Flexible RBAC for Contentstack
Led RBAC across Contentstack’s products: product-specific org roles, custom roles down to content types, webhooks, environments and tokens, and the APIs, policies and Org Admin UI behind them.
software engineer @ contentstack
Backend-leaning engineer in Pune. I spend my days on auth, access control, and identity across a multi-product platform — and my nights onwordsthat don’t need to compile.

stickers are draggablescroll
Led RBAC across Contentstack’s products: product-specific org roles, custom roles down to content types, webhooks, environments and tokens, and the APIs, policies and Org Admin UI behind them.
Built the in-app notification service from scratch: REST and gRPC APIs on Node.js and MongoDB, feature-flagged and load-tested, with a React notification centre on top.
Own the Data & Insights app that brings the Lytics CDP into Contentstack. Keyless machine-to-machine auth with GCP Workload Identity Federation, saga-based provisioning, CloudEvents over Kafka.
Organisation-level administration for Lytics: read-time entitlement inheritance, an OrgAdmin role, atomic invites from Contentstack, and merging duplicate users into one identity per email.
One login for every Contentstack product, built on Keycloak: OIDC with PKCE, native Organizations, a custom authenticator SPI, and the Lytics integration with back-channel logout.
Password-complexity policy, a 2FA-bypass fix, Snyk SAST remediation across auth-service, secret-leak cleanup, and the BigQuery migration for the analytics services.
I’m a software engineer from Pune. I joined Contentstack in 2023 as an Associate Software Engineer and moved into the Software Engineer I role in July 2024. Since then I’ve mostly lived in the unglamorous parts — auth, access control, and the identity plumbing that has to work every single time.
Before this: a learning platform at Almabetter and a Flutter app at Inator. Outside work I write about life and the things I’m figuring out on voidd.space, usually later than I should.
Contentstack · Pune● now
Flexible RBAC, the Lytics CDP app, multi-account identity work, and centralized login across data centers.
Contentstack · Pune
Built the notification service end to end, worked on the App Switcher and top-level navigation, and moved the analytics services to BigQuery on GCP.
Almabetter · Remote
Built the company’s learning management platform across React, Node.js, MongoDB, and Express.
Inator (now Cricinshots) · Pune
Built mobile components for MIT-WPU’s Bhartiya Chhatra Sansad app and wired them to backend APIs.
Where I spend most days.
When the job calls for it.
The stuff that keeps it up.
The newest shelf, filling fast.
Work, an idea, something I wrote, or a coffee recommendation — my inbox is open. I actually reply.