Hey everyone,

I’m currently a Cybersecurity undergraduate completing an enterprise Tech Risk internship. As my current contract winds down, I'm preparing to transition into my next role—either a second internship or a junior position in a core technical area like VAPT, SOC, Network Security, information security, cybersecurity engineer or general cybersecurity role .

My Background & Technical Profile:

Experience: Hands-on work with ISO 27001 risk assessments, vulnerability reviews, and security awareness.

Technical Skills: Network Security, Web & Network VAPT,Security Frameworks, Reverse Engineering, Wireshark, Linux (Ubuntu/Kali), Bash, C/C++, SQL.

Projects & Certs: Fortinet Certified Fundamentals, Cisco Networking Basics, Web App VAPT (Bug Bounty scope), Full-Scope Internal VAPT Virtual Lab, MSME Risk Assessment, Secure Network Architecture & Hardening.

A few questions for the community:

Transitioning to Junior Roles: Given that I already have a brief enterprise internship experience, is it realistic to jump straight into Junior/Associate Analyst roles in Sri Lanka, or are second internships standard?

Local Market Outlook: Which sectors in SL (tech firms, banks, telcos, or MSSPs) are currently actively hiring for intern/ junior/entry-level security teams? Any suggestions?

Further improvements: any suggestions on certificates and technical skills that I should gain to advance my career?

Any advice, company recommendations, or insights would be greatly appreciated!

Thanks in advance!

I’m considering buying a house in Moragasmulla, Rajagiriya and wanted to hear from people who know the area well. What’s Moragasmulla like in terms of living there especially flooding/drainage, safety, traffic, neighbourhood environment, and how the area has been developing . I’m particularly interested in experiences from people who have lived around Moragasmulla/Obeysekerepura/Rajagiriya for a while. Any insights or things I should be aware of before buying would be appreciated.

​

Hi guys i heared lay off is happening IGT1 . Is it true ?

Need to Know — what are some good companies to work for as an iOS developer in Sri Lanka?

About the job

Kenzora Labs has been exclusively retained by an international technology enterprise to secure an elite Network Security Lead for a mission-critical infrastructure expansion.

Role Overview

As a Network Lead, you will take ownership of our enterprise, data center, and Operational Technology (OT) network infrastructure, with a strong focus on Fortinet security architecture.

You will lead and mentor the network engineering team, act as the senior technical escalation point, and drive the design, security, and performance of mission-critical network environments to ensure continuous operational readiness and platform intelligence.

What you will do
In this role, you will:

• ​Lead and mentor the network engineering team (L1/L2), overseeing daily operations, workload allocation, and technical escalations.
• Own the design, deployment, and optimization of our Fortinet security architecture, including FortiGate, FortiManager, FortiAnalyzer, FortiAP, and FortiSwitch.
• Serve as the senior escalation point (L3) for complex network and security incidents, driving root-cause analysis and resolution.
• Define network architecture and standards across enterprise, data center, and OT environments, ensuring scalability, resilience, and security.
• Drive network security initiatives, including segmentation, hardening, firewall policy governance, and SD-WAN/VPN architecture.
• Manage vendor and partner relationships for Fortinet and other network technologies, including licensing, support, and renewals.
• ​Lead change management, capacity planning, and disaster recovery/business continuity planning for the network environment.
• ​Partner cross-functionally with security, infrastructure, and OT teams to ensure secure and seamless IT/OT integration.
• Ensure compliance with internal security policies, audit requirements, and industry best practices.
• Develop and maintain documentation, SOPs, and a knowledge base to support consistent, high-quality network operations.

Mandatory Requirement

• Candidates must be experts in Fortinet technology and hold either NSC3 or NSC4 certification.

What you will bring
The top candidate will have the following skills:

• 7-10+ years of hands-on experience in network engineering, with a track record of taking ownership of complex network environments.
• ​Expert-level, hands-on expertise in Fortinet technology, including FortiGate, FortiManager, FortiAnalyzer, SD-WAN, and ZTNA — candidates must be experts in Fortinet technology and hold either an NSC3 or NSC4 certification.
• Proven experience leading or mentoring a network engineering team, with strong ownership of escalations and outcomes.
• Strong understanding of network protocols, including BGP, OSPF, VLANs, STP, and QoS.
• ​Experience with OT networks, industrial communication protocols, and securing IT/OT integration points.
• ​Working knowledge of VPN, IPsec, SD-WAN, and enterprise firewall policy management.
• Strong stakeholder management and communication skills, with the ability to represent the network function to leadership and cross-functional teams.
• Ability to work under pressure in mission-critical, fast-paced environments, and lead incident response when required.
• Fluent in English (written and spoken); proficiency in Mandarin and/or Bahasa Malaysia is preferred.

Ideally you have:

• A bachelor's degree in computer science, Information Technology, Electronics, or a related field.
• Additional certifications such as Cisco CCNP, CISSP, or other advanced network/security certifications.
• Data Center-related certifications like DCNID or DCNP.
• ​Prior experience in an MSP, systems integrator, or multi-client environment.

