Bibek Kumar Sah
Software Engineer • Kathmandu
Kathmandu, Nepal• Open to Opportunities

Hi, I'm Bibek Kumar Sah.Software Engineer & .NET Specialist

With 3+ years of experience across the .NET ecosystem (ASP.NET Core), Microsoft SQL Server database optimization, and hands-on vulnerability assessments (VAPT). Currently building AI exam proctoring and video streaming CDN solutions at Darvilab.

0+Yrs
Industrial Exp
0.00/10
B.Tech CGPA
0nd Place
Hackathon Award
OWASP
VAPT Defense
Bibek Kumar Sah
Darvilab Pvt. Ltd.Software Engineer

Bibek Kumar Sah

B.Tech

Engineering reliable backend and security solutions from Kathmandu. Focused on clean architecture and high-availability systems.

RK University (2020-2024) Resume PDF
12:00:00 PMNPT (Kathmandu)
Active Engineering Status:Open to Engagements
ASP.NET Core 8Backend
OWASP Top 10 HardenedSecurity
MSSQL Execution Plan TuningDatabase
AI Video CDN & StreamingDistributed
Clean Architecture & CQRSDesign Pattern
Docker & CI/CD PipelinesDevOps
Automated VAPT MitigationSecurity
Entity Framework CoreORM
Next.js 15 & React 19Frontend
ASP.NET Core 8Backend
OWASP Top 10 HardenedSecurity
MSSQL Execution Plan TuningDatabase
AI Video CDN & StreamingDistributed
Clean Architecture & CQRSDesign Pattern
Docker & CI/CD PipelinesDevOps
Automated VAPT MitigationSecurity
Entity Framework CoreORM
Next.js 15 & React 19Frontend
About Me

Background, Culture & Engineering Philosophy

A personal look at my journey from Siraha, Nepal, to engineering secure, high-performance web systems.

“Good software isn’t about flashy complexity—it is about quiet reliability, treating security as a non-negotiable habit, and taking pride in building systems people can depend on every single day.”

— Bibek Kumar Sah•Software Engineer
Bibek Kumar Sah

From Siraha to Scalable Systems

Growing up in Siraha, Nepal, I was taught early on that respect is earned through honesty, patience, and doing the hard work even when no one is watching. When I moved to Rajkot to study Computer Engineering at RK University, that same work ethic guided me through every late-night coding session, algorithm challenge, and system architecture project—eventually graduating with a 9.15 CGPA and ranking 2nd in the university hackathon.

Today, whether I am hardening an enterprise application against OWASP vulnerabilities, tuning database queries for thousands of pension beneficiaries, or deploying video streaming CDNs, I carry that same mindset. I don’t believe in cutting corners. I believe in writing code that is clean, readable, well-tested, and secure by default.

How I Work & Collaborate

Direct, Humble Communication
I listen first. I believe in clear technical communication, honest feedback, and working collaboratively with product and engineering teams.
Security as a Daily Habit
Application security isn’t something you sprinkle on at the end. From input sanitization to WAF rules and penetration testing, security is built into every layer.
Pragmatic & Performance-Focused
I choose boring, reliable technologies when they solve the problem best, and adopt new tools when they genuinely deliver measurable performance gains.
Continuous Growth & Craftsmanship
Software moves fast. I actively study security vulnerabilities, test new tools, and take pride in refining my skills every week.

Core Engineering Focus

PERSONAL ETHICS

Integrity & Work Ethic

“Honest dedication to the problem at hand.”

Grounded in my upbringing in Nepal. Treating every project, team member, and line of code with genuine care and dedication.

VAPT & SECURITY

Defensive Security

“An insecure system is an incomplete system.”

Hands-on experience in OWASP Top 10 mitigation, Burp Suite, SQLMap, and WAF tuning to protect user data from real-world exploitation.

BACKEND ARCHITECTURE

Production Resilience

“Engineered for real-world reliability.”

Proven track record scaling backends in ASP.NET Core, optimizing SQL Server queries by 25%, and automating GitLab CI/CD pipelines.

Portfolio

Featured Engineering Projects

Selected production systems I've architected and contributed to across .NET Core enterprise apps, AI proctoring, video CDNs, and CI/CD pipelines.

Kaazii
Full Stack Web
Watch Walkthrough0:26
Dec 2025 - PresentDarvilab Pvt. Ltd.

Kaazii

Enterprise multi-tenant project management and HR platform with PostgreSQL schema isolation, Django REST Framework, and Next.js 16.

