Systems engineer with 5+ years of technical experience
spanning across windows, macOS and Linux. Passionate about building self-healing systems, automation, infrastructure management and modern workplace solutions. Still learning and exploring daily!
Certified ISMS associate Auditor with IRCA in ISO27001:2022 standard, CISSP ISC associate.
Cloud Platforms
AWS
Azure
Infrastructure Management
Hypervisors: Hyper-V, VMware ESXI, Proxmox
Windows Server: ADDS, GPO, DFS, DNS/DHCP, WSUS, RDS
Networking
Backup and recovery: Acronis, Shadowprotect, Azure Backup, NAS backup
Containers & Orchestration
Docker
Kubernetes
Device Management
Intune + Autopilot
Sophos Mobile
Duo Security
Workspace One
Information Security
CIS hardening
Email and endpoint security
Risk management
Observability
Prometheus
Grafana
Azure Monitor
Sentinel
Elastic Stack
Zabbix
Other Security Tools
Ad-blockers:Pi-Hole, NextDNS
Antivirus: Windows Defender, Sophos, Acronis, Trend Micro
Email Security: Defender for Office 365, Avanan, Sophos
Languages
Python
Bash
Powershell
Batch
FirstTel Tech · Full-time
- Independently handles L1 and L2 support across multiple sites, spanning project work and operational BAU — from Intune/Autopilot/Hybrid Entra deployment to backup, server, NAS, and network monitoring — analysing root cause to drive permanent fixes and process upgrades.
- Led hybrid Entra Join + Intune/Autopilot rollout from scratch (policies, dynamic groups, app deployment, scripts), cutting device provisioning time to under 20 minutes for hybrid and 10 minutes for Entra-only builds.
- Deployed a monitoring solution that cut customer Azure opex by ~10%, replacing a costlier legacy PRTG setup with tuned, noise-reduced alerts routed to mobile messaging.
- Administer M365 security end-to-end — Exchange, SharePoint, Purview, Defender, Entra — including conditional access rollouts, DLP/retention policies, and EDR onboarding across Windows, macOS, iOS, and Android.
- Built PowerShell/Graph/KQL automations for AD account audits, M365 health/compliance reporting, and Entra sign-in anomaly alerts (SMS + email), plus Power Automate flows for NAS-to-Teams alerts.
- Set up and administer hypervisor environments (ESXi, Hyper-V, Proxmox) including VM migrations between platforms; configured backup/DR across ShadowProtect, Acronis Cloud, and Synology/QNAP NAS.
- Manage and create technical documentations for deployments (e.g. Intune, Zabbix) and sourced vendors that delivered cost savings on M365/Autodesk licensing.
- Other governance work includes drafting of information security policy and support contract negotiations with external vendors.
- Delivered remote support across APAC (MY, TW) and non-APAC (US, EU) regions.
National Healthcare Group · Full-time
- Troubleshoot and perform root cause analysis for BAU issues raised and develop alternatives to address them which includes but not limited to: .NET/python program, windows service, batch scripts, editing registry/gpedit and task scheduler.
- Project Management: Plan for the implementation of new projects which includes but not limited to: procurement, delivery of items, deployment and troubleshooting and tracking unresolved issues.
- Vendor Management: Conduct PMO meetings with stakeholders to track vendor support in addressing issues timely. Work with vendors on preventive and breakdown maintenance scheduling and support as well as hardware replacements and requisitions and costing.
EF Software Pte Ltd · Full-time
- Project coordination: Pre-sales and post-sales presentation and support. Coordinate with relevant parties on project implementation and conduct necessary site surveys and user requirements gathering for pre-implementation planning. Organise and host video meetings on project requests and requirements.
- Data analytics: Present years of data in visually pleasant charts via Python and compile in powerpoint slides for users with brief explanation.
- Administration: Creation of user and engineer guides and other documentation. Application of permits and creating and submitting method of statements for pre-work clearance. Inventory and assets tracking.
- Servers: MS Patching via big fix and wsus offline installer. Server windows patching for both cloud and on-premise servers. Symantec Endpoint Protection updates when required.
Persolkelly (outsourced to NCS) · Full-time
- Handled P1–P3 service requests and incident management, including network/desktop/printer hardware troubleshooting, software installation and configuration, machine cloning, and basic AV troubleshooting.
- Troubleshot MS365, MS Office, and Adobe Acrobat issues, along with various VPN connectivity problems, ensuring prompt resolution.
- Worked with Active Directory for user account checks and object management; re-imaged and prepared laptops/desktops for deployment.
- Mapped shared mailboxes and printers, and maintained documentation and asset management records.
- Ensured cases stayed within SLA, liaising with hardware vendors and cross-functional teams for timely resolution while adhering to strict work protocols.
Goldtech Resources Pte Ltd · Full-time
- Provided desktop and service desk support for clients across Singapore and overseas via phone, email, remote, and onsite channels, logging and resolving incidents/tickets within SLA.
- Troubleshot hardware (RAM, HDD, graphics cards, monitors/cabling) and software issues including in-house applications, VPN, Office 2010/365, and Bloomberg terminals for trade floor users.
- Deployed and configured laptops for new hires, managed user account creation/removal, access rights, and shared drive mapping, while maintaining IT guides and inventory records.
- Set up remote support channels (AnyDesk, TeamViewer) for the agency ahead of Circuit Breaker, enabling continuity of colleague support.
- Supported recruitment operations: screened candidates, compiled resumes, posted job ads, and coordinated backfill engineer deployment planning across project sites.
- Contributed to business development and research initiatives, including RPA/automation solution scanning, vendor comparisons, and presentation decks for stakeholders.
Education
🎓
Diploma in Computer Engineering
Temasek Polytechnic
2015
Certifications
☁️
AWS Solutions Architect — Associate
Amazon Web Services
2023
⚙️
M365 Administrator Expert
Microsoft
2025
🛡️
Microsoft Cybersecurity Architect Expert
Microsoft
2025
🔒
CompTIA Security+ ce
CompTIA
2023
🖥️
AZ-801: Configuring Windows Server Hybrid Advanced Services
Microsoft
2025
📋
ITIL v4 Foundation
AXELOS / PeopleCert
2022
📝
ISO 27001 Lead Auditor — Certificate of Achievement
IRCA
2026
🏛️
SC-100: Microsoft Cybersecurity Architect
Microsoft
2025
🔑
Microsoft Certified: Identity and Access Administrator Associate
Microsoft
2025
☁️
AZ-900: Azure Fundamentals
Microsoft
2023
💻
MD-102: Endpoint Administrator Associate
Microsoft
2025
🌐
CompTIA Network+
CompTIA
2023
Courses
☁️
(SCTP) Cloud Administrator
NTUC Learning Hub
2023 - 2024
📊
NICF — Certified Associate in Project Management (CAPM)
NTUC Learning Hub
Jan 2023
🤖
Robotic Process Automation for Beginners
Temasek Polytechnic
Feb 2023
🏗️
AWS Academy Cloud Architecting
Republic Polytechnic
Oct 2022
🐧
Essentials of Linux System Administration (LFS201)
Ngee Ann Polytechnic
Oct 2022
📈
Data Science Bootcamp
Vertical Institute
Aug 2022 - Sep 2022