Nitanshu Vashistha

A production-ready REST API to simulate a deck of cards, which can be used for casinos and card games.

The simulator is written in Go using Gin as a web framework, PostgreSQL as a database, Zap for logging, and Prometheus and Grafana for monitoring.

Built an online IDE for mobile development using Eclipse Che-Theia, a Visual Studio Code like IDE, with an emulator that allows users to render the developed apps on a device in real-time. I owned the end-to-end development along with one other teammate. I also worked with product managers and customers to deliver the requirements.

The IDE's extensions were written in TypeScript, and its infrastructure heavily relied on containers and Kubernetes. The IDE is integrated with Appetize.io, a third-party mobile emulator solution, and supports development for Android with Java and Kotlin, React Native, and iOS. We also created a separate build service to compile iOS applications on AWS Mac EC2 machines.

This project exposes a RESTful API written in Go for an application where football/soccer fans will create fantasy teams and will be able to sell or buy players.

The API uses Gin as a web framework and PostgreSQL as a database, along with support for JWT-based authorization.

Built a containerized TypeScript-Node.js microservice using Postgres as a database and deployed it on Amazon ECS. The service currently manages 20 million users' data and handles 1.2 million daily requests. I owned the project and the end-to-end development. I also worked with senior engineers for integration with clients.

The goal of the microservice was to unify developer personas from various platforms, such as HackerRank, GitHub, and Stack Overflow, into a single identity. HackerRank's data platform also uses this service to identify if different user personas belong to a single identity. This project includes REST APIs for:

• Merging multiple identities that belong to the same user.
• Returning a globally unique identifier (UID) by accepting any user-identifiable attribute such as an email or a username.
• Returning all connected identifiers for a given identifier.
• Isolating a bad identity.
• Delinking wrongly-formed relations between two identities.

I used a Filebeat Sidecar container to send the logs to an ELK stack for logging and monitoring. I also built Kibana dashboards for monitoring and used Amazon CloudWatch alarms for alerting.

Built an automated data backfill mechanism for the HackerRank data platform on a Ruby on Rails web application. I owned the project and the end-to-end development of the dashboard.

I developed the admin dashboard user interface using CoffeeScript and Rails. For feeding large amounts of data into the data platform without choking the database, I created multiple batches of background jobs, placing the jobs on multiple queues for later processing using Resque, a Redis-based jobs and messaging queues library.

Made HackerRank's data platform compliant with GDPR. I owned the project and the end-to-end development of the GDPR pipeline.

I built a TypeScript/Node.js microservice to collect GDPR deletion requests from clients, which triggered an Airflow Directed Acyclic Graph (DAG) monthly to run the data deletion pipeline. I also wrote multiple PySpark jobs that I deployed on the Amazon EMR cluster to delete data from data stores like Amazon S3 and Apache Hadoop.

As a Google Summer of Code participant, I worked with the Python organization coala to make enhancements in corobo, which is a bot used by the coala community to onboard newcomers and automate development tasks.

My project was dedicated to making corobo secure by reducing its surface vulnerability. I also implemented a better testing infrastructure to test the plugins, as well as to make the existing plugins configurable so that they can also be adapted by other communities to cater to their needs.

I was honored to be included in the Yahoo Security Hall of Fame for my contributions to enhancing the security of their online services. I identified and responsibly disclosed critical security vulnerabilities through rigorous testing and ethical hacking practices, including cross-site scripting (XSS) and full path disclosure issues within their platforms.