I build backend systems where failure costs real money.
I'm Nalinka, a software engineer in Melbourne, Victoria.
Insurance claims, banking, payments, hospital billing. Mostly Java and Spring Boot, Kafka at transactional scale, and AWS. Right now I'm at the Transport Accident Commission, reverse-engineering 50+ interconnected systems to design the integration layer for its next claims platform.
Outside that I'm building cloud infrastructure projects to go deeper on AWS and Azure. This site is one of them.
Projects
AWS Event-Driven Order Platform
Serverless order flow built with API Gateway, Lambda, DynamoDB, SNS/SQS and S3, provisioned end to end with AWS CDK. Later added a DynamoDB to Aurora PostgreSQL migration with contract tests comparing behaviour before and after the move.
github.com/nalinka1/aws-order-flow
AWS CDK · API Gateway · Lambda · DynamoDB · Aurora PostgreSQL · SNS · SQS · S3
Multi-Cloud Secure Document Platform, AWS and Azure
Cross-cloud OIDC workload identity federation, so a workload in Azure reads an encrypted S3 bucket with no AWS access key anywhere on the Azure side. Four negative tests prove the boundaries hold: a wrong identity, an expired token, an out-of-scope prefix and a missing KMS grant are each denied. Both clouds provisioned from one Terraform configuration with remote state and blob-lease locking.
github.com/nalinka1/multi-cloud-secure-document-platform
Terraform · AWS (S3, KMS, IAM, STS) · Azure (Entra ID, RBAC, Key Vault, API Management, VNet) · OIDC
Casual Services Invoice Automation
Built for my own monthly invoicing. A scheduled Lambda works out the billable days for two sites from business-day calendars, public holidays and leave, writes the amounts into my existing PDF template, and leaves a Gmail draft for me to review. It never sends - issuing the invoice stays with me. Invoice numbers are reserved in a DynamoDB transaction, and a marker written before the Gmail call means a retry looks for the existing draft instead of creating a second one.
github.com/nalinka1/casual-invoice-automation
Python · AWS (Lambda, EventBridge Scheduler, DynamoDB, S3, Secrets Manager, SNS, SQS, CloudWatch) · CloudFormation · Gmail API
Experience
Dec 2025 - Present
Software Engineer - Transport Accident Commission
Claims and payments systems for Victoria's transport accident insurer. Integration design for a claims platform replacement across 50+ systems, a migration of 13,000+ recovery-claims records that let a legacy platform be retired, and extensions to the Fineos claims platform.
Jul 2023 - Dec 2025
Software Engineer - Cloud Solutions International
Designed and owned the invoice, billing and payments platform for Dr. Sulaiman Al Habib Medical Group, the largest private healthcare network in the Middle East. Live two years, USD 100M+ in annual transactions, invoice failure rates cut to 0.1%. Also built a service that checks prescriptions against patient history.
Certifications
AWS Certified Developer - Associate
Amazon Web Services (AWS)
Issued Jul 2025 · Expires Jul 2028
Credential ID 7ba4feca-7ce4-42b4-bd64-f7b2566c29ac
AWS Certified AI Practitioner
Amazon Web Services (AWS)
Issued Aug 2026 · Expires Aug 2029
Credential ID 9b57afd1-0cce-4883-bf64-7e09df3ddef7
