Shivam Kumar

Go · Gin · PostgreSQL · SQLC · Redis · Asynq · gRPC · Docker · Kubernetes · AWS EKS

Built RESTful APIs for account management, balance tracking, and money transfers using Go and Gin. The service also exposes gRPC APIs through gRPC Gateway, supporting HTTP and gRPC clients.

• Designed the PostgreSQL schema and implemented database access with SQLC. Transaction handling addresses isolation levels and deadlock prevention for consistent financial operations.
• Implemented JWT and PASETO authentication, session management, and secure refresh-token cookies. Authentication is part of the API flow rather than an isolated interface feature.
• Used Redis and Asynq for asynchronous task processing and email notifications, alongside structured logging and graceful server shutdown.
• Containerized the service with Docker and automated testing, builds, and deployment using GitHub Actions. Deployed to Kubernetes on AWS EKS with secrets, ingress, HTTPS, and automated TLS certificate management.

Next.js · Node.js · Express.js · MongoDB · Firebase · Gemini · RAG · Docker

Built a platform for exploring India’s BNS, BNSS, and BSA criminal laws using Next.js, Node.js, Express.js, and MongoDB. The frontend and backend connect legal content with features people can return to: bookmarks, chat history, and authentication.

• Developed REST APIs for legal-content search, bookmarks, chat history, authentication, and AI usage-credit tracking.
• Integrated Google Gemini with a retrieval-augmented generation pipeline over official legal PDFs. Responses stream to the interface and include source references for context-aware explanations.
• Implemented Firebase Authentication, custom OTP email verification, and server-side token validation.
• Dockerized the backend deployment, connecting the frontend experience to its API and data services.

Go · Cobra · PostgreSQL · pgx · Docker · bcrypt · TOTP · Unit testing

Built a Dockerized Go authentication system using Cobra and PostgreSQL through pgx. The project covers user registration, login, password security, multi-factor authentication, and session management.

• Used bcrypt for password hashing and implemented account lockout after five failed attempts.
• Added Google Authenticator-compatible TOTP MFA, including enrollment coverage in unit tests.
• Implemented configurable session expiration, session-token revocation, and hashed session-token storage.
• Wrote unit tests covering password hashing, account lockout, session expiration, token storage, and TOTP enrollment.