Gagandeep Singh

Experience

Where I've worked

• Senior Software Engineer · ServiceNowMar 2025 – Present▸

  Engineer on the API authentication team, leading auth work for AI-era use cases.

  • Led the architecture and delivery of a third-party IdP trust feature enabling AI clients (through MCP servers) to sign in with enterprise IdPs like Okta and Azure — architected and shipped in two weeks for a high-value customer, defining cross-team contracts with the MCP server team before IdP trust landed in MCP Auth.
  • Drive ServiceNow’s MCP story — operating as an MCP client and hardening the MCP server’s authentication layer.
  • Lead cross-team initiatives, review designs, and mentor engineers on the auth team.

  OAuth 2.0 / 2.1OIDCMCPJavaPolicies
• Software Engineer · ServiceNowJan 2022 – Feb 2025▸

  Engineer on the API authentication team — responsible for the OAuth 2.0 / OAuth 2.1 protocol surface, the token & credential service, and the policies that govern them.

  • Owned the token & credential service end to end — issuing, validating, and rotating OAuth 2.0 / OAuth 2.1 tokens across grants, PKCE, client credentials, and refresh-token lifecycle.
  • Built and maintained client-management and access/token policies: client registration, secrets, allowed grants, scopes, consent, and token lifetimes.
  • Implemented OAuth 2.0 / OAuth 2.1 protocol behavior in an in-house Java web framework, supporting enterprise and on-prem deployments.
• Systems Engineer · InfosysSep 2018 – Dec 2019▸

  Backend developer on enterprise product teams, building and shipping REST APIs in Java / Spring Boot.

  • Developed backend APIs in Java with Spring Boot, tested with TestNG and Mockito, and validated via Postman.
  • Deployed and ran services on virtual machines and cloud infrastructure, working with search, messaging, and NoSQL databases.
  • Earlier trained on the iOS ecosystem (Swift, Cocoa) and shipped an iOS app backed by a Java + SQL backend.

Skills

What I work with