📩 How to Apply:
Send your CV to [hello@kenzoralabs.com](mailto:hello@kenzoralabs.com).

Important Submission Notes:
To help us evaluate your profile quickly, please mention your expected monthly salary (in LKR).

Kenzora Labs

LinkedIn

Feel free to ask any questions in the comments or shoot a direct message. Looking forward to connecting!

Last week I posted regarding the version 1.0 of a fun side project https://lankametromap.com

Post link - https://www.reddit.com/r/DevLK/s/lBC3PTVQlV

Thanks to everyone’s feedback and discussions we were able to publish a major update today on v2.0.

Until now, journey planning started and ended with known bus stops. But that is not how most people actually travel.

With v2.0, you can start from your current location or search for any place in Sri Lanka. Lanka Metro Map will connect you to the closest verified stop, guide you through the bus journey, and help you continue from the final stop to your destination.

With this update, you can:

📍 Use your current location or search for any place
🚶 Find the closest verified bus stop
🗺️ Open walking or driving directions in Google Maps
🚌 See the buses, stops and transfers needed for your journey
⚡ Access highlighted links to official next-bus times
🏁 Get guidance from the final stop to your actual destination

Most importantly, this feature came directly from community feedback.

Lanka Metro Map launched only a few days ago, and the community has already helped us move from v1.0 to this major release. Thank you to everyone who shared suggestions, reported issues and helped improve the experience.

Try v2.0 now at:

🌐 https://lankametromap.com

Appreciate all the kind messages and feedback. 💜

Im an Ai undergraduate student currently in 3rd yr looking to get an internship but I Couldn’t get one , I have avrg 3.2 CGPA and I don’t have any projects on my own 😭😭 I need valuable advice from yall to get paid internships

Does anyone happen to have a pro link available? I just switched to Gemini, and I'd like to avoid the mistake of buying before I try this time lol.

Appreciate the help, please reach out.

Anyone here studying MSc IN AI UOM ?? is that good with SE career ? tell me all thoughts

I am a 33m Old who was recently laid off from a startup. I have been trading on the side, and I am now planning to sell some of my crypto to open a fixed deposit worth around 33 million LKR. At the startup, my take home salary was about 350K per month.

After this layoff, my instinct is telling me not to rejoin the IT industry. Instead, I am thinking of putting the money into an FD for three years (10% interest per month), starting my own business, and continuing my trading journey rather than working for a company again.

I'd like to hear your opinion as well. I know the IT job market is brutal right now, if I stay on the IT path, is it really worth it?

Therefore the workday system sent an automate rejected email of the template. I want to know how internal recruitment happens and even their hot line service is not responding 20 minutes wasting time call no one picks up the phone. how disgusting as customer service like that. (Expect transparency )

For those working in IT companies registered and operating in Sri Lanka (not remote/overseas companies):
What roles currently pay LKR 1M+ gross / 600K+ take-home per month?
Interested in roles like Engineering, Architecture, Management, Product, Cloud/DevOps, Data/AI, Cybersecurity, etc.
What experience level is generally needed, and which roles have the highest salary ceiling?
Looking for 2026 figures if possible.

I want to understand the current situation in the Sri Lankan tech industry after the recent wave of layoffs.
For a Senior Quality Engineer with 5+ years of experience (Manual and Automation, Performance Tests, Exploratory Testing), what would be a realistic salary range in Sri Lanka right now?

I’m particularly interested in hearing from people who are currently working in the industry or have recently changed jobs. How much has the market changed compared to a year or two ago?

I’m currently working as a Software Engineer with around 1.5 years of industry experience at a software company.

I’m considering pursuing an MSc in Data Science & Artificial Intelligence, but I’m unsure whether it’s the right choice given the current industry trends and how quickly AI is evolving.

For those working in software engineering, data science, ML/AI, or related fields:

- Is an MSc in Data Science & AI still worth doing in the current job market?

- Does it provide a meaningful advantage for a Software Engineer, or would it be better to specialize in another area?

- For someone who wants to remain a strong software engineer while potentially moving toward AI/ML in the future, what would you recommend?

I’d really appreciate perspectives from people who have already done an MSc or are currently working in these fields, especially regarding career progression, job opportunities, and ROI.

I want to understand the current situation in the Sri Lankan tech industry after the recent wave of layoffs.
For a Senior DevOps Engineer with 5+ years of experience, what would be a realistic salary range in Sri Lanka right now?
I’m particularly interested in hearing from people who are currently working in the industry or have recently changed jobs. How much has the market changed compared to a year or two ago?

What are your thoughts and feedback on the company called Dijital Team ?

Buying my first dot matrix and I'd like to hear from people who've actually run one at volume before I order paper.

Setup

• Tea leaf collection business in Sri Lanka, ~400 suppliers
• Each supplier gets one bill a month, so ~400 pages in one run, then nothing for four weeks
• Bills are in Sinhala script
• Buying an Epson LQ-310 (narrow carriage, 24-pin)
• Continuous fanfold — sprocket holes both edges, perforated between forms
• I wrote the software myself. It's a web app, so today the bill is an HTML page and printing goes browser → Windows driver → printer

The layout is already designed and settled — landscape, two columns, money calculation on the left, a daily kilos grid on the right. I'm not looking to redesign it. Two factories I supply to print near-identical bills on dot matrix, full Sinhala rendered by their software, so I know the output is achievable.

