
Saugat Sthapit
Principal — cloud, security & architecture
Based in the Philadelphia area · US practice lead
Saugat leads Bade Group’s architecture voice — the layer boards, investors, and evaluators probe when cloud adoption, zero trust, and resilience carry real consequence. His work has spanned edge-scale protection, regulated life sciences, nonprofit missions, and HIPAA-aligned platforms, always with a bias toward systems that hold up in operations, not just in proposals.
On Nepal public and institutional programs, he shapes methodology, security posture, and technical narrative alongside Nisunajni Group as local prime — so QCBS depth and local compliance stay aligned.
Zero trust & enterprise identity · Multi-cloud and hybrid programs · Edge security, DDoS, and WAF · Regulated and mission-critical estates
Program context
Illustrative of sectors and problem classes — not an exhaustive client list.
- Oracle — Hyperscale cloud estates, tenancy and IAM design, and zero-trust–aligned patterns for managed infrastructure and enterprise SaaS.
- Akamai Technologies — Global DDoS mitigation, WAF and bot defenses, API protection, and performance engineering for highly exposed internet-facing services.
- Airbnb — Architecture and security depth for global two-sided marketplaces: identity, payments resilience, abuse resistance, and safe scale-out of core platform paths.
- eBay — High-volume listing and transaction estates: fraud and abuse controls, seller/buyer trust mechanisms, and hardened integration layers at marketplace scale.
- Walmart — Cloud and hybrid programs across retail-scale systems: omnichannel integration, supply-chain visibility, and reliability expectations of a national store footprint.
- American Airlines — Reservations, partner and alliance integrations, and resilience design for passenger-facing and operations-critical airline technology stacks.
- Bristol-Myers Squibb — Regulated cloud adoption, compliance-aware security architecture, and modernization of mission-critical application portfolios in a GxP-sensitive environment.
- Siemens — Hybrid cloud, segmentation, and reliability initiatives supporting industrial digitization and enterprise-scale operational technology adjacency.
- Southern Poverty Law Center — Threat modeling, cloud hardening, and operational security supporting civil-rights and mission-driven technology under sustained adversarial attention.
- Rigewise — HIPAA-oriented controls, secure SDLC, and cloud-native architecture for a US senior-care and clinical-adjacent SaaS platform.

