PORTFOLIO
STATUS: ONLINE | SECURE CONNECTION
// HELLO, WORLD! I AM

LASINDU CHANUKA

>  Role:  |

Dedicated IT Executive specializing in banking and enterprise infrastructure. With proven track record of maximizing system uptime and driving efficiency across NOC and Infrastructure Operations.

// CORE STACK HIGHLIGHTS:
Cloud & Identity Security & Firewalls Enterprise Networking IT Operations Systems & Automation Databases Web Development
> Flagship Project // Technical Capabilities
// 02. FLAGSHIP SHOWCASE

PROJECT KASH

Zero-Based Personal Finance Web Application engineered with Next.js and a zero-cost serverless Google Sheets ledger.

Kash enforces strict zero-based budget allocations ($Income − $Allocations = 0) to eliminate unassigned capital. Features real-time transaction guards, Google OAuth session security, and dynamic edge API dispatching.

< Or double-click the phone to flip >

// KASH ARCHITECTURAL BREAKDOWN

⚡

NextAuth.js

JWT session encryption and secure HTTP-only cookie authentication handling.

☁️

Google Cloud OAuth 2.0

Zero-trust identity verification and restricted scope token authorization.

📊

Google Sheets API

Communicates via Service Account credentials for persistent serverless ledger storage.

NextAuth.js → Google Cloud OAuth 2.0 → Google Sheets API
// 03. CAREER CHRONOLOGY

MY EXPERIENCE

🏢

Technical Officer

Ceylon Biscuits Limited

Feb 2026 – Present

Provide comprehensive enterprise IT support and infrastructure troubleshooting. Administer identity and access management using Microsoft Entra ID and monitor enterprise security posture via CrowdStrike endpoint alerts.

Microsoft Entra ID CrowdStrike Falcon Enterprise IT Support

Delivered specialized remote and onsite technical support for core banking users. Executed installation, configuration, and continuous maintenance of core banking software, hardware, and specialized peripherals ensuring zero disruption to critical financial operations.

Core Banking Support Remote Support Hardware Maintenance
🏦

IT Support Officer

Pan Asia Banking Corporation

Aug 2025 – Feb 2026
🛠️

CCTV & Network Technician

Part-Time Contractor

6 Months

Handled physical infrastructure deployments, basic server troubleshooting, and continuous network connectivity maintenance.

Physical Infrastructure Server Troubleshooting Network Maintenance
// 04. CORE TECHNICAL MATRIX

CORE TECHNICAL STACK

🪟

Identity & Systems Administration

The Microsoft Ecosystem
  • Microsoft Entra ID & Active Directory: Identity governance, user provisioning, and AD DS domain services.
  • Microsoft Intune: Endpoint management and automated security policy deployment.
  • Windows Server & OS: Windows Server 2025 administration & enterprise OS troubleshooting.
  • Automation: PowerShell scripting & custom suite development (e.g. Nyx Optimizer).
Entra ID Active Directory Intune Server 2025 PowerShell
🌐

Enterprise Networking

Cisco & Fortinet Backbone
  • Core Routing & Switching: Cisco enterprise networking (CCNP level), TCP/IP, DNS, and DHCP.
  • Wireless Infrastructure: Enterprise switches, Wi-Fi configuration, and WAP management.
  • Cloud Networking: Aviatrix Multicloud environments & AWS Cloud Essentials.
Cisco CCNP TCP/IP & DNS WAPs Aviatrix AWS Cloud
🛡️

Cybersecurity & Endpoint Protection

EDR & Defense Operations
  • Endpoint Detection & Response (EDR): CrowdStrike Falcon & Microsoft Defender for Endpoint.
  • Perimeter Security: Fortinet FortiGate 7.6 firewall operations & security policy enforcement.
  • Threat Analysis: Baseline malware analysis & Blue Team defense operations.
CrowdStrike MS Defender FortiGate 7.6 Blue Team
🗄️

Databases

The Banking Backend
  • Oracle Database: Management of Oracle DB instances and production data availability.
  • Oracle SQL: High-performance SQL querying, data verification, and transaction auditing.
Oracle DB Oracle SQL Data Auditing
⚙️

ITSM & Hardware Asset Management

Service Desk & Peripherals Management
  • Service Desk: ManageEngine for end-to-end incident lifecycles and SLA compliance.
  • Asset Management: Full lifecycle management for laptops, desktops, basic servers, and smart TVs.
  • Specialized Peripherals: Devices like fingerprint scanners, self-service kiosks, and scanners/ printers.
ManageEngine Asset Lifecycle Fingerprint Scanners Banking Kiosks Branch Printers
// 05. TACTICAL ARSENAL

SPECIALIZED PROJECTS

01
POWERSHELL / AUTOMATION

Nyx Optimizer

Windows enterprise performance & security hardening suite powered by automated PowerShell automation scripts.

