Terraform - AWS CloudFormation - Python - Shell Scripting - Go - AWS Infrastructure & Applications - GCP Infrastructure - GitLab CI/CD - GitHub Actions - Azure DevOps Pipelines - Cloud Computing - Systems Integration - Solution Design - CI/CD Automation - Platform Administration - Containerization - API Design, Development, & Management - Code Security & Testing (Terratest, Checkov, tfsec)
July 2026 - Present
Design, develop, & implement automation solutions for Cloud & Infrastructure-as-Code platforms. Provide platform consultation & support for teams in automation- & AI-related initiatives. Provide technical consultation & support for teams in Cloud platform deployments & troubleshooting.
January 2024 - July 2026
Cloud architecture design and consultation with emphasis on Amazon Web Services (AWS). Managing Cloud landing zone frameworks, developing and co-developing solutions, building DevOps automations, and helping teams design and deploy applications.
June 2020 - December 2023
Cloud and DevOps architecture design, development, system integration, automation, and operations. Focusing mainly on infrastructure and governance in Amazon Web Services (AWS), Azure, and Google Cloud Platform (GCP) with emphasis on solutions, security, financial management, consultation, and support.
September 2017 - June 2020
Maintained and supported operations for ni.com services, including DNS, middleware, and self-service capabilities. Developed application deployment automations and self-service API to decrease response times for repetitive tasks.
September 2014 - September 2017
Developed products for education- and robotics-based business opportunities including the technical team to support business activities and office operations. Founded the infrastructure and applications for unimapholdings.com.my.
March 2008 - September 2017
Developed training syllabus and infrastructure for IT, multimedia, and innovation education for school students. Executed training sessions and competition modules to encourage children to take part in technology-based extra-curricular activities.
2000 - 2001
Shah Alam, Selangor, Malaysia
Code repositories, modules, libraries, and applications.
Code repositories for Python, Terraform, CI / CD pipelines, and more.
Installable Python modules and libraries for the Python3 environment.
Environment governance, infrastructure automation, and solutions development in the Cloud.
| C Compiler | Generate C from a Python3 file using Cython and then compile with GCC. |
| QuickEC2 | Create a quick AWS EC2 instance for testing purposes along with the necessary VPC, Subnet, and Security Group. The defaults deploy an Amazon Linux instance in the us-east-1 region. |
| cloudformation-cloudfront-invalidator | Create invalidations to automatically purge CloudFront cache for a specified distribution when uploading files to its corresponding origin S3 bucket. |
| cloudformation-cloudtrail-sqs | Create AWS resources using CloudFormation to get CloudTrail events. |
| cloudformation-dns-forwarder | AWS CloudFormation template to deploy private DNS forwarders for on-prem or inter-VPC resolution. |
| cloudformation-eks-fargate | Create an AWS Elastic Kubernetes Service (EKS) cluster with a Fargate profile. |
| cloudformation-events-teams | Send AWS events from Amazon EventBridge to Teams and ServiceNow. |
| cloudformation-link-creator | Generate CloudFormation links based on template files uploaded to S3 buckets. |
| cloudformation-private-ec2 | Deploy a fully private EC2 instance in a VPC and Subnet without Internet Gateway, NAT Gateway, or public IP addresses. Inbound SSH is enabled through the AWS console using an Instance Connect VPC Endpoint and Transit Gateway private connections, while outbound goes through Transit Gateway only. |
| cloudformation-scp-notification | An AWS CloudFormation template to deploy an application that notifies SNS Subscriptions for Organizations Service Control Policy (SCP) changes. |
| cloudformation-template | Template repository for CloudFormation templates in GitLab for structure and best practices. |
| cloudformation-waf-acl | An AWS CloudFormation template used to provision and manage AWS WAFv2 resources, including a Web ACL, managed rule groups, a custom regex pattern set, and an IP set. |
| encryption-poc | A simple substitution / rotation cipher implementation in Python to demonstrate the concept of encryption. |
| pipeline-templates | Azure DevOps (ADO) pipeline templates. |
| private-github-site | Serve public static HTML + CSS + JavaScript pages from private GitHub repositories. The Cloudflare Worker uses Personal Access Token (PAT) to fetch contents from GitHub. |
| pypi-ai_documentation_orchestrator | Orchestrate the creation of a documentation file plus a technical diagram. |
| pypi-aws_access_advisor | Generate IAM actions list from AWS Access Advisor reports. |
| pypi-aws_administrator | Run AWS administrative scripts. |
| pypi-aws_authenticator | Login to AWS using CLI named profiles, IAM access key credentials, or SSO. |
| pypi-aws_cfstack | Get AWS CloudFormation stack template and parameters. |
| pypi-aws_crawler | Crawl through AWS accounts in an organization using master assumed role. |
| pypi-aws_secrets_vault | Manage secrets vaults in AWS Secrets Manager. |
| pypi-aws_snippets | Python3 classes and functions to execute common AWS operations. |
| pypi-aws_tgw_details | Get AWS Transit Gateway details. |
| pypi-aws_tgw_routes | Manage AWS Transit Gateway routes. |
| pypi-azdo_pipeline | Call Azure DevOps pipeline and optionally search output. |
| pypi-get_aws_details | Get multi-region details from AWS Organizations accounts. |
| pypi-get_rds_support | Get RDS instance support details from AWS accounts. |
| pypi-get_s3_bucket_size | A Python module to get the size of S3 buckets using CloudWatch metrics. |
