Dulanja Liyanage Email & Phone Number

Berlin, Germany

Member of the Product Security team, ensuring the security of consumer facing applications and AI systems of Zalando.

Berlin, Germany

As a member of the IAM Subject Matter Expert team at WSO2, my main focus was addressing the B2B and B2C identity and access management (including API security) requirements of WSO2's enterprise clients, using mechanisms such as OAuth2/OIDC, SAML2 SSO, XACML, SCIM, FIDO2, etc. I was also involved in researching on latest authentication and authorization technologies and protocols to shape the future of WSO2 IAM products (Asgardeo and WSO2 Identity Server).

Colombo, Sri Lanka

I was involved in formulating and implementing security strategies and procedures across the organization (e.g, SSDLC, Vulnerability Mgt, Incident Mgt, Customer & Public Patch Announcement, External Researcher Reward Program), security training, security tooling procurement and adaptation (SAST, DAST, SCA, and various OWASP tools), engineering security automation tools, assessing WSO2 products and services (including threat modeling and code review), and collaborating with customers, external… Show more I was involved in formulating and implementing security strategies and procedures across the organization (e.g, SSDLC, Vulnerability Mgt, Incident Mgt, Customer & Public Patch Announcement, External Researcher Reward Program), security training, security tooling procurement and adaptation (SAST, DAST, SCA, and various OWASP tools), engineering security automation tools, assessing WSO2 products and services (including threat modeling and code review), and collaborating with customers, external security researchers, and other third-party entities to address the security concerns of WSO2's middleware platform (involving products related to IAM, API Mgt, and Enterprise Integration). In addition to those, I managed recruitment and HR aspects of the security engineers in the team. Show less

Colombo, Sri Lanka

I engineered WSO2 Identity Server features (https://wso2.com/identity-server/) using Java, particularly the core authentication framework that underpins identity federation and multi-factor authentication. I was also involved in researching various IAM protocols, including SAML2 SSO, OAuth2, OpenID Connect, XACML, WS-Security, and SCIM, aiming to enhance the product's capabilities. Furthermore, I led various customer engagements, architecting solutions to address their enterprise IAM… Show more I engineered WSO2 Identity Server features (https://wso2.com/identity-server/) using Java, particularly the core authentication framework that underpins identity federation and multi-factor authentication. I was also involved in researching various IAM protocols, including SAML2 SSO, OAuth2, OpenID Connect, XACML, WS-Security, and SCIM, aiming to enhance the product's capabilities. Furthermore, I led various customer engagements, architecting solutions to address their enterprise IAM challenges, and led IAM customer support teams to resolve production issues in customer deployments. Show less

Colombo, Sri Lanka

I worked in telecom billing, telecom route management, passport control, and project portfolio management product teams conducting R&D (using Java, C, and Oracle PL/SQL) as well as helping the clients on their production deployments.

Education record

Bachelor Of Science (Bsc), Software Engineering

Followed at the IIT (Informatics Institute of Technology) Campus, Sri Lanka