Samarasinghe Arachchi I.

If your mobile app needs a backend that is secure, scalable, and built to last — I build exactly that. I recently architected and delivered a production-grade mobile backend from scratch, including end-to-end encrypted media handling (RSA-2048 + AES-256), real-time WebSocket events via STOMP, distributed deadline scheduling with ShedLock, AWS S3 ephemeral storage with automatic purging, Firebase Cloud Messaging for iOS and Android, and a full JWT authentication system with Google, Apple, and Facebook SSO. The kind of system most agencies charge $50,000+ to deliver — built to production standard. This is the level I work at. Not CRUD. Not boilerplate. Real architecture, real security, real systems. What I specialise in: Security-first backend architecture — E2E encryption, secure key management, RSA/AES implementations, JWT lifecycle management, and systems where data privacy is non-negotiable (fintech, healthtech, legal tech, consumer apps handling sensitive data). Mobile backend development — Spring Boot APIs purpose-built for iOS and Android. Push notifications (FCM), real-time WebSockets, device token management, media upload pipelines with pre-signed S3 URLs, and offline-first data architecture. Fixing and scaling broken systems — if your MVP is unstable, slow, or collapsing under growth, I find the root cause fast and fix it properly. Not patches. Actual solutions. I have worked across SaaS, healthcare, IoT, and blockchain production systems. Full-stack delivery — when needed, I work across the full stack: React, Next.js, Node.js, Spring Boot, and cloud infrastructure on AWS. Common problems I solve: "We need a secure backend for our mobile app and can't trust just anyone with it." "Our system handles sensitive user data and we need someone who understands encryption properly." "Our MVP worked at first but now it's slow, unstable, or breaking under real users." "We need real-time features — notifications, live updates, WebSockets — built properly." "Our AWS costs are out of control and nobody knows why." "We need a senior developer who can own a problem end to end, not just execute tickets." Technical depth: Backend: Java, Spring Boot 3, Node.js, Express, REST API design, WebSockets (STOMP), microservices architecture Security: E2E encryption (RSA-2048, AES-256), JWT authentication, SSO integration (Google, Apple, Facebook), secure key infrastructure Mobile backends: FCM push notifications, pre-signed S3 URLs, device token management, real-time event broadcasting Cloud and DevOps: AWS (EC2, ECS, Lambda, S3, CloudFront, RDS), Docker, CI/CD pipelines, serverless architecture Databases: MongoDB, PostgreSQL, MySQL, Redis — schema design, query optimisation, indexing strategy Frontend: React.js, Next.js (App Router), TypeScript, Tailwind CSS How I work: I move fast without cutting corners. I understand existing codebases quickly, communicate clearly with both technical and non-technical stakeholders, and deliver code that the next developer will thank you for — not curse you for. I treat your product like it is my own. Because I have built my own. I know what it takes to go from idea to production and I bring that ownership to every engagement. If you are building something that matters and needs to be built properly — let's talk. Thank you Ashen Iranda