Key Achievements & Outcomes
Schema-Isolated
Tenant Architecture
< 50ms
WebSocket Latency
100% CI/CD
Type Safety & Test
Next.js 16React 19TypeScriptDjango REST FrameworkPython 3.11PostgreSQLRedisWebSocketsDockerTanStack QueryMinIO S3ZodTailwind CSS
Retirement Benefits Management System
Enterprise .NET
Watch Walkthrough3:19
Jul 2023 - Aug 2025Version Systems Pvt. Ltd.

Retirement Benefits Management System

Enterprise pension management platform with OCR integration, WAF security, and 20-25% faster data processing.

Key Achievements & Outcomes
+20-25%
Data Processing Speed
50,000+
Active Beneficiaries
Zero Critical
Security Vulnerabilities
ASP.NET CoreC#Microsoft SQL ServerOCR IntegrationWAF TuningJavaScriptBurp Suite
AI Exam Proctoring Service
AI & Streaming
Watch Walkthrough2:40
Dec 2025 - PresentDarvilab Pvt. Ltd.

AI Exam Proctoring Service

Real-time online exam monitoring service with AI-based anomaly detection for Learning Management Systems.

Key Achievements & Outcomes
Real-time AI
Cheating Detection
< 150ms
Latency Overhead
Seamless
LMS Integration
ASP.NET CoreC#ReactNode.jsAI ServicesWebSocketsWebRTCAWS EC2 & S3PostgreSQL
Low-Latency Video Streaming CDN
DevOps & Cloud
Watch Walkthrough1:50
Dec 2025 - PresentDarvilab Pvt. Ltd.

Low-Latency Video Streaming CDN

Scalable Content Delivery Network architecture supporting smooth video delivery for online courses and live streams.

Key Achievements & Outcomes
-45% Reduced
Buffer Time
Multi-Region
Global Availability
99.9% Smooth
Stream Stability
CDN ArchitectureAWS S3CloudFrontNode.jsHLS StreamingReact Video Player
DevOps Automation & SCM Modernization
DevOps & Cloud
Watch Walkthrough2:10
2024 - 2025Version Systems Pvt. Ltd.

DevOps Automation & SCM Modernization

End-to-end migration from SVN to self-hosted GitLab with Jenkins CI/CD and SonarQube quality enforcement.

Key Achievements & Outcomes
+40% Boost
Release Efficiency
100% CI/CD
Build Automation
SonarQube
Code Quality Gate
GitLab CI/CDJenkinsDockerSonarQubePlaywrightSVNLinux Bash
Interactive Lab

System Architecture & Performance Console

Interact directly with simulations of systems I've built: run an OWASP security audit, benchmark CDN latency, or inspect batch calculation optimization.

SYSTEM INSPECTOR v2.5
Interactive Engineering Simulation Lab

OWASP Top 10 Automated Penetration Test

Simulates penetration testing routines run with Burp Suite and SQLMap against backend APIs.

TERMINAL: owasp-vapt-runner --verboseIDLE
$System ready. OWASP Top 10 penetration suite loaded.
$Target endpoints: /api/v1/auth, /api/v1/disbursement, /api/v1/user
Career & Credentials

Work Experience & Education

A detailed record of my production engineering roles, academic achievements, and industry certifications.

Work Experience

Download CV
Dec

Software Engineer

Darvilab Pvt. Ltd. • Kathmandu, Nepal
Dec 2025 - PresentFull-time

Architecting and engineering enterprise multi-tenant platforms (Kaazii), AI-powered online exam proctoring, and low-latency video streaming CDN architectures.

  • ▹Architected and Built Kaazii: Designed and developed an enterprise-grade multi-tenant project management and HR operations platform using Django REST Framework and Next.js 16 (App Router). Implemented PostgreSQL schema-based isolation (schema_{org_code}), JWT RS256 authentication, Redis WebSocket channels, and MinIO S3 object storage.
  • ▹Developed and Implemented AI Exam Proctoring Service: Built a robust remote proctoring service for the Learning Management System (LMS) with real-time video/audio streaming and computer vision anomaly detection to prevent exam cheating.
  • ▹Architected Low-Latency Video Streaming CDN: Configured edge caching and adaptive bitrate video delivery across AWS S3 and CloudFront, reducing video buffer latency by 45% for online learners.
  • ▹Enforced Code Quality & CI/CD Standards: Established rigorous pre-commit and pre-push quality gates using Lefthook, Biome, Pytest, and strict TypeScript verification ensuring zero regressions.
ASP.NET CoreC#Next.js 16React 19TypeScriptDjango REST FrameworkPython 3.11PostgreSQLRedisWebSocketsDockerTanStack QueryMinIO S3AWS S3 & CloudFront
Jul

Software Engineer

Version Systems Pvt. Ltd. • Rajkot, Gujarat, India
Jul 2023 - Aug 2025Full-time

Developed enterprise web applications with ASP.NET Core, conducted OWASP vulnerability assessments, and optimized relational database systems.

