Rishi Remesh

Infrastructure engineer specializing in Ansible automation across a mixed Linux and Windows fleet, supporting a post-trade processing platform used by banks and brokers. Owns database platform operations (Oracle, ClickHouse, AWS RDS), identity and access administration (LDAP, Active Directory, SSO), secure counterparty connectivity (IPsec VPN, SFTP, mutual TLS), and certificate lifecycle. Author of the team's operational runbooks. 14 years in infrastructure and systems.

Senior Cloud Engineer at FIS Global (2022-05 – Present)

Primary Ansible engineer for the infrastructure team — playbooks, roles, inventory, and Ansible Vault secrets across Linux and Windows hosts, covering user onboarding and offboarding, certificate deployment, scheduled cleanup, and configuration management.

• Root-caused a platform-wide Active Directory onboarding outage to an automated package upgrade that removed a deprecated Ansible module; confirmed via collection listing and filesystem timestamps, then specced and delivered the migration to its replacement with updated runbooks.
• Run database platform operations — Oracle, ClickHouse, and AWS RDS — including QA/SIT refresh procedures, golden-copy management, RMAN backup verification, snapshots, tablespace provisioning, and storage tuning (io1 to gp3, 20K IOPS).
• Administer identity and access across LDAP, Active Directory, and SSO — joiner/mover/leaver lifecycle, SSH key distribution, privileged database account grants, group policy, and access review for audit.
• Build and troubleshoot secure counterparty connectivity — IPsec site-to-site VPN (strongSwan, VyOS), FIX/PTP market connections, and SFTP — for integrations including Deutsche Bank, BNP Paribas, Credit Suisse, Euroclear, Bloomberg, and BT Settlenet.
• Own certificate and key lifecycle — led migration to X.509 certificates for IBM MQ mutual TLS following CA/Browser Forum policy changes; manage CSR generation, keystores, renewals, and expiry monitoring via KeyFactor, and documented the SAML SSO certificate process following its migration onto x509 credentials.
• Manage AWS infrastructure across a multi-account organization — EC2, RDS, S3, VPC design, security groups, network ACLs, DNS/Route 53, IAM policy and least-privilege design, KMS, and cost management including Savings Plans and Terraform-deployed Cost and Usage dashboards (Terraform Enterprise, plan locally and apply via pull request).
• Operate messaging infrastructure — Kafka/MSK topic and client configuration, IBM MQ client setup for new bank environments, and RabbitMQ/AmazonMQ across QA and production.
• Support containerized environments (Docker, docker-compose) and CI/CD tooling (Jenkins, JFrog Artifactory), including diagnosing an out-of-memory kill in a multi-service stack that was blocking performance testing.
• Participate in the vulnerability management rotation — review scanner findings against AWS estate and remediate within SLA — and gather AWS security compliance evidence for external audit (KMS, NACLs, subnet segregation, password policy, backup verification).
• Author and maintain the team's operational documentation in Confluence — database refresh procedures, disaster recovery failover steps, certificate processes, user lifecycle guides, and Ansible practice pages — and carry on-call rotation with post-incident review.

Computer Systems Analyst at Land of Lincoln Goodwill Industries (2019-09 – 2020-08)

Configured and secured multi-site enterprise networks (Cisco switches, routers, firewalls, wireless); administered Active Directory, Group Policy, and Windows Server; migrated inventory systems from Excel to SQL.

Software Support Technician at Leepfrog Technologies, Inc. (2017-09 – 2019-09)

Client-facing technical support for a SaaS platform — reproduced and triaged defects, translated client reports into development tasks, and wrote JavaScript and Bash tooling.

IT Desktop Support at Western Illinois University (2011-10 – 2017-05)

Support across Windows, macOS, and Linux — imaging, Active Directory, licensing, and a SQL-backed equipment inventory database.

Master's Degree in Computer Science – Western Illinois University (2015 – 2017)

Bachelor's Degree in Computer Science – Western Illinois University (2011 – 2015)