| pypi-multithreader | Execute Python functions with multithreading. |
| pypi-playsongs | Play MP3s from a specified directory. |
| pypi-s3streamer | Stream files to AWS S3 using multipart upload. |
| pypi-ssooidc | Create temporary credentials with AWS SSO-OIDC access tokens. |
| pypi-terraform_rums | Get Terraform RUM statistics. |
| pypi-terraform_usage | Get Terraform usage statistics. |
| pypi-tfc_admin | Make Terraform Cloud API calls for common platform administration tasks. |
| pypi-vault_secrets | Make API calls to Vault Secrets to retrieve secrets. |
| python-module | Template repository for Python modules in GitLab for structure and best practices. |
| rclone-helper | A quick script to add functionalities to rclone and its Python wrapper, rclone-python. |
| serverless-lambda-distributed | Proof-of-concept experiment for distributed computing using AWS Lambda as data collection and processing nodes. |
| site-uploader | Upload files to S3 with presigned URLs. |
| static-s3-site | Serve a static HTML + CSS + JavaScript website from an S3 backend using AWS credentials so the bucket does not have to be public or have website hosting enabled. |
| terraform-aws-amplify-static-site | A terraform module to host a static website on AWS Amplify. |
| terraform-aws-blue-green-canary | A Terraform module to perform Blue-Green / Canary deployments using AWS Application Load Balancer (ALB). |
| terraform-aws-dns-profile | Terraform module to manage Route 53 Profiles containing Private Hosted Zones. Other resource components such as Resolver Rules and VPC Endpoints will be implemented in the future. |
| terraform-aws-dynamic-credentials | A Terraform module to manage OIDC dynamic provider credentials in AWS. |
| terraform-aws-ec2-instance | Terraform module to manage an EC2 instance in AWS. |
| terraform-aws-endpoint-service | Terraform module to manage an AWS VPC endpoint service along with the corresponding Elastic Load Balancer. |
| terraform-aws-events-alerts | Terraform module to create alerts based on events from AWS services. Messages are sent to SNS, which can optionally be routed through to Lambda and SQS. |
| terraform-aws-fat-lambda | A Terraform module to create and execute ECS compute tasks using container images on a scheduled basis (cron job) where a Lambda function may not be sufficient. Feedbacks are sent to emails through SNS, and failed invocations are alerted through the same using Pipes. |
| terraform-aws-lambda-layer | A Terraform module to manage AWS Lambda layers. |
| terraform-aws-lambda-url | A Terraform module to create and manage a Lambda function that can be invoked with a function URL. Sample Lambda function that can be used with the URL is included. |
| terraform-aws-network | Terraform module to create a VPC and other corresponding networking components. |
| terraform-aws-network-acl | A Terraform module to manage AWS VPC Network ACLs. |
| terraform-aws-presigned-uploads | Terraform module to manage a file upload infrastructure using S3 presigned URLs and Lambda. |
| terraform-aws-rest-api | Terraform module to create REST API in AWS API Gateway. |
| terraform-aws-rest-api-lambda-endpoint | Terraform module to create a Lambda-based REST API endpoint in AWS API Gateway. |
| terraform-aws-rest-api-resource | Terraform module to create AWS API Gateway REST API resource for endpoint parents. |
| terraform-aws-s3-athena | A Terraform module to manage the configuration of Athena to query an S3 data source. Data cataloguing is executed by AWS Glue, which can be triggered on-demand, on a schedule, or from S3 *Object Created* events. |
| terraform-aws-s3-notifications | A Terraform module to manage notifications for S3 object creation events. This should be deployed in the account where the S3 bucket resides, unless you're willing to deal with cross-account requirements, which are out-of-scope for this module. |
| terraform-aws-s3-uploads | A Terraform module to manage S3 buckets as upload destinations, where each user group is confined to a single bucket to ensure data security and privacy. |
| terraform-aws-s3-vpc-endpoints | A Terraform module to manage S3 Interface and Gateway endpoints. It creates both Interface and Gateway type endpoints. Gateway endpoint is free, but Interface endpoint charges you for traffic flow. |
| terraform-aws-secure-domain | A Terraform module to create and manage a Route 53-hosted domain name with DNSSEC protection. |
| terraform-aws-security-group | Terraform module to manage AWS Security Groups. Currently, the ingress and egress rules support IPv4, IPv6, and Security Group ID inputs. |
| terraform-aws-transfer-server | Terraform module to manage AWS Transfer Server, user, and the backend S3 Bucket for storage. |
| terraform-aws-transit-gateway | Terraform module to manage cross-account, inter-VPC AWS Transit Gateway networking. |
| terraform-github-repository | Terraform module to create GitHub repositories along with a branch ruleset targeting the default branch. |
| terraform-google-services-policy | Terraform module to deny access to GCP services, with project-level exceptions. |
| terraform-google-tagging-policy | Terraform module to manage resource tagging policy for a GCP organization. |
| terraform-google-vpc-access | Terraform module to manage VPC Service Perimeters, Access Levels, and Ingress / Egress policies. |
| terraform-google-wif | Terraform module to manage Workforce Identity Federation (WIF) for Google Cloud Platform (GCP). |
| terraform-module | Template repository for Terraform modules in GitLab for structure and best practices. |
| terraform-sentinel-policies | Terraform Sentinel policies. |
| terraform-tfe-project-workspace-governor | A Terraform module to create Workspaces that can trigger other Workspaces in a Project, with shared credentials. |
