Nadeem Siddiqui: The Architect Who Automates The Hard Parts

Few people at the senior end of New York's enterprise infrastructure world began with a BSc in Chemistry from Mumbai University. Nadeem Siddiqui did. Today he is a senior software engineer and enterprise infrastructure architect, known for turning security and compliance rules into code that runs the same way every time.

His field is the part of infrastructure most people never see: Infrastructure as Code, configuration management, enterprise content management and disaster recovery. Over more than 20 years he has worked for IBM, Syntel, MphasiS and Moody's, and since 2021 he has consulted for Deloitte through CirrusLabs.

One idea runs through all of it. If a control matters, it should never depend on someone remembering to apply it.

From chemistry to computing

Siddiqui's route into technology ran through Pune. After his chemistry degree, he earned a Master's in Computer Management from Pune University. His first jobs, as a software developer at Audio Stream and a software associate at Kanbay Software, gave him a grounding in code.

In 2007 he joined IBM India in Pune as a system administrator and technical analyst. There he ran OpenText Livelink, an enterprise content management platform, for Suncor Energy. He also assessed legacy systems for GE in the UK and Citi Group in India.

Those three years set the pattern for what followed. He was learning how very large organizations store, protect and retrieve the records they cannot afford to lose.

Making a name in content management

Content management became his first deep specialty. In 2010 he moved to Syntel as a project lead and IBM FileNet administrator, working between Pune and New York. His client was Moody's, and he led its onshore-offshore managed services team around the clock.

The habits he built there were about making fixes stick. His team wrote standard operating procedures and kept a known error database, so a problem solved once stayed solved. He went on to earn IBM's FileNet Certified Professional credential and EMC's Captiva Input Accel certification.

In 2013 he joined MphasiS in Jersey City as a delivery project lead and architect. As technical lead for BNP Paribas, he moved 1,200 GB of content from Documentum to OpenText Content Server. His résumé also lists a delivery project lead role at BirlaSoft in Edison, New Jersey.

Seven years inside Moody's

In August 2014 Siddiqui crossed from vendor to client. Having supported Moody's through Syntel, he joined Moody's Investors Service in New York as a CMS system administrator, middleware engineer and infrastructure architect.

His biggest build there was the platform behind a multi-million-dollar content management system used by analysts in many locations. He designed its clustering and high availability. He then created its disaster recovery strategy, with automated switchover from production to recovery, and added multi-factor authentication.

From 2015 his role widened into automation. He ran Ansible Tower, wrote Ansible playbooks and roles, plugged them into CI/CD pipelines, and brought development, release and source-control teams on board. Automating daily administration cut monthly manual effort by more than 40%.

His design thinking also reached the people who set infrastructure standards. He wrote technical design patterns that were presented to Moody's Infrastructure Design Council. He stayed until March 2021.

Compliance as code, at scale

In May 2021 Siddiqui began consulting for Deloitte through CirrusLabs as a senior software engineer. The work is cloud configuration management for thousands of servers. He writes Puppet and Ansible code that enforces CIS hardening benchmarks, deploys security agents and applies ransomware remediation.

The numbers explain why automation is the only option. His work spans more than 400 Windows security controls, a similar number of Linux controls, and the six to eight security and compliance agents regulated systems must carry. It has covered environments of roughly 15,000 to 20,000 endpoints across AWS, Azure, GCP and on-premises systems.

He also built masterless open-source Puppet infrastructure, where each server applies its own configuration without calling home to a central server. That reflects a principle he returns to often: compliance logic should travel with the workload, wherever it runs.

"Security baselines, required agents, identity integration, drift detection, and evidence generation should be built into provisioning and configuration workflows from the beginning," he says.

The architect's lens

Siddiqui kept studying throughout his career. In 2020 he completed a Master of Professional Studies in Enterprise Architecture at the University of Pennsylvania. The same year he finished Red Hat training in system administration, OpenShift and advanced Ansible automation, after earlier courses in Puppet, TOGAF and ITIL.

He pairs that technical depth with a record of leading people. He has mentored managed-services teams, built vendor partnerships and taken cross-functional teams through full delivery cycles on multi-million-dollar projects. Leadership has recognized him for shipping minimum viable products using Agile methods.

His attention now is on where infrastructure goes next. In 2026 he authored six technical papers on compliance automation, configuration intelligence and hardened system baselines. They argue for compliance-as-code, policy-as-code, AI-assisted configuration intelligence and continuous validation: infrastructure that can explain what changed, why it matters and what to do about it.

"Cloud migration is not complete when a workload starts running in the cloud," he says. "It is complete only when the workload is governed, monitored, secured, compliant, and operationally resilient."

From a Livelink server in Pune to compliance code on thousands of machines, the standard has not changed. For Siddiqui, a system is not finished when it runs. It is finished when it can prove it is running the way it should.

At a glance