AI Engineer L2
Surbana Technologies Pte. Ltd. · Remote (Singapore)
2025-12 – Present
• Architected an agentic analytics platform serving 20 tenants through chat, real-time voice, an embeddable SDK
widget, dashboards and scheduled reports, with a LangGraph agent working across 6 custom MCP tool servers (SQL,
semantic layer, RAG, charting).
• Built a governed data layer: a Cube semantic layer as the default source, with data models generated from live schema
introspection, and a Text-to-SQL fallback over PostgreSQL and MSSQL (temperature-0 single SQL author, code-enforced
structural checks, an LLM reviewer for tenant rules and an automatic repair loop), so chat and voice return the same
SQL for the same question.
• Designed three-level multi-tenancy (tenant, sub-tenant, user) with resource inheritance, a per-resource sharing
matrix and per-user bring-your-own-database connections, served by a connection pool manager sized for customer-
owned databases.
• Enforced zero-trust AI tool access through Agent gateway (RS256 JWTs, rotating JWKS, tenant-scoped claims) that
injects caller identity as hidden tool arguments the LLM cannot see or spoof, with per-user row-level security in
PostgreSQL, MSSQL and the Cube semantic layer that fails closed on pooled connections.
• Cut agent initialization latency by 75% with parallel async loading and per-date agent caching; kept model context
flat at any result size by passing query results between MCP servers by reference through a Redis artifact store and
stripping bulk tool payloads from the model’s view.
• Added human-in-the-loop clarification (LangGraph interrupts with resumable streaming) so the agent asks instead
of guessing on ambiguous questions, plus a stream completion contract that detects cut-off turns, saves them to the
thread, and tells them apart from a user’s Stop.
• Designed a composable, database-driven guardrail pipeline (keyword filtering, LLM safety classification, Presidio PII
redaction, conversation summarization) that tenants configure without code changes, extended to RAG ingestion.
Stack: Python, FastAPI, LangGraph, LangSmith, AWS Bedrock, MCP, Cube, PostgreSQL, MSSQL, Redis, Next.js, Docker