Rishi Oberoi

• Architected Microsoft-approved, three-layer cloud-based Fintech SaaS applications deployed on Azure Static Web Apps and listed on the Azure Marketplace. Integrated React, Vite, NestJS, Azure Cognitive Services, Cosmos DB, Blob Storage, and Redis Cache. Built modular RESTful APIs with dependency injection, validation, consistent exception handling, and Redux-driven front-end components with persistent state and AI context rendering. Engineered LangChain orchestration pipelines using @nestjs/schedule with secure configuration preloading from Azure Key Vault.
• Developed secure CRUD APIs for tiered monetisation using Cosmos DB and Stripe webhooks. Deployed Dockerized NestJS services to Azure App Service via ACR and configured production variables using az webapp config. Monitored Redis-backed Bull queues, resolved stalled jobs, and scheduled background workers with node-cron. Performed HAR and Wireshark diagnostics to trace CORS issues, API failures, and cross-environment routing behaviour.
• Built LLM orchestration pipelines using Azure OpenAI and LangChain, integrating RAG-style context injection, multi-tool function calling, token budgeting, and structured output validation using stock, crypto, and live finance news feeds as context inputs. Developed supporting FastAPI microservices consumed by NestJS for real-time intelligent features. Delivered deterministic AI chains for financial insights with AzureChatOpenAI, prompt templates, and latency optimisation across Azure OpenAI, Cognitive Services, and App Service layers.
• Established Azure Cloud Security governance across App Services and Containers with SIEM-integrated alerting aligned to ISO 27001 controls and UK Cyber Essentials guidelines. Enforced HTTPS-only transport, TLS-secured endpoints, and full DNS ownership verification using A, TXT, and CNAME records for secure domain control and certificate validation. Integrated Microsoft Graph API via MSAL.js for secure profile syncing. Applied npm dependency signature verification and manual patch validation in secure build pipelines to preserve system integrity.
• Implemented secure authentication with Azure Entra ID B2C for Google, Meta, and email login. Applied password hashing, token validation, and RBAC with Cosmos DB and Blob Storage backing identity data and assets. Configured secure Axios clients with TLS-encrypted API transactions to safeguard user data during client-server communication.
• Streamed authenticated stock and cryptocurrency financial market data through validated Axios requests. Managed Redis cache persistence with Bull processors for real-time performance. Built Cosmos DB aggregation pipelines merging user metrics with live market data. Integrated secure webhooks for external feeds and scheduled background refresh routines using node-cron.
• Converted high-fidelity Figma designs into responsive React + TypeScript components using Tailwind and Vite aliasing. Integrated Azure OpenAI for real-time conversational AI and financial intelligence through secure REST APIs. Configured environment-based Axios authentication for GPT request flows, token renewal, and robust error handling across development and production environments. Built Redux Toolkit async thunks with optimistic updates, pagination merging, and persistent local storage to deliver a seamless, responsive SaaS interface.
• Delivered stakeholder demonstrations using structured Agile reporting. Managed CI/CD pipelines across GitHub Actions and Azure DevOps with synchronized container releases and optimized build cadence to reduce redundant triggers and lower Azure spend. Re-tiered Azure Redis Cache and Cognitive Service SKUs to match user concurrency and reduce cost without latency impact. Mentored junior developers on CI/CD workflow design, environment management, and caching strategies. Integrated GTM, Meta Pixel, and Microsoft Clarity for analytics and user-journey optimisation, maintaining disciplined PR workflows aligned with Microsoft ISV Success standards.

Deployed secure Windows 11 workstations using SCCM and Active Directory, configuring GPOs and AD group structures to enforce organisational security baselines, compliance policies, and least-privilege access. Maintained enterprise-grade security aligned with NHS governance, ISO 27001 control requirements, and UK Cyber Essentials standards. Remediated endpoint vulnerabilities identified through advanced security telemetry and applied hardened configuration baselines to enhance system resilience. Automated disk imaging, provisioning, and BIOS updates with PowerShell and CLI tooling to accelerate field deployments. Supported clinicians and diagnostic teams by configuring specialised medical software and hardware integrations, including imaging and ultrasound systems within the Diagnostic Imaging Pillar, ensuring reliable operation on secured Windows 11 endpoints. Maintained enterprise endpoint protection posture by analysing security alerts, isolating compromised hosts, and applying real-time containment and remediation policies across distributed clinical workstations. Hardened industrial routers by disabling unused services, implementing SSH key-based authentication, enforcing account lockout rules, updating firmware, and applying restrictive firewall configurations to support secure remote access. Secured HL7 and FHIR clinical data by enforcing healthcare-compliant access controls, validating payload integrity, and ensuring safe handling within interoperability workflows.

Developed automation tools and AI-driven modular subassembly catalogues for commercial vehicle chassis, Sprinter and freight carrier models using SolidWorks and DriveWorks C++, enabling scalable part reuse and rapid design customisation. Integrated generative AI with SolidWorks to optimise modular 3D component geometries (bulkheads, roofs, gantries, and sideframes) by automating FEA workflows in Python (NumPy/SciPy), extracting stress and deflection KPIs, and performing constrained parametric optimisation to improve stiffness-to-weight ratios and manufacturability targets. Embedded AI-powered logic into BOM generation and linked it with ProgressPlus to support real-time part tracking, structural validation, and higher modular design efficiency across CAD-to-manufacture workflows. Developed IoT-enabled embedded electronic subsystems for commercial vehicle builds, including gantry lighting, load-bay lighting, auxiliary control circuits and sensor wiring, using C++ and microcontroller-based development workflows.

Taught programming logic, debugging, and system behaviour analysis. Designed exercises requiring fault
isolation, output validation, and stepwise verification of solutions. Applied pedagogy and scaffolded learning
techniques to structure complex concepts, strengthening analytical reasoning and diagnostic thinking aligned
with software testing and bug analysis.

Verified German localisation across global software releases to ensure linguistic accuracy and functional
stability. Reviewed UI text, validated localisation within application environments, and identified translation
bugs affecting user interfaces. Delivered detailed bug reports with reproducible steps to development teams,
enabling rapid issue resolution and stable multilingual releases.