Invoke-NyxOptimization.ps1
PS C:\> < Hover card to run script >
02
NETWORKING / PROXY

V2Ray Infrastructure

Resilient anti-censorship communication conduit engineered with VMess/VLESS protocols and automated fallback rules.

Lock TLS 1.3 Encryption
Globe Custom Domain Fronting
Route Dynamic Proxy Routing
Shield CDN WebSocket Obfuscation
Client —> CDN / TLS —> V2Ray Core —> Open Web
03
VIRTUALIZATION / GRUB DUAL-BOOT

Offensive Security Lab

Bare-metal custom dual-boot environment engineered for dual workflows: performance optimization vs penetration testing.

🪟 Win11 ReviOS Low-latency Dev & Gaming
  • Telemetry Stripped
  • Process Prioritization
  • Custom Kernel Tweaks
🐉 Kali Linux Pentesting & Security Audit
  • Metasploit & Burp Suite
  • Zsh / Hyprland Dotfiles
  • Wireless Auditing Stack
GRUB
04
STATIC ARCHITECTURE

Immunisec.me

Zero-trust minimalist portfolio platform built with strict Content Security Policies and zero external client dependencies.

FrameworkVanilla HTML5 / CSS3 / JS
Security HeadersStrict CSP, HSTS, X-Frame
Tracking0 Cookies / 0 Telemetry
Performance100/100 Lighthouse score
// 06. TOP-TIER CERTIFICATIONS

CREDENTIAL HIGHLIGHTS

🌐 CISCO NETWORKING ACADEMY

Cisco CCNP Enterprise

Core Networking Certification

Advanced enterprise networking covering dual-stack IPv4/IPv6 routing protocols, BGP, OSPF, infrastructure security, and SD-WAN architectures.

Core Networking Credential
☁️ MICROSOFT LEARN

Microsoft Applied Skills

Administer Active Directory Domain Services

Verified domain controller deployment, AD DS identity administration, Group Policy enforcement, hybrid Azure AD sync, and access security.

Verified AD DS Credential
🛡️ FORTINET TRAINING INSTITUTE

Fortinet Certified Associate

Fortinet Certified Associate Cybersecurity

Enterprise firewall administration, threat landscape evaluation, FortiGate security policy enforcement, and Zero Trust Access (ZTNA).

Active Cybersecurity Credential
🎖 View All Credentials on Credly →
// 07. GET IN TOUCH

CONTACT ME

Reach out for enterprise IT support, network security inquiries, or software collaboration.

// DIRECT CHANNELS

Connect directly via professional profiles or instant messaging channels:

// SMART ROUTING ARCHITECTURE

Project Kash uses dynamic request routing in Next.js to minimize API round-trips and optimize throughput when interacting with serverless backends:

01
Client Request Interception: Edge routes validate incoming payload schemas before passing data downstream.
02
Intelligent API Caching: Frequently accessed financial categories are cached with staggered revalidation triggers.
03
Batch Sync Queue: Multi-entry financial allocations are batched into single HTTP payloads to prevent hitting Google API rate limits.

// SERVER-SIDE OVERDRAFT PROTECTION

In Zero-Based Budgeting, every dollar must equal zero ($Income - $Allocations = 0). Kash enforces this with strict server-side transaction assertions:

async function validateTransaction(payload) {
  const currentBalance = await fetchLiveLedgerBalance();
  if (payload.amount > currentBalance.unallocated) {
    throw new Error("OVERDRAFT_PREVENTED: Zero-based budget allocation exceeded");
  }
  return await commitToGoogleSheetsServiceAccount(payload);
}

This mechanism prevents client-side tampering by guaranteeing that balance updates are verified server-side before persisting to the Google Sheets backend.