Sushant
Kumar

Feb 2025 – Sept 2025

• Zero Trust Access Engine: Engineered just-in-time, time-bound access controls across AWS, databases, Kubernetes, and SaaS platforms, replacing standing privileges with fine-grained, auditable permissions for both human and non-human identities (API keys, service accounts).
• Natural Language Access Graph: Built an AI-powered query engine over identity and access data, allowing security teams to explore user-role-resource relationships and surface risk signals like overprivileged identities using plain English — no SQL required.
• AI Security Insights: Developed an AI-driven insights layer that continuously analyzed identity posture across connected resources, detected access anomalies, and proactively surfaced threats to security teams via dashboard and Slack.
• Slack-First Access Workflows: Built end-to-end access request and approval workflows with a Slack-first interface, enabling users to request, approve, and receive time-bound credentials without leaving their existing tools.
• AI Access Reviews: Implemented automated access review campaigns using LLM-assisted workflows, replacing manual review processes with structured, auditable flows — producing compliance-ready audit trails for governance teams.
• Multi-System Integrations: Engineered an integrations layer supporting cloud providers, databases, Kubernetes clusters, and IDPs, each with distinct configuration and auth flows, unified under a single access management platform.
• Product adopted by high-growth tech companies including Sanas, WebEngage, KFintech, and Rigi during beta, ultimately leading to acquisition by Rubrik.

April 2024 – Nov 2024

• Built a liveness detector (Mediapipe + AWS Rekognition + LLM embeddings) as a KYC alternative to Hyperverge — matching accuracy at a fraction of the cost and reducing credit fraud significantly.
• Built the customer retention & loyalty platform with 300+ brand discounted gift card listings, integrating Pine Labs APIs for gift card booking.
• Built a notification service for push notifications and SMS to customers for platform discovery.
• Implemented AI-powered semantic search for brand discovery on the category page, going beyond keyword matching to understand user intent.
• Built a CMS portal for brand onboarding with a maker-checker workflow, replacing a mail-based approval process and cutting onboarding time from 1 week to under 10 minutes.
• Integrated the platform with the Loan Origination Service for repeat borrowers, letting them claim their processing fees as equivalent-value brand gift cards.

June 2022 – Nov 2023

• Built a merchant settlement engine in Java — aggregates transactions, dispatches grouped payouts, handles multi-mode settlement across escrow accounts with full reconciliation and refund support.
• Engineered the BNPL disbursement system with co-lending support, managing funds disbursed across multiple lender-merchant UTRs and escrow accounts.