Sanjoy Kumer Deb
12+ years exp
Java
Active 1 day ago
Invite to interview
Message
Download CVCV
Overview
Technical skills
Roles
Overview
Java developer (Middle) specializing in smart-card secure communication and cryptographic protocol implementation. The strongest proven skill is implementing Secure Channel Protocol flows and cryptographic primitives as shown in com.utils.SCPUtils and the offCard Terminal/TerminalOperation classes. The public codebase lacks production-grade error handling, secrets management, structured observability and automated tests, and it does not show HTTP APIs or large-scale service decomposition.
Technical skills
Java• Middle • 12y+
Java
Spring Framework
Spring Data JPA
Hibernate
Spring MVC
Lombok
DevOps
Docker Compose
Middle Backend Developer
Confidence: Medium Generalist
Java developer (Middle) specializing in smart-card secure communication and cryptographic protocol implementation. The strongest proven skill is implementing Secure Channel Protocol flows and cryptographic primitives as shown in com.utils.SCPUtils and the offCard Terminal/TerminalOperation classes. The public codebase lacks production-grade error handling, secrets management, structured observability and automated tests, and it does not show HTTP APIs or large-scale service decomposition.
API Design
2/10
How well APIs are designed
No HTTP/REST API surface, versioning or idempotency patterns; small internal command/factory interfaces exist but API design is minimal and local to the CLI/terminal flow.
Data Layer & Database
3/10
Working with databases
Uses JPA/Hibernate with Envers auditing and a programmatic EMF configuration, but lacks migration history, advanced transaction/isolation controls, hand-tuned SQL or test coverage.
Scalability & Performance
3/10
Handling load and speed
Some scalability thought in backend task execution via a configured thread-pool executor and @EnableAsync; no caching strategies, queue-based decoupling, connection-pool tuning or measured performance work.
System Architecture
3/10
Overall system structure
Clear package separation and domain folders (offCard, transmitter, utils, des, and a separate Envers sample) and use of factory pattern, but overall architecture is project/sample-level rather than a reasoned service decomposition for production systems.
Security & Auth
3/10
Protecting data and access
Domain-level cryptography knowledge is evident (session key derivation, CMAC, cryptogram generation) but there are insecure/practical issues (hard-coded base keys, caught-and-ignored exceptions, plaintext logging); no token lifecycle or authorization subsystems are present.
Reliability & Observability
2/10
Stability and monitoring
Minimal observability and resilience: ad-hoc System.out logging, swallowed exceptions and no structured logs, no retries/backoff, and only basic transactional config in the JPA sample.
Verified artifacts
Expertise
Java• Middle
Databases & Vector Storage• Middle
Industries
Cybersecurity• Middle
Technologies
Hibernate
Recommendations
- Develop secure smart-card or payment-adjacent integrations where cryptographic protocol logic is required, using the SCP/Terminal code as the starting point.
- Harden cryptographic code for production: remove hard-coded keys, adopt secure key management, add constant-time considerations and comprehensive error handling and tests.
- Build Spring-based backend services that expose the protocol flows behind a secure API and add structured logging, metrics and retries with backoff.
- Own JPA-based data models with auditing by extending Envers usage and adding migration history, connection pooling and integration tests.
Repositories
The developer's experience in this domain has been verified based on AI analysis of the following repositories:
Middle QA Engineer
Confidence: Medium Generalist
Backend Java developer (Middle, tier_score 3.0) specializing in Spring-based microservices and external API integration. The strongest proven skill is building an external-API ingestion service and persisting harvested data, as implemented in remote-library/core/service/YoutubeApiServiceImpl.java. There is little to no public evidence of test automation infrastructure, CI-integrated test strategies, or contract and performance testing in the human-authored code.
Test Automation Frameworks
Building automated tests
Not evidenced in public code
Test Coverage & Strategy
What and how to test
Not evidenced in public code
API & Integration Testing
Testing how parts work together
Not evidenced in public code
Performance & Load Testing
Testing speed under load
Not evidenced in public code
Bug Reporting & Analysis
Finding and describing bugs
Not evidenced in public code
CI Test Integration
Running tests automatically
Not evidenced in public code
Technologies
Java• Middle • 12y+
Spring Framework
Docker Compose
Spring MVC
Spring Data JPA
Lombok
Docker• mentioned only
Recommendations
- Lead development of backend microservices that integrate with external REST/third-party APIs and persist results, e.g., data ingestion pipelines and ETL-style services.
- Implement robust API-client modules and error-handling for external integrations, improving retry/backoff and replacing broad catch blocks with structured exception handling.
- Build DTO/entity mapping and domain transformation layers for new services, following the patterns in ParamAndEntityBuilder and RequestAndParamBuilder.
- Add test automation around API contracts and negative-paths (schema validation, mocked external responses) to harden existing external-integration code.
Repositories
The developer's experience in this domain has been verified based on AI analysis of the following repositories: