💼
Experience
AWS Cloud & DevOps Engineer
Ebteq Sdn Bhd
- Managed ticketing system for Operations Department, streamlining IT support and achieving high user satisfaction through timely technical issue resolution.
- Optimized ticketing system for Operations Department, proactively reducing incident response times and minimizing system downtime.
- Engineered and managed AWS infrastructure, including EC2, VPC, Load Balancers, S3, RDS, Lambda, API Gateway, and EKS.
- Designed and implemented CI/CD pipelines using GitHub Actions, automating code delivery through integrated testing, integration, and build processes.
- Containerized web applications using Docker and deployed them to Kubernetes (EKS) clusters for enhanced scalability and resilience.
- Developed and deployed automated monitoring solutions using AWS Lambda for server health and FinOps cost management.
System Support Engineer
WinPro MY Consultancy Sdn Bhd
- Provide Tier 1/2 support across multiple M365 tenants for SME and MNC clients as part of a managed service provider environment
- Perform cross-tenant management using Microsoft 365 Lighthouse and delegate access to customer tenants with role-based administration
- Deploy Intune and Autopilot configurations across different organizations, adhering to custom compliance requirements per client
- Manage Microsoft Entra ID (Azure AD) configurations per tenant: Conditional Access, MFA, branding, identity protection
- Standardize Defender for Endpoint baselines, security rules, and alert policies across environments with varied compliance frameworks (ISO 27001, CIS)
- Conduct onboarding/offboarding of clients into M365 tenant with documented processes, compliance tagging, and secure policies
- Deliver monthly reporting, licensing audits, and Secure Score dashboards for internal stakeholders and client compliance officers
- Act as a technical escalation point for international helpdesk teams in APAC and regions
- Build and maintain documentation for multi-tenant support procedures and automation scripts
Desktop Support Engineer
ILLEGEAR Sdn Bhd
- Provided hardware troubleshooting and desktop support for internal teams
- Diagnosed and resolved hardware and software issues across various device platforms
🚀
Projects
Scalable Web App with ALB & Auto Scaling
- Deployed a multi-tier web application that scales automatically from 1 to 4 instances.
- Achieved 70% cost savings compared to a static 4-instance deployment, resulting in a baseline infrastructure cost of $78/month.
- Ensured 99.9% availability with zero downtime during scaling events and application updates.
- Reduced deployment time for infrastructure to 2-3 minutes, with scaling responses under load taking approximately 2 minutes.
- Implemented 100% zero-downtime deployments through health check draining.
- Utilized Terraform for 100% infrastructure-as-code, enabling reproducible and declarative provisioning.
- Configured intelligent scaling policies with CPU thresholds and a dead-band to prevent oscillation and ensure resource efficiency.
Scalable Web App with NLB & Auto Scaling
- Deployed a highly available, private infrastructure handling millions of requests per second with automatic scaling.
- Achieved ultra-low latency (<1ms) and 10-100x faster performance than ALB for high-throughput workloads.
- Ensured 100% instance privacy by deploying all instances within private subnets, accessed solely via SSM Session Manager.
- Implemented cost-optimized outbound connectivity with AZ-local NAT Gateways, resulting in $66/month for two gateways.
- Resolved 4 real production deployment issues with documented root cause analysis, including AMI ID validation, WAF limitations, security group misconfigurations, and shell script parsing incompatibilities.
Multi-Tier Web Application Deployment on AWS
- Delivered a fully automated, highly available 3-tier architecture capable of handling traffic scaling from 1-4 instances with zero-downtime deployments.
- Achieved 99.9% high availability through Multi-AZ RDS failover and ALB rerouting, with RDS failover completing in under 5 minutes.
- Enabled 100% zero-downtime deployments using rolling updates coordinated with health checks.
- Reduced scaling response time to 2-4 minutes from load increase to ready instance, handling traffic spikes without manual intervention.
- Provided automated Multi-AZ failover for the database, promoting a standby in under 5 minutes upon primary failure.
- Established a cost-effective production stack estimated at $165-200/month with clear cost optimization strategies.
FinOps Sentinel - Enterprise AWS Cost Monitoring & Control Platform
- Deployed fully operational cost monitoring system with daily automated reports (active since May 14, 2026).
- Achieved estimated $20-50/month savings through workload optimization by enabling same-day cost remediation.
- Reduced infrastructure cost to ~$1.30/month, a 99% saving compared to third-party tools.
- Enabled 100% anomaly detection with <2 seconds alert latency.
- Reduced team effort for manual cost analysis from 2-3 hours/week.
- Achieved 100% uptime with zero Lambda failures in 28 days.
Multi-Tenant SaaS Application on AWS — Resume Summary
- Achieved proven zero cross-tenant data leakage via database-level filtering.
