HERI RISKI ANTO, S.Kom

Senior Database Administrator (DBA) • Infrastructure & Platform Architect

📍 Tangerang City / Jakarta, Indonesia (UTC+7) • Remote / Hybrid

✉️ rizqy.pra85@gmail.com

✈️ Telegram: @riprlutuk

🐙 github.com/RiprLutuk

🌐 riprlutuk.github.io

01 // Executive Professional Summary

Results-driven Database Administrator (DBA), Cloud Infrastructure, and Backend Platform Architect with 7+ years of production experience designing, scaling, and securing mission-critical data platforms, enterprise telecommunication fleets, and national fintech infrastructure. Expert in administering multi-engine database environments (PostgreSQL, MS SQL Server AlwaysOn, Oracle 19c, MySQL, ClickHouse), designing high-availability (HA/DR) failovers, automating real-time CDC/ETL data pipelines with Apache Kafka & Debezium, and leading ISO/IEC 27001:2022 Information Security Management System (ISMS) compliance. Proven track record developing high-throughput microservices and API gateways using Go (Golang) and Python.

02 // Technical Competencies & Stack

DBA & HA FLEET: PostgreSQL (9.x–16.x), MS SQL Server (2016–2022 AlwaysOn AG), Oracle 11g/19c (RMAN, Data Guard, PL/SQL), MySQL/MariaDB, ClickHouse Columnar OLAP, PgBouncer pooling, zero-downtime schema migrations. CDC & STREAMING: Change Data Capture (CDC), Debezium Connector, Apache Kafka Cluster, OLTP-to-OLAP ETL pipelines, Prometheus exporters, Grafana Blackbox SLA telemetry. BACKEND & CLOUD: Go (Golang), Python (FastAPI, Flask), PHP 8.x (Laravel 11), Linux Administration (Ubuntu, Debian, RHEL), AWS (EC2, RDS, VPC), TencentDB, Docker Compose, CI/CD automation. SECURITY & COMPLIANCE: ISO/IEC 27001:2022 ISMS Lead, Dynamic & Static Data Masking (DDM), AES-256-GCM / TDE at Rest, TLS 1.3 / mTLS in Transit, Row-Level Security (RLS), pgAudit Immutable Forensics, HMAC-SHA256 Salted PII Anonymization, Fortinet FortiGate UTM, StrongSwan IPsec VPN, CIS Linux Hardening, UU PDP No. 27/2022, POJK 10/2022. FRONTEND & MOBILE: Flutter, Android Native (Java), Vue 3, PGlite WASM (Offline-first embedded SQL).

03 // Professional Experience History

Database Administrator (DBA) • PT Link Net Tbk

Feb 2025 – Present | Jakarta / Remote

Enterprise Oracle to PostgreSQL Migration: Architected zero-downtime migration from Oracle 19c to PostgreSQL 16, rewriting legacy PL/SQL stored procedures and triggers into optimized PL/pgSQL with automated data validation.
Distributed NoSQL Optimization: Migrated MongoDB replica sets to AWS DocumentDB, tuning indexing structures and aggregation pipelines for high-concurrency billing systems.
Cross-Cloud Downsizing: Executed zero-downtime database migration from AWS RDS to TencentDB, achieving significant cloud compute cost savings while preserving 99.98% production SLA.
Observability & Telemetry: Deployed centralized Grafana & Prometheus fleet dashboards monitoring connection pools, replication lag, and query execution plans across production clusters.

Senior Fullstack Engineer / IT Specialist • Halalvestor Global Asia (Vestora.id)

Dec 2024 – Oct 2025 | Tangerang / Jakarta

Crowdfunding Financial Ledgers: Architected backend financial microservices for Vestora.id, a regulated Sharia securities crowdfunding (SCF) platform operating under strict OJK oversight.
Deadlock & Race Condition Elimination: Enforced PostgreSQL Advisory Locks and Serializable transactions, completely eliminating race conditions and double-allocation anomalies during rapid investment oversubscriptions.
Payment & KYC Integrations: Built automated payment gateway webhooks, automated investor identity verification (e-KYC), and dividend distribution engines with PHP 8.x / Laravel and PostgreSQL.

Data Management & Infrastructure Operations Lead • AFPI (Fintech Data Center)

Mar 2020 – Apr 2025 (5+ Years) | Jakarta

National Fintech Data Center Operations: Supervised data management and infrastructure for the national Fintech Data Center (FDC), federating real-time credit data exchange across 100+ licensed P2P fintech lenders nationwide.
ISO/IEC 27001:2022 ISMS & Data Privacy Lead: Spearheaded full security audit lifecycle and ISO 27001 certification. Implemented Dynamic Data Masking (DDM) and HMAC-SHA256 salted hashing for customer PII (NIK, financial history), enforced Row-Level Security (RLS), and deployed pgAudit immutable 5-year audit trails compliant with UU PDP No. 27/2022 and POJK 10/2022.
Perimeter Network & VPN Architecture: Maintained high-availability site-to-site AES-256 IPsec VPN tunnels (StrongSwan) and Fortinet FortiGate enterprise firewalls connecting member institutions.
Real-Time ETL & SRE Monitoring: Designed automated data ingestion pipelines and Grafana dashboards, cutting incident triage and resolution times by 50%.

IT Business Analyst & Systems Officer • PT Sas Kreasindo & Syarfi Fintech

2018 – 2020 | Indonesia

Streamlined ERP manufacturing workflows in Odoo ERP and administered cloud Linux servers for early-stage Sharia P2P fintech platforms with native Android Java modules.

04 // Key Engineering Artifacts & Open Source

⚡ DDAG (Dynamic Database API Gateway): High-performance Go gateway dynamically exposing PostgreSQL, MSSQL, Oracle, and MySQL schemas as secure, authenticated REST APIs (github.com/RiprLutuk/DDAG).

🔄 ch-olap-pipeline: Continuous real-time CDC pipeline streaming WAL mutations from OLTP into ClickHouse columnar storage for sub-second analytical reporting (github.com/RiprLutuk/ch-olap-pipeline).

🛡️ OpenOrg: Civic organization administration platform with digital identity issuance and cryptographic certificate verification (github.com/RiprLutuk/openorg).

📱 WargaHub: Community governance PWA featuring offline-first local SQL storage powered by embedded PGlite WASM (github.com/RiprLutuk/WargaHub).

05 // Education & Certifications

🎓 Bachelor of Computer Science (S.Kom)
STMIK Widya Pratama Pekalongan (2014 – 2018)

🛡️ ISO/IEC 27001:2022 ISMS Lead
Implementation & Audit Alignment (AFPI)

🔒 Ethical Hacking & Penetration Testing
Spentera Hacking Playground

📊 Data Engineering & Python Track
DQLab Academy & Dicoding