Rajan Kalwar · Senior Software Engineer

I build reliable cloud and AI systems.

Senior software engineer building production systems on AWS—distributed backends, event-driven architectures, containerized workloads, and GenAI applications—engineered for reliability, security, observability, and cost.

AWSPythonTypeScriptServerlessContainersGenAI

Featured case studies

View all projects →

Client → API Gateway → Lambda → DynamoDB

API access controls with native AWS services

Designed a deployable access-control system using API Gateway usage plans for tier-specific throttles and quotas. A Lambda management API handles key and plan lifecycles, while DynamoDB stores metadata without retaining raw credentials.

  • Isolated administrative operations from protected workloads
  • Made propagation delays and non-transactional boundaries explicit

Read the case study·View repository

HTTP API → Lambda → SQS → SNS → Consumers

Resilient asynchronous fan-out

Engineered an event pipeline that buffers HTTP requests in SQS, processes them asynchronously with Lambda, and distributes results to independent notification and audit consumers through SNS.

  • Decoupled request handling through durable queueing
  • Retried only failed batch items and routed exhausted messages to a dead-letter queue

Read the case study·View repository

Internet → ALB → Private subnets → ECS

Private ECS services with explicit capacity trade-offs

Built comparable Fargate and EC2-backed ECS services behind an Application Load Balancer, keeping application workloads in private subnets while making the capacity-ownership trade-offs directly comparable.

  • Kept tasks and container instances off the public internet
  • Separated networking, capacity, image, and service concerns

Read the case study·View Fargate repository

2024–Present
US, Remote

we45

Software Engineer

Cloud security training provider and hands-on learning platform.

  • Develop, troubleshoot and maintain Backend supporting the learning platform, resolving platform issues and improving the stability of the overall services.
  • Maintain the cloud infrastructure and backend systems supporting the company's security learning platform, ensuring reliability, availability, and smooth delivery of hands-on cloud security sandbox environments.

2022–2024
Remote

ShopSwap Inc.

Senior Software Engineer

Early-stage brand collaboration platform for cross-promotion and referral tracking.

  • Designed and deployed cost-efficient serverless architectures on AWS using Lambda, DynamoDB, Cognito, API Gateway, and CloudFormation.
  • Built and operated containerized workloads on AWS ECS with private VPC networking, ECR, and least-privilege IAM permissions.

2021–2022
Remote

Preparie Inc.

Software Engineer

Marketplace for home-cooked food ordering and delivery.

  • Designed and developed GraphQL APIs using AWS AppSync, Lambda, and DynamoDB.
  • Built high-throughput DynamoDB workloads using single-table design, optimized access patterns, and scalable data modeling.

2019–2021
Hybrid

Bottle Tech

Cloud Engineer

Nepal-based technology company building in the IoT space.

  • Built managed API-as-a-Service solutions using AWS API Gateway, including API keys, usage plans, throttling, and rate limiting.
  • Contributed to the design and implementation of AWS infrastructure across multiple projects.

Technical skills

Languages and frameworks

PythonTypeScript / JavaScriptAPI design

FastAPI, Flask, Pydantic, AWS Lambda Powertools · NestJS, Fastify · REST, GraphQL, Server-Sent Events

AWS compute and APIs

ServerlessContainersComputeContent delivery

Lambda, API Gateway, AppSync, Cognito · ECS, Fargate, App Runner, ECR, Application Load Balancer · EC2, Auto Scaling, Lambda Function URLs · S3, CloudFront

Data and event systems

DatabasesMessagingOrchestrationData modeling

DynamoDB, PostgreSQL, RDS, Redis, MongoDB, ArangoDB · SQS, SNS, EventBridge, DynamoDB Streams · Step Functions, event-driven consumers, asynchronous fan-out · DynamoDB single-table patterns, SQL and NoSQL access patterns

Networking, identity, and security

NetworkingIdentityAPI controlsSecurity practice

VPC, public and private subnets, NAT, security groups, private DNS · IAM, Cognito, OAuth, SAML, OIDC roles · Usage plans, rate limits, API keys, field-level authorization · Least-privilege permissions, private workloads, secure artifact delivery

Production GenAI

FrameworksRetrievalDeliverySystem concerns

LangChain, LangGraph, LlamaIndex · RAG, vector retrieval, document ingestion, context selection · Model-provider integration, response streaming, tool calling · Secure document access, token usage, API boundaries, operational cost

Infrastructure and reliability

Infrastructure as codeDeliveryReliabilitySupporting cloud

CloudFormation, Serverless Framework · Docker, ECR, CI/CD pipelines, staged deployments · Dead-letter queues, partial batch failures, retries, idempotent consumers · GCP App Engine, Cloud Run, Firebase, Firestore, Pub/Sub

AWS

Feb 11, 2024 · 6 min read

AWS AppRunner

Containers are one of the most reliable ways to build and ship services, and AWS alone gives you more than a dozen ways to run them. Rather than walk the entire catalog, this note zooms in on one: AWS AppRunner — where it sits next to ECS, why it shines for small auto-scaling services, and a CloudFormation template to spin one up. First, a quick look at the popular ways to run containers on AWS:

Continue reading →

TECH

Jan 3, 2024 · 2 min read

Pre-commit hook setup with husky

Keeping code consistent and tested gets harder the more people touch a repo, and sooner or later some unlinted code or a failing test slips through. Husky heads that off by running linting, formatting, and tests automatically before a commit lands. This note sets up pre-commit hooks with Husky and lint-staged in a fresh NestJS project.

Continue reading →

AWS

Dec 25, 2023 · 3 min read

AWS S3 storage tiers

S3's appeal isn't only durability — it's the range of storage tiers that let you trade retrieval time for cost. This note breaks down each S3 storage class and shows how to use Lifecycle Configuration to automatically transition objects between tiers as they age, so you keep availability where it matters and trim cost where it doesn't.

Continue reading →

Have a cloud or AI system to build?

I am interested in senior engineering work involving AWS architecture, distributed backends, platform reliability, and production GenAI.

© 2026 Rajan Kalwar

Privacy: analytics load only after consent.