Loan intake app
A phone-first intake app for field staff. Login and OTP, a lead with its own consent OTP, the applicant and each co-applicant on their own steps, then collateral, loan requirement, documents, bureau, risk and eligibility, and a payment link. Camera with crop, GPS, and a PWA shell. An expired token comes back as 410, and the client refreshes once and busts the cache. A 480-combination harness mapped employment fields against the core system’s test environment.
Lead→Consent→Documents→Risk→Submit
Next.jsReactTypeScriptTailwindPWA
PRD-102026
Spark & Shine
Bookstore
An online Islamic bookshop. Catalog with filters, cart, checkout that creates an order for a person to confirm, wishlists, reviews, and email codes for verify and reset. The server prices every order. The inventory desk is a path, not a link, and the admin API checks staff permission on the server. Next.js storefront and a Django REST API with Postgres, both in Docker.
A cafe’s menu page, and a second route that lazy-loads a 3D room you enter through the door. Hotspots on the model open the menu, the reviews, the contact details, and the order link, and a coupon hunt collects an email. Express serves the model with a one-year cache.
An AI classroom on a smartboard, built with Aishwarya: a whiteboard that records, a classroom app with each lecture beside its transcript, and a three-button radio stylus. She wrote the whiteboard, the classroom, and the Electron shell. I wrote the stylus firmware (VirtualWire at 2000 bps) and the pipeline from recording to transcript, 17 translations, and a summary.
Stylus→RF link→Receiver→Computer
ReactFirebaseWhisperArduinoVirtualWire
HW-082024
Blind Assist
Wearable that reads aloud
Five buttons on a Pi, a camera, and a microphone. It reads text, names objects, answers out loud, and flags obstacles. Hardware side of a two-person build; the README credits Muhammad Sheikh for the software and the obstacle model.
Camera→Read→Speak
PythonRaspberry PiCloud VisiongpiozeroTensorFlow Lite
HW-092024
ESP8266 web controls
Boards with their own web page
A page served by the chip itself: relays for a motor (up, stop, down) with a software interlock, and a stepper on an A4988 (clockwise, counter-clockwise, stop). Adapted from the standard tutorial sketch.
State and intercollege: seven hackathons and ideation competitions. Among them, first at PICT’s flagship tech event (national), first at Startup Nova (VJTI E-Cell), and third at the Pitchers event (ICT E-Cell).
Two hardware innovation patents.
Each page load adds a record to a log on this server: your IP address and the city, region, country, postal code, approximate coordinates and network it resolves to; where you came from; your browser’s language, time zone and local time; device type; time spent; and the dossiers opened. A third-party location service (ipapi.co) sees your address once to resolve that. Do Not Track is honoured.