Software Engineer @ RUDRA Cybersecurity
Sep 2024 — Present · Mumbai, India · Hybrid
Python FastAPI asyncpg React GraphQL PostgreSQL Elasticsearch Redis Hasura RouterOS OpenVPN Docker Electron
- ▸ 3x finer usage visibility across 1,300+ routers. Rewrote data usage tracking from per-WAN to per LAN-WAN pair across 1,300+ production routers (500+ GB/day). Added WAN cutoff, queue-based upload/download throttling, and a zero-downtime rollout that migrates the last 6 months of usage data per-router on reset.
- ▸ Search times: 1+ min → under a second. Migrated the audit trail from Postgres to Elasticsearch to fix slow text searches that timed out at over a minute. Queries now return in under a second across 10K+ events/day. Re-modeled the schema with parent-child trail linking and structured change diffs, with role-level filtered visibility and cursor-based pagination.
- ▸ Real RBAC: 5 levels, 40+ modules, 370+ users. Rebuilt the RBAC system into a 5-level role hierarchy with per-module CRUD permissions across 40+ modules, with multi-level scope support. Used Hasura JWT custom claims to enforce row-level access control on the GraphQL frontend, now governing 370+ users and enabling onboarding of larger enterprise tenants.
- ▸ Static VPN IP pool ends reconnect drift. Designed static VPN IP assignment across 2 backend services, replacing a dynamic IP pool that drifted on reconnect with a PostgreSQL-backed allocation synced to the VPN server's per-client config. Concurrency-safe assignment, conflict detection with bounded retry, transactional rollback on failure, and automatic IP reuse on device re-creation.
- ▸ 27s → <1s cold start: ditched Prisma for asyncpg. Ported backend services from Python Prisma to asyncpg with raw SQL. Cut entry-point import time from around 27s to under 1s by eliminating the Prisma client init that ran on every service cold start. Replaced Prisma's application-level relation loading with database-side SQL JOINs, cutting query time on relation-heavy reads.
- ▸ Net-new WAN speed monitoring at 500K+ datapoints/day. Built WAN speed monitoring as a net-new capability with a two-tier ingress: routers log per-interface upload/download metrics to a local buffer, and the backend polls each router on a schedule to ingest, persisting 500K+ datapoints/day into PostgreSQL with date-range-tuned indexes. The React dashboard renders dual-axis area charts with date-range filtering and CSV/PNG export.
- ▸ Reversible device lifecycle, billing-aware to the second. Activation, deactivation, scheduled toggles, and deletion with reversible network-layer enforcement and billing that halts from the exact deactivation timestamp, replacing a delete-only pause model. Integrated with the billing system, including billing exports.
- ▸ Provisioning desktop app: PySide6/QML → Electron. Maintained and extended the desktop app used to flash every production router. Added white-label theming (3 brands), branding package install, captive portal setup, VPN certificate deployment, and connectivity checks with retry. Migrated the whole utility from PySide6/QML to Electron.