Suraj KhadkaSoftware Engineer | Application Security Engineer

Supporting Department of Veterans Affairs — Benefits Integrated Delivery (BID) program

• Developed and maintained Java and Spring Boot microservices with ReactJS micro-frontends for high-availability veteran benefits systems.
• Designed 30+ RESTful APIs, optimized MySQL/PostgreSQL queries, and managed Liquibase versioned schema migrations.
• Integrated Secure SDLC practices, SAST, and SCA into CI/CD pipelines for continuous security testing.
• Led remediation of 200+ application, container, and dependency vulnerabilities, resolving 90% before production.
• Hardened Docker images and applied AWS IAM least-privilege — 50% fewer container misconfigurations, 35% fewer excessive permissions.
• Ensured Section 508 compliance with Groovy/JUnit automation wired into Jenkins pipelines.

Freelance full-stack engagements

• Engineered full-stack Java/Spring Boot applications with secure REST APIs on an MVC architecture.
• Implemented JWT, OAuth 2.0, RBAC, and HTTPS enforcement across web applications and APIs.
• Built encrypted data access layers with JDBC and Hibernate for sensitive application data.
• Automated build and deployment with Jenkins and GitHub Actions — 100% successful deploys, zero rollbacks.
• Reduced functional and security defects by 30% through secure code review and automated testing.

Tier 1 support and endpoint security

• Troubleshot software, hardware, and workstation configuration issues for students and faculty.
• Maintained data integrity and confidentiality across library systems and digital resources.
• Monitored security protocols and enforced IT policy compliance against unauthorized access.