Senior Software Engineer at WSO2, specializing in Identity & Access Management (IAM). I build secure, scalable identity infrastructure, bridging the gap between complex enterprise protocols and seamless user experiences.
π Based in: Colombo, Sri Lanka
π Portfolio: yeshandev.com
βοΈ Writing: I break down auth standards and WSO2 engineering insights on Medium.
Identity & Auth | OAuth 2.0 β’ OpenID Connect (OIDC) β’ SAML 2.0 β’ FIDO2/WebAuthn
User Management | SCIM 2.0 β’ Identity Provisioning β’ User Lifecycle
Architecture | Identity Federation β’ Single Sign-On (SSO) β’ Multi-Tenancy
Security | JWT β’ PKCE β’ mTLS β’ Adaptive & Risk-Based Auth β’ Passkeys
Languages | Java β’ TypeScript β’ Go β’ Python β’ Kotlin β’ Swift β’ Dart
Backend | Spring / Spring Boot β’ Node.js β’ Express β’ OSGi
Frontend | React β’ Next.js β’ Astro β’ React Native β’ Flutter
Infra & DevOps | Docker β’ Kubernetes β’ Nginx β’ Cloudflare Workers β’ GCP / Firebase
Data | PostgreSQL β’ MySQL β’ MongoDB β’ Redis
Tooling | Git β’ Maven β’ GitHub Actions β’ Jenkins
- WSO2 Identity Server β Open-source IAM platform used by enterprises and governments worldwide. Contributing to authentication flows, federation, OAuth 2.0 / OIDC, and the developer experience.
- WSO2 Asgardeo β WSO2's cloud IDaaS. Passwordless login with passkeys, adaptive auth, social IdPs, and developer-first APIs.
- yeshandev.com β Personal portfolio with an interactive terminal that speaks SCIM 2.0 and OIDC discovery.
- π Portfolio β yeshandev.com
- π§ Email β yeshandev@gmail.com
- πΌ LinkedIn β linkedin.com/in/pasinduyeshan
- βοΈ Medium β pasinduyeshan.medium.com



