Sanjay Shah

Senior Software Engineer · Architecture, Security & Identity

Kathmandu · +977 986 327 4892 · messanjayshah@gmail.com · sanjayshah.com.np (opens in a new tab) · github.com/mesanjayshah (opens in a new tab) · linkedin.com/in/mesanjay (opens in a new tab) · credly.com/users/sanjay-shah.861076ff (opens in a new tab)

Download résumé (PDF)

Professional summary

Senior Software Engineer who solves hard problems and delivers — secure, compliant, built to last. Seven years designing and shipping SaaS platforms for healthcare, identity and access management, and multi-tenant products, from architecture and system design to production. Security and compliance are built in from day one: customer data isolated, PHI and PII protected, regulation treated as a requirement. Uses AI-assisted engineering to deliver faster and leaner without lowering the bar.

  1. 1 · Solve the real problemFind the problem that matters and ship a working, verified solution — not just code.
  2. 2 · Security firstCustomer data isolated, PHI and PII protected, every change checked before it ships.
  3. 3 · Compliance by designHIPAA, NABH and audit trails designed in from the start, never bolted on later.
  4. 4 · Performance & scaleFast today, and built to stay fast as usage grows — without a rewrite.
  5. 5 · Standards that lastProven standards over clever shortcuts, so the system is still easy to change years later.

Experience

Senior Software Engineer

२०२५ नोभेम्बर – Present

Healthcare software

  • Designs and builds healthcare platform services with privacy and auditability built in.
  • Protects PHI and PII through encryption, least-privilege access and access logging.
  • Uses AI-assisted engineering for development, review and testing — with human verification.

Senior Software Engineer

२०२२ अगस्ट – २०२५ नोभेम्बर

Identity & access management for enterprise clients, US & Europe

  • Delivered federation, single sign-on and platform upgrades for enterprise clients in sports media and banking, across OIDC, SAML and OAuth 2.0.
  • Built automated provisioning and a bulk, auditable migration from a self-hosted identity provider to Okta — no user re-onboarding.
  • Modernised legacy identity connectors for performance and maintainability; brought static analysis into the pipeline.
  • Built an internal pre-sales estimation tool that improved estimate accuracy; mentored engineers and earned three Okta certifications.

Full Stack Developer

२०१९ अगस्ट – २०२२ फेब्रुअरी

Education software, multi-tenant SaaS

  • Designed and built HR & payroll, CRM, content and online-examination modules on one multi-tenant platform.
  • Led the CRM re-architecture for usability, maintainability and scale — about 25% faster on hot paths.
  • Modularised a monolith and containerised it on AWS, cutting manual deployment time.
  • Contributed to the multi-tenancy redesign that made onboarding a new institution routine.

Independent project

A multi-tenant healthcare & enterprise SaaS platform, designed and built independently.

Ongoing

Independent build · personal project

My own platform, built in my own time to prove these practices end to end: a modular monolith being split into microservices, event-driven integration, tenant isolation enforced in the database, GitOps delivery on AWS, a shift-left security pipeline, and compliance features — PHI access logging, HIPAA-aligned safeguards and NABH-ready clinical workflows.

Problems solved

  • Tenant isolation that fails closed — Isolation holds even when application code is wrong
  • Identity federation and zero-downtime migration — Single sign-on across the estate; migration with no re-onboarding
  • Reliable event-driven integration — Redeliveries and replays are safe by construction

Capabilities

Architecture & system design
Microservices & distributed systems · Event-driven design · Multi-tenant SaaS · Domain & API design
Scalability & performance
Horizontal scaling & caching · Query and data-model tuning · Load and latency budgets · Resilience under failure
Development
Backend platforms & APIs · Data modelling & migrations · Clean, reviewable code · AI-assisted engineering
Testing & quality
Test strategy, unit to end-to-end · Integration & contract tests · Automated quality gates · Accessibility (WCAG 2.2 AA)
Cloud & CI/CD
AWS · Continuous integration & delivery · GitOps & containers · Infrastructure as code & observability
Security & privacy
Secure SDLC & threat modelling · PHI & PII protection · Encryption & key management · Supply-chain & secrets security
Identity & access
Okta certified (three credentials) · Single sign-on & federation · OAuth 2.0 · OIDC · SAML · User provisioning & lifecycle
Compliance
HIPAA-aligned safeguards · NABH accreditation workflows · Audit trails & tamper evidence · Data-privacy & retention rules
Standards I design against
HIPAA · NABH · OWASP · WCAG 2.2 · OAuth 2.0 · OIDC · SOC 2 · ISO 27001 · Data privacy

Toolkit

Languages & frameworks
Java, Spring Boot, Spring Security, Hibernate/JPA, SQL, TypeScript, React
Data & messaging
PostgreSQL, MySQL, Redis, Kafka, RabbitMQ, Flyway
Cloud & delivery
AWS, Docker, Kubernetes, Helm, Terraform, GitHub Actions, GitOps (Argo CD)
Identity & security
Okta, Auth0, Keycloak, OAuth 2.0, OIDC, SAML, SCIM, OWASP, SAST/SCA, SBOM
Testing
Playwright, JUnit, Mockito, Testcontainers, ArchUnit
AI-assisted delivery
Claude Code, MCP servers, multi-agent workflows with human verification

Education

  • Master of Computer Science — in progress
  • BSc Computer Science — 2015 – 2019

Certifications

  • Okta Certified Developer — Customer Identity Cloud · 2024
  • Okta Certified Consultant — 2023
  • Okta Certified Developer — Workforce Identity Cloud · 2023
  • Web Security & Access Management — JWT · OAuth 2.0 · OIDC · 2022

Employers and clients are described by domain.

↑ ↓ navigate · ↵ select · esc close