Co-Founder & Founding Engineer
Sole engineer on a pre-launch IT-hardware e-commerce platform in Sri Lanka. I've taken it from first commit toward launch on my own, owning payments, cloud, and the full stack in roughly seven months alongside my degree.
Problem
A hardware retailer needed a real online storefront that could take card payments, manage stock safely, and run on infrastructure it fully owns, all with no in-house engineering team.
What I built
The whole platform end-to-end: a Next.js storefront and admin dashboard backed by PostgreSQL via Prisma. A product-variants system with concurrency-safe stock handling, a discount-and-coupon engine with correct price stacking (both covered by their own test suites), CSV bulk import/export, and an SSRF-guarded image pipeline that fetches remote images, converts them to WebP with sharp, and serves them from S3 behind CloudFront. Payment reconciliation, card-order and bank-transfer expiry, reminders, and low-stock alerts run as scheduled EventBridge rules hitting cron API routes, with SNS alerts and CloudWatch dead-man alarms guarding the money-critical jobs. A custom Python scraper bulk-imports supplier catalogues (around 200 products) with automated category correction.
My role
Sole technical founder across every layer: architecture, backend, frontend, cloud, payments, and security. I ran a pre-launch robustness pass (rate limiting, session expiry, money-precision invariants, external-call timeouts) and a security review (SSRF protection, RBAC, credential rotation across S3, EC2 security groups and third-party keys, secrets in SSM Parameter Store). I also handled the HNB merchant approval paperwork and reconciled B2B invoices against bank statements.
Stack
- Next.js 16
- TypeScript
- PostgreSQL
- Prisma
- Auth0
- AWS
- GitHub Actions
- Python
Impact
- Full CyberSource/HNB card flow sandbox-validated across Visa, Mastercard, Google Pay, and Click to Pay.
- Money-critical cron jobs guarded by CloudWatch dead-man alarms and SNS alerts.
- ~200 supplier products onboarded through a custom Python import pipeline.
- Dedicated test suites for payments, discounts, SSRF, and money-precision invariants.