Pavan Sai Lankalapalli

Software Engineer @DigitalOcean

NY, US

Implemented the backend development of DigitalOcean’s enterprise-grade Single Sign-On (SSO) platform, enabling organizations to securely authenticate users via OIDC with Identity Providers like Okta. Designed and implemented a modular and scalable system using Golang, integrating deeply with the internal Identity and Access Management (IAM) ecosystem. Key Contributions: • Designed and developed core services including SSO API, SSO Aggregator, and SSO Core Service to support OAuth2 Authorization Code Flow. • Built secure, stateless session handling with encrypted JWT tokens and handled SSO configuration via gRPC and Protobuf. • Implemented Just-in-Time (JIT) provisioning, dynamically creating user profiles, relations, and assigning team/organization roles at login time. • Integrated with key IAM services: • Identities Service – Managed subject-context-realm relations • Entitlements Service – Granted and revoked RBAC roles • Policy Engine – Performed fine-grained access checks • User Metadata (UMD) – Retrieved onboarding and user state info • Audit Service – Logged all access and role-change events for compliance • Enabled multi-region support, secure communication via mTLS, and resilient fallback handling using internal service discovery (EDS). • Supported internal and external rollout using feature flippers, Stage2 testing, and smoke-tested UAT pipelines.Tech Stack:Golang, gRPC, Protobuf, Kafka, PostgreSQL, Docker, Chef, Okta (OIDC), JWT, mTLS, EDS, Cloudflare, JFrog Artifactory Impact: • Shipped a secure and scalable SSO foundation used by internal teams and SMB customers. • Improved onboarding, authentication, and RBAC consistency across DigitalOcean’s platform. • Contributed to a long-term roadmap supporting future IdPs, SAML, SCIM, and federation capabilities.

SRM University, AP - Amaravati

Bachelor's of Technology

Northeastern University

Master's degree