  • ▹Conducted Vulnerability Assessment and Penetration Testing (VAPT) aligned with OWASP security best practices, successfully identifying and remediating critical XSS, SQL Injection, and Insecure Deserialization flaws.
  • ▹Engineered core business logic and database functionality for enterprise retirement benefits software, increasing processing speed by 20-25% for 5,000+ users.
  • ▹Designed, optimized, and maintained complex relational databases using Microsoft SQL Server and stored procedures.
  • ▹Enhanced dynamic user interfaces with JavaScript and React, improving usability and response times.
  • ▹Collaborated across engineering and business teams to ensure all implementations aligned with rigorous regulatory and security standards.
ASP.NET CoreC#.NET FrameworkMicrosoft SQL ServerPostgreSQLReactJavaScriptBurp SuiteSQLMapPlaywright
Aug

Intern (Python for AI/ML)

Elite Techno Groups • Remote, India
Aug 2021 - Sep 2021Internship

Conducted data preprocessing, feature engineering, and model evaluation to improve prediction accuracy for AI/ML projects.

  • ▹Implemented data cleaning, normalization, and feature extraction pipelines in Python.
  • ▹Evaluated machine learning regression and classification models to ensure reliable project outcomes.
PythonData PreprocessingFeature EngineeringModel Evaluation

Education

B.Tech in Computer Engineering

RK University • Rajkot, Gujarat, India
2020 - 2024
CGPA: 9.15 / 10

Graduated with distinction (9.15 CGPA). Deep coursework in Data Structures, Algorithms, Secure Software Engineering, Relational Databases, and Network Security.

Higher Secondary (Science)

Sagarmatha Secondary School • Siraha, Nepal
2018 - 2020
CGPA: 3.29 / 4

Completed secondary education with focus on Physics, Chemistry, and Advanced Mathematics, developing strong analytical and problem-solving fundamentals.

Certificates

Foundational C# with Microsoft
Microsoft
Oct 2024
Fundamentals of Information Security
Infosys
Nov 2022
Ethical Hacking
One Byte Labs
Jan 2023
Introduction to Networks
Cisco
Jan 2023
Develop Soft Skills that Industry Demands
TCS
Dec 2022

Key Achievement

Mobile-Code-e-Thon Hackathon

2nd Rank (University Level)
RK University & Gateway Group of Companies • 2022

Awarded 2nd position among university-wide teams for rapid application prototyping, clean architecture, and robust coding under competitive time constraints.

Technical Expertise

Skills & Engineering Competencies

Proven technical capabilities spanning backend systems, offensive/defensive security, databases, cloud CI/CD, and modern reactive interfaces.

Languages & Core

Object-oriented, backend, and script languages used across production systems.

C#.NET Core / FrameworkPython (Django REST)Next.js 16 (App Router)React 19 / TypeScriptNode.jsJavaScriptJava

Frameworks, Tools & Testing

Tools and frameworks for API design, automated testing, and code quality.

RESTful API DesignMulti-Tenant ArchitectureRedis & WebSocketsTanStack Query (React Query)Playwright AutomationSonarQube Quality GatesPostmanGit & GitLabJenkins CI/CDDocker & Compose

Cloud & Infrastructure

Cloud services, CDN deployment, and environment automation.

AWS EC2 & S3AWS IAM & CloudFrontAzure ServicesCDN Video StreamingLinux & Shell Scripting

Database Management

Relational data modeling, query optimization, and transaction safety.

Microsoft SQL ServerPostgreSQLStored Procedures & TriggersQuery Optimization & Indexing

Application Security (VAPT)

Hands-on offensive testing, vulnerability remediation, and OWASP defense.

OWASP Top 10 MitigationBurp SuiteSQLMapXSS, SQLi & Deserialization DefenseWeb Application Firewall (WAF) Tuning

Core Computer Science Concepts

Foundational CS principles applied daily in production engineering.

Data Structures & AlgorithmsPerformance OptimizationDefensive Security ArchitectureSystem Scalability
Contact

Let's Start a Conversation

Whether you have an engineering role, a software consulting need, or an application security inquiry—feel free to reach out directly.

Download Official Resume
Bibek Kumar Sah (CV)

Comprehensive 2-page resume covering experience at Darvilab, Version Systems, and certifications.

Download PDF Resume
Email Address
Location
Kathmandu, Nepal (Siraha, Nepal)

Send a Message

Connected via Forminit

Fill out the form below to reach out directly to Bibek's primary inbox.