Platform modernization
Moved tightly coupled monoliths to domain-focused Spring Boot microservices with phased Strangler migrations, clear service boundaries, and cloud-native operations.
Public profile · gaddala.dev
Subose Gaddala
Principal Software Engineer specializing in Java full stack, data platforms, and applied AI.
Data in motion
Built real-time, batch, and asynchronous flows with Kafka, Flink, SQS, Spring Batch, Snowflake, MongoDB, PostgreSQL, S3, and serverless components.
Secure full stack
Delivered Java, Spring Security, Angular/React, JWT/RBAC, Docker/Kubernetes, Jenkins, Terraform, and production observability in regulated environments.
Applied AI
Shipped RAG assistants with vector search, Amazon Bedrock models, MCP tool access, citations, and guardrails — keeping existing systems as the system of record.
Experience
Selected programs
Mar 2024 – Present · Maryland (remote from Texas)
Senior Software Developer · Department of Human Services — Maryland.gov
Modernizing Eligibility & Enrollment and shipping an AI assistant that answers SNAP, Medicaid, and TANF questions from grounded policy — not free-form model output.
Apr 2023 – Feb 2024 · Austin, TX
Senior Software Engineer · Apple
Payments reconciliation: failed, missing, and anomalous transactions from distributed systems, surfaced through alerts and dashboard APIs.
Sep 2022 – Apr 2023 · Omaha, NE
Senior Software Engineer · Mutual of Omaha
Customer identity and access management on OKTA for insurance applications.
Writing
Technical articles
Featured
Keep the files off the app servers
A serverless S3 upload/download platform: two IAM roles, API Gateway, presigned URLs, SQS, processor Lambda, and PostgreSQL metadata.
Read the article2026-09-02
SSO across split portals — SAML 2.0, OpenID Connect, and logout that must not take the estate with it
How a worker landing page federates independently deployed portals with SAML 2.0 or OpenID Connect — and why logging out of one application was returning 500s and a spinner on the others.
2026-08-30
Platform security principles
How I expect a platform to be built: identity as the perimeter, least privilege, segmentation, secure defaults, small blast radius, tenancy isolation, auditability, and a control plane that is not the data plane.
2026-08-29
Secure coding practices
A working checklist for input validation, SQL injection, authn/authz, least privilege, privacy, CSRF, exceptions, secrets, dependencies, encryption, deserialization, file uploads, and code review.