L.E.Santhosh Kumar

IAM Integration Specialist · Full Stack Engineer

I architect identity & access management solutions and build scalable web applications with Java, React, SQL, NoSQL, and Elasticsearch.

Roadmap

What I'm building now and what's next — across identity & access management consulting, indie software engineering and solo game development.

  1. Ping Pong
    2025 Completed Solaras Light

    Ping Pong

    A classic pong-style game built in Unreal Engine to learn 2D input, ball physics and UI.

  2. Road Crossing
    2025 Completed Solaras Light

    Road Crossing

    An arcade-style road crossing game in Unreal Engine featuring grid-based movement, obstacles, collectibles and a scoring system.

  3. HTTP Server from Scratch (Java)
    2025 Completed Santhosh Laguduwa

    HTTP Server from Scratch (Java)

    A CodeCrafters challenge solution: an HTTP/1.1 server built from scratch in Java with request parsing, routing, persistent connections, gzip compression and file read/write endpoints.

  4. HTTP Server from Scratch (JavaScript)
    2025 Completed Santhosh Laguduwa

    HTTP Server from Scratch (JavaScript)

    The same CodeCrafters HTTP/1.1 server challenge implemented in JavaScript (Node.js): request parsing, routing, keep-alive connections, gzip compression and file endpoints.

  5. Portfolio Website
    2025 Completed Santhosh Laguduwa

    Portfolio Website

    This site. A personal portfolio built with Next.js, TypeScript and Tailwind CSS, covering my IAM and full-stack work along with this roadmap.

  6. Solaras Light Portfolio
    2026 Completed Solaras Light

    Solaras Light Portfolio

    A game development portfolio for Solaras Light.

  7. Canyon Salvo
    2026 Completed Solaras Light

    Canyon Salvo

    A turn-based missile duel built with libGDX. Each turn both sides place a missile launcher and a flare dispenser, then fire at once, and the enemy learns your habits. Runs on desktop, in the browser and on Android.

  8. TN5250 Emulator
    2026 In Progress Santhosh Laguduwa

    TN5250 Emulator

    A modern IBM i (AS/400) 5250 terminal emulator built from scratch in Java 17. The protocol engine (Telnet negotiation, 5250 data stream parsing, EBCDIC conversion) is fully independent of the UI, with two front ends on top: a JavaFX desktop client and a Spring Boot browser client.

  9. OAuth 2.0 Server From Scratch
    2026 In Progress Santhosh Laguduwa

    OAuth 2.0 Server From Scratch

    A fully spec-compliant Authorization Server in Spring Boot, built without the Spring Authorization Server abstraction so that every grant type and token behavior is implemented by hand.

  10. Untitled Endless Driving Game
    2026 In Progress Solaras Light

    Untitled Endless Driving Game

    An endless driving game with a cyber style, built with Unreal Engine and targeting Android.

  11. Untitled Mailing Framework
    Planned Santhosh Laguduwa

    Untitled Mailing Framework

    A Java mailing framework to manage sending mail from Java applications.

  12. Polyglot IAM Suite
    Planned Santhosh Laguduwa

    Polyglot IAM Suite

    One Keycloak authorization server in front of three independently written resource servers — Spring Boot (Java), FastAPI (Python) and Express.js (Node) — each enforcing the same JWT validation and RBAC rules through its own idiomatic security stack.

  13. Zero-Downtime Legacy Migration Utility
    Planned Santhosh Laguduwa

    Zero-Downtime Legacy Migration Utility

    Migrates thousands of users from an old database or a legacy Okta instance into Keycloak using a lazy (just-in-time) migration strategy, so users see no service disruption or forced password resets on day one.

  14. Untitled Table Library
    Planned Santhosh Laguduwa

    Untitled Table Library

    A not-so-simple grid library.

  15. SSO Hub — Keycloak Identity Broker
    Planned Santhosh Laguduwa

    SSO Hub — Keycloak Identity Broker

    Federates three identity sources — Okta (corporate employees), a SAML 2.0 IdP and Google (customer/social login) — behind one Keycloak realm, with a Spring Boot API that normalizes every provider's claims into one internal identity shape. Covers the simpler two-IdP Okta + Keycloak employee/customer bridge as a base case along the way.

  16. The CI/CD IAM Automation Pipeline
    Planned Santhosh Laguduwa

    The CI/CD IAM Automation Pipeline

    Manages identity configuration entirely as code, so Dev, Staging and Prod environments deploy deterministically without manual changes in the admin UI.

  17. Untitled Racing Game
    Planned Solaras Light

    Untitled Racing Game

    A racing game in the spirit of SkyRoads and Nitronic Rush.

  18. Microservice Mesh Security & Token Exchange
    Planned Santhosh Laguduwa

    Microservice Mesh Security & Token Exchange

    Secures an ecosystem of Spring Boot microservices with the Backend-for-Frontend (BFF) pattern, keeping raw JWT access tokens out of browser storage to minimize security vulnerabilities.

  19. Game Engine Auth Toolkit
    Planned Santhosh Laguduwa

    Game Engine Auth Toolkit

    Implements the OAuth 2.0 Device Authorization Flow and PKCE natively inside Unreal Engine 5, Unity and Godot, all authenticated against a real Keycloak server.