- Enabled Lambda to auto-scale to 1000+ concurrent executions; RDS Multi-AZ handles failover in less than 2 minutes.
- Implemented robust security with JWT signature verification, encrypted RDS (KMS), private VPC subnets, and restrictive security groups.
- Managed 100% of infrastructure with Terraform, ensuring reproducibility, version control, and idempotency.
- Estimated monthly operational cost of $164 for RDS, Lambda, API Gateway, and observability.
- Developed a production-ready system with a comprehensive test suite (19 tests), CI/CD compatibility, and documented runbooks.
AWS App Runner Deployment — Resume Summary
- Deployed a production-ready, containerized web application on AWS App Runner with a live HTTPS endpoint.
- Managed infrastructure entirely with Terraform, ensuring reproducible deployments with a single `terraform apply` command.
- Optimized Docker image size by 87% (from 328 MB to 43 MB) through effective `.dockerignore` configuration.
- Diagnosed and resolved 8 distinct deployment issues, including cross-platform build mismatches and IAM permission errors.
- Implemented least-privilege IAM roles for secure ECR image pulling and CloudWatch Logs access.
- Achieved 100% Terraform management of 9 infrastructure resources, encompassing App Runner service, ECR, IAM, and CloudWatch.
- Validated the architecture with a 21-test script, achieving 18 PASS / 3 WARN / 0 FAIL results.
- Ensured cross-platform build compatibility, fixing silent health-check failures caused by `arm64/amd64` image mismatches.
Serverless Event Ticketing & Check-In System — Resume Summary
- End-to-end attendee lifecycle automated — from Google Form submission to HTML ticket email in under 60 seconds per attendee
- Bulk send capability — `bulk_send.py` supports dry-run preview, status filtering, recipient CSV import, and sends to all DynamoDB recipients without Google Form
- Zero-redeploy template updates — email template managed independently in S3; updated and live without touching Lambda code
- Gmail OAuth token management solved — designed S3-backed token persistence with automatic refresh cycle across Lambda cold starts
- Terraform IaC — all AWS resources managed across 9 Terraform files; reproducible with `terraform apply`
- Least-privilege IAM — three separate Lambda execution roles, each scoped to only the DynamoDB attributes and S3 prefixes required
GraphQL API with AWS AppSync — Resume Summary
- Deployed a fully serverless GraphQL backend using AWS AppSync and DynamoDB provisioned with Terraform.
- Implemented five VTL-mapped resolvers for complete CRUD operations on a DynamoDB table.
- Ensured data integrity with condition guards (`attribute_exists(id)`) on update and delete mutations.
- Achieved automatic ID generation for new todos using `$util.autoId()` in VTL, eliminating client-side ID management.
- Established least-privilege IAM roles for separate DynamoDB access and CloudWatch Logs writing.
- Integrated CloudWatch field-level logging and three metric alarms for observability of error rates and latency.
- Validated the entire infrastructure and API functionality end-to-end with a 12-check automated test script.
- Achieved zero standing cost at rest by utilizing on-demand pricing for AppSync and DynamoDB.
Server Room Inspection Dashboard
- Authored end-to-end a twelve-module phased architecture covering networking, KMS, security, IAM, secrets, database, migration, glue, compute, cognito, notifications, and observability.
- Implemented reference-wired security groups enforcing the ALB → app:8080 → data:5432 path by SG identity, not CIDR ranges.
- Reused a single customer-managed KMS key across the stack for RDS, ECR, logs, secrets, and S3 backfill encryption.
- Employed gating discipline for cost and external dependencies using count/for_each flags, ensuring a clean and cheap default apply.
- Achieved least-privilege database access with a SELECT-only 'srid_app' login and runtime secret fetching via the ECS task role.
- Ensured secrets are never committed to source by using placeholder Secrets Manager containers populated in place.
- Developed a synthetic seed pipeline with a 2,924-row dataset loaded by a Glue Python-shell job.
- Maintained a `terraform validate`-clean codebase across all phases, with cross-variable validation ensuring CIDR accuracy.
Systems Manager Automated Patching
- Automates OS patching for mixed Amazon Linux 2023 and Ubuntu 22.04 fleets using AWS Systems Manager.
- Implements per-OS Patch Baselines, capturing each OS's native patch classification and severity filters.
- Ensures compliance with a 7-day VM-SLA by encoding a 7-day auto-approval delay into Patch Baselines.
- Mitigates blast radius through staggered Maintenance Windows and bounded concurrency (`max_concurrency = 25%`) with an error budget (`max_errors = 2`).
- Maintains a hardened security posture with egress-only security groups and Session Manager for audited shell access.
🎓
Education
Advanced Diploma of Information Technology
NSIT Academy
Finished 2024
Secondary School SPM Level
SMK Sri Perhentian
Finished 2019