# Sankalp Nimbhorkar > CDN, Security, Technical Vision, Performance at Scale Location: Belmont, California, United States Profile: https://flows.cv/sankalpnimbhorkar As a Software Engineer at Akamai Technologies, I apply my expertise in CDN and distributed systems to deliver scalable and reliable backend solutions for the world's largest and most trusted cloud delivery platform. With over 10 years of experience in this role, I have contributed to various projects related to CDN configuration management, cache management, and authentication/authorization, using technologies such as RESTful microservices, TCP/IP, and Linux. My mission is to improve the performance, scale, and availability of Akamai's services and products, and to enable our customers to have a fast, secure, and seamless online experience. I have demonstrated my skills and achievements by leading the design and implementation of a generic and extensible validation platform for CDN features, reducing the end-to-end deployment time by 75%, and provisioning for high availability of cache purge operations, reducing the completion time by 80%. I am passionate about learning new technologies, solving complex problems, and collaborating with talented teams. ## Work Experience ### Software Engineer and Architect @ Akamai Technologies Jan 2020 – Jan 2026 | Santa Clara, California, United States In this role I grew a lot as a builder and an architect in a matrixed organization. In Security Technology Group (STG) BU, the product Client-side Protection and Compliance (CPC) faced scale challenges with traffic growing from 200 events per second to 1 million events per seconds. Some of these learnings became BU template. Customer-facing config API: API designed with automation-first approach. Also scalable backpressure framework withstands high polling rate (at times, per minute) from customer SIEM integrations. Edge cache and protection bundle: Protection within web page is handled by a JS bundled which is injected at the CDN edge. Caching helps minimize user visible page load latency. Script Inventory: This feature is a PCI-DSS 4 requirement, an inventory of all the JS scripts running across payment pages. Traditionally, this list is discovered as a byproduct of analytics data pipelines. In order to make this customer-presentable and to allow operations like defining justification rules, customer-visible data source needs to be in sync with the analytics pipeline. The complication is, analytics pipelines process a million events per second. So the initial implementation with RDBMS eventually hit bottlenecks. This required architectural change to No-SQL databases while relaxing transactional guarantees from different operations. This project kickstarted architecture paradigm shift within the BU for workloads with high data volume and high write volume. Data analytics pipelines Initial MVP only had analytics pipeline to classify script behavior patterns, mostly for detecting sensitive data skimming. Later on as we developed more analytics for discovery of sensitive data fields, payment pages (later extended to discovering all paths with any sensitive data field), general SIEM capabilities and with the growth of web traffic protected, we required different design changes to customer config and CDN injection as well. ### Lead Software Engineer @ Instart Logic Inc Jan 2014 – Jan 2020 | San Francisco Bay Area Tech lead for CDN "control plane". In this role I learned to architect performant large scale distributed systems and developed soft skills for cross-functional technical leadership. CDN Config Managemet: • RESTful microservices to facilitate retrieval, update, version control, validation and distribution of config (control plane) for CDN dependent and independent features. • Implemented a generic and easily extensible validation platform for • Reduced end-to-end deployment time by 75% CDN cache management: • Set of microservices communicating over message queues for validating, distributing and handling cache purge operations. • Reduced end-to-end completion time by ~80% • Provisioned for high availability Authentication/Authorization: • RBAC subsystem for user interaction with control plan platform. • API gateway pattern to simplify architecture. SSL certificate/key provisioning: • Subsystem to securely generate SSL keys and procure and distribute keys and certificates to edge proxies. In Feb 2020, Instart business and IP were acquired by Akamai, Inc. ### MTS @ VMware Jan 2012 – Jan 2014 | Palo Alto Work on HostAgent, which is the lowest layer of management stack and acts as communication module between ESX/vSphere host and higher management layer (typically vCenter Server) Work on various features relates to VM management, host management and scalability. ### Data Part Intern Engineer @ Samsung Electronics Jan 2011 – Jan 2011 | Suwon, South Korea Packet Data Architecture (IPv6) in UMTS networks. Worked on communication module between WCDMA chipset and higher layers. Gained hands-on experience with performance modeling of mobile network using Agilent box ### Grader/TA @ North Carolina State University Jan 2011 – Jan 2011 CSC 474 ### Grader/TA @ North Carolina State University Jan 2010 – Jan 2010 CSC 244/246 ## Education ### MS in Computer Science North Carolina State University ### B. Tech in Computer Engineering Veermata Jijabai Technological Institute (VJTI) ### High School (HSC) in Science (General) R L T College of Science, Akola ## Contact & Social - LinkedIn: https://linkedin.com/in/sankalpnimbhorkar --- Source: https://flows.cv/sankalpnimbhorkar JSON Resume: https://flows.cv/sankalpnimbhorkar/resume.json Last updated: 2026-04-01