NIMISH KARAN

Architected and implemented a dual-surface, framework-agnostic enforcement layer returning allow/block/require-approval, integrating with SecureBrowser (Playwright) and MCP gateway for agent tool calls to downstream services (payments, code hosting, databases).

Developed a high-performance ingestion and evaluation pipeline that normalized intercepted actions into a uniform ActionEvent, running a cheapest-first cascade across 200+ terms and 13 categories.

Optimized the evaluation pipeline using phonetic/stemming and on-device bge-small embeddings (~67 MB, CPU, ~2 ms latency, no LLM in loop), effectively grading actions from CRITICAL to LOW against YAML policies.

Designed and built a scalable per-session multi-agent coordination system on a single host, incorporating role-based permissions, per-agent/shared rate limits, and an append-only hash-chained evidence system for horizontal scale-out via Redis-backed distributed counters and locks.

Set technical direction for a distributed platform spanning 10+ services, aligning cross-team architecture around service boundaries, scalability, resiliency, and observability while driving capacity planning, failure-mode analysis, and SLO-based reliability across critical workflows.

Established the architecture and governance for a 99.9% SLA event-driven data platform, defining schema-governed contracts, versioned data-access APIs, RBAC, partitioning, and query patterns that became org-wide standards for secure, CCPA-compliant data access.

Architected a robust subscription billing platform supporting ~$800M in annual payment volume and 2M+ subscribers, designing an asynchronous renewal pipeline with bounded-concurrency workers, idempotent charge handling, retry with jitter, and backpressure to absorb renewal spikes.

Designed and implemented a highly available campaign and notification platform using Kafka, Redis, PostgreSQL, and horizontally scaled Kubernetes workers, enabling subscription price-drop alerts, targeted voucher campaigns, and controlled feature pilots through signed time-bound on-demand URLs for selected demographic cohorts.

Served as a technical lead across multiple teams, reviewing architecture proposals, resolving complex cross-service dependencies, mentoring 5+ engineers, and raising engineering standards for data modeling, indexing, failure handling, and operational rigor.

Built a real-time parcel orchestration platform (B2B and B2C) handling millions of deliveries a month, and designed streaming pipelines (Kafka + gRPC) with partitioned consumer groups for parallel processing, ensuring ordering guarantees and exactly-once delivery.

Designed and implemented a reverse-logistics microservice with state-machine approval workflows, anomaly detection, and fraud prevention capabilities, cutting operational costs by 30% and significantly reducing fake returns through data-driven validation rules.

Scaled the infrastructure across 493 hubs using dynamic partitioning, connection pooling, and read-replica routing to achieve sub-second query latency at scale.

Improved last-mile dispatch efficiency by 20% through dynamic batching and SLA-aware scheduling, significantly raising CSAT, and deployed on Kubernetes (HPA) with OPA + Istio for context-aware access control.

Optimized high-volume data pipelines with SAX/StAX streaming parsers, reducing latency and memory use for XML workflows processing millions of records, and designed batch processing with configurable parallelism and backpressure.

Transformed monolithic modules into REST microservices with dedicated data stores, designing a schema-migration approach that ensured zero-downtime and backward-compatible deployments.

Developed comprehensive test frameworks (TDD, contract testing) to maintain backward-compatibility for legacy SOAP integrations and automated CI/CD pipelines with static analysis and regression suites.

Built a real-time fleet-tracking platform for Quikmile, ingesting high-volume TCU telemetry through low-latency streaming pipelines and designing a geofencing system using polygon-based spatial queries (R-tree indexing) for precise location alerts and automated fleet workflows.

Designed and implemented event-driven telemetry pipelines with partitioned streams and consumer groups for Quikmile, enabling streaming aggregations for trip analytics (route efficiency, idle time, SLA adherence) via windowed computations and incremental materialized views.

Developed a Bitcoin exchange on Spring Boot for Oodles, featuring secure wallet APIs (ECDSA, AES, BIP32/44), P2P escrow with multi-signature transactions, and distributed ledger reconciliation.