Software Engineer · KPMG India
I build fast, reliable systems, from identity governance platforms to full-stack products. Backend-leaning across Java, Go and Linux, comfortable end to end. Reach me at suryansh@archdev.in.
What I work with
A pragmatic full-stack engineer with a backend bias: strongest in the JVM and Go ecosystems, comfortable across the stack and automation.
Selected work
A few things I've been building: an enterprise OS, a compliance product, and some frontend R&D. Open any card for the full case study.
Featured · MVP in dev
An enterprise OS: a unified operating layer that brings an organization's tools, workflows and data into a single system, with shared identity and one data model across every module. Currently in active development toward its MVP.
MVP ready
A product I've been building: AuditFlow streamlines audit and compliance workflows, giving teams less friction and clearer accountability. The MVP is ready; I built the token-driven design system and the theme-aware marketing site alongside the product UI.
A small-scale CMS I used to sharpen my frontend skills. It explores a lightweight UI library built on the Shadow DOM to replace React where it isn't needed, plus islands of micro React apps; e.g. embeddable chat widgets inside HTMX or Shadow-DOM-based sites.
Live
A read-only GitHub repo browser and forum/issues board for this site, built as a dockable, resizable workspace instead of a static page: branch switching, syntax highlighting, commit diffs, all on a Cloudflare Worker and Firestore with no persistent backend.
Tool · runs in your browser
Five SailPoint tools in one page: convert an IdentityIQ XML export to ISC objects, score the migration gaps, test transforms offline, bulk-edit entitlement owners, and split certification campaigns under the size limit. Everything runs in your browser.
Writing
I occasionally write about the things I work on: identity, AI, Linux, and where the craft is heading. No schedule, just when I have something worth saying.
A full crash course in plain language: AI vs ML vs DL, how a language model works inside, prompting and RAG, agent frameworks and multi-agent systems, optimization and guardrails, and how it all becomes a real, safe, compliant architecture for identity and access management.
Read →I've spent real time in both. Here's the honest version of why Identity Security Cloud is the better bet for most teams, and the cases where IdentityIQ still earns its keep.
Read →I've been writing code for about six years, two and a half of them professionally, which means my whole working career has happened inside this AI shift. This is my honest read from that vantage: what has changed, what hasn't, and the bets I'm making.
Read →Arch has a reputation for being hard. It isn't, really: it's just honest. Here's what makes it different, and how to install it end to end, finishing with the script I use every time.
Read →A rolling-release system that's always current sounds scary until you have an undo button. Btrfs snapshots give you exactly that: roll a bad update back in seconds, and back up so the machine is never truly beyond repair.
Read →Tinkering
One Bash script that takes a fresh Arch base install to a usable desktop: locale, user, services, bootloader and KDE, with sane interactive prompts. It's the twenty commands I'd otherwise retype every time, written down once.
Say hello
Have a project in mind or just want to connect? Drop a message or reach me directly.