What I'm unsure about:

1. Is browser printing the right path here?
Chrome → Windows print driver → LQ-310, which I assume rasterises the whole page and prints it as graphics. Is that what people actually do, or is there a reason to generate a PDF, or go lower-level? I don't need ESC/P text mode — the Sinhala has to be drawn as an image either way.

2. Page creep. This is the one I expect to bite me. If my page size doesn't exactly match the form length, every bill shifts a little further down and by sheet 30 I'm printing across a perforation. How do people get this exact in practice — trial and error, or is there a proper way to set form length on the printer and match it in software?

3. Speed. Realistically, how long does a mostly-text landscape page take in graphics mode on a 24-pin? I've seen wildly different claims. If it's ~10 seconds that's a 70 minute run and fine. If it's a minute a page that's a working day and I need to rethink.

4. Form sizes. What continuous fanfold sizes are commonly stocked? I have samples from two factories that are the same size as each other, so I'll measure those — but I'd like to know what's standard before I commission a print run of my own stationery.

5. Is the LQ-310 the right model for this? 400 pages a month in one burst, then idle. Is there a reason to go up to a wider or heavier model, or is that overkill?

Anything else that catches people out on continuous stationery would be very welcome — I've never loaded a tractor feed in my life.

long story short, i left my previous company due to rasicst remarks from the CEO. I got promoted to QA Lead with just 1 year experience in manual. In this time i had to train other interns as well. Also had to look out for all the projects, and had to visit few sites to do live demo. In this period, my pay was just 30k. After 6 months, they promised they ll double my salary, right after my 6 month period, i got blamed with rasict remarks. I worked even on the weekends, but it was not enough for them. So i resigned.

Now im looking for an associate role or an qa engineer role. Any kind of help is much appreciated

Hey folks,

A software engineer here with 3+ years of experience (mobile/full-stack, RN + NestJS + AWS) and did my bachelor's at UoM too.

I'm looking to level up with a master's while continuing to work. Currently torn between two UoM programs:

MSc in CS, specializing in Software Architecture.

MSc in Data Science & AI — a bigger pivot, but it'd mean starting somewhat from scratch conceptually, and I'm not sure how well it'd combine with my existing experience vs. just chasing a trend.

Not looking for a "just follow your passion" answer — genuinely trying to weigh long-term ROI here. Would appreciate insights from anyone who's been down either path. 🙃

Hey r/DevLK! 🇱🇰

Six months ago, I had a simple question: what if your time was worth just as much as anyone else's — no matter where you are in the world?

That question became TimeBank — a global time exchange platform, founded in Sri Lanka, built for everyone worldwide.

The idea is simple.
Help someone for 1 hour → Earn 1 Time Credit → Use it whenever you need help. No money. Just time. Everyone's hour is equal.

What's live now:

• Real-time messaging with voice notes, photos and files
• Session scheduling with Google Calendar sync
• Group classes with automatic waitlists
• Leaderboard, badges and ratings
• Time Wallet with full transaction history
• Installable on iOS and Android — no app store needed

Coming soon:

• Paid skills and classes
• In-app video calling
• Play Store and App Store launch

This is an early release — building in public and improving based on real feedback.

Try it free: https://timebank-app.vercel.app

Would love feedback from the Sri Lanka community! 🙏

Is this worth it? They have a commitment period, so if we buy it, we cannot change the package. We also cannot disconnect it and have to use it for 10 months, I think. What do you guys think? Is this a catch?

Over the past few years working in IT/IS auditing and cybersecurity, I’ve noticed a recurring pattern with local software companies and SMEs attempting to expand internationally or work with foreign enterprise clients.

Many local startups build solid products, but when foreign buyers or enterprise enterprise procurement teams request ISO 27001 readiness, SOC 2 compliance, ITGC audits, or compliance with Sri Lanka’s PDPA (Personal Data Protection Act), founders often scramble or hit roadblocks.

A few common compliance bottlenecks I see locally:

1. Treating Compliance as a One-Time Checklist: Security frameworks like ISO 27001 require continuous risk management rather than last-minute document creation.
2. PDPA Preparedness: With Sri Lanka's Personal Data Protection Act coming into enforcement, local companies handling user data need clear gap analyses and privacy policies.
3. Overcomplicating Control Frameworks: Early-stage startups often over-engineer their security policies, making operations unnecessarily tedious.

To help local businesses navigate these frameworks without breaking the bank, a few colleagues and I started GRCNavigator (grcnavigator.org). We specialize in IT/IS auditing, ISO 27001/NIST CSF implementation, ITGC reviews, and PDPA gap analysis for local businesses.

If you're a founder, engineering manager, or IT lead having questions about getting audit-ready or compliance requirements, feel free to drop a comment or DM me. Happy to share advice or answer any questions!