Ahmad Ferdaus Abd Razak

Cyberjaya, Malaysia
warpedlenses.com
fer1035@gmail.com

Experience

Emerson

Automation Engineer
July 2026 - Present
  • Design, develop, & implement automation solutions for Cloud & Infrastructure-as-Code platforms.
  • Provide platform consultation & support for teams in automation- & AI-related initiatives.
  • Provide technical consultation & support for teams in Cloud platform deployments & troubleshooting.

Emerson

Cloud Technical Architect
January 2024 - July 2026
  • Cloud architecture design & consultation with emphasis on Amazon Web Services (AWS) & Google Cloud Platform (GCP).
  • Managed Cloud landing zone frameworks.
  • Developed & co-developed Cloud-based solutions.
  • Built & managed DevOps automations.
  • Provided support for teams to design & deploy Cloud-based applications.

NI

Cloud/DevOps Engineer
June 2020 - January 2024
  • Created Cloud solutions for inter-application interactivity.
  • Designed & provided troubleshooting for Cloud infrastructure deployments.
  • Developed Cloud-based serverless API & other Cloud-native applications.
  • Executed & supported Cloud platforms architecture design projects.
  • Provided subject matter expertise on technical platforms & implementation decisions for Cloud-related initiatives.

NI

Web Systems Engineer
September 2017 - June 2020
  • IT systems administration for WebLogic, WebSphere Commerce, Sterling Configurator, & other web delivery platforms.

Skills

Terraform AWS CloudFormation Python Shell Scripting Go AWS Infrastructure & Applications GCP Infrastructure GitLab CI/CD GitHub Actions Azure DevOps Pipelines

Interests

Cloud Computing Systems Integration Solution Design CI/CD Automation Platform Administration Containerization API Design, Development, & Management Code Security & Testing (Terratest, Checkov, tfsec, etc.)

Portfolio

Project Highlights

  • Designed, developed, & implemented tagging and service enforcement policies for AWS & GCP, managed by Terraform.
  • Designed, developed, & implemented a log storage & querying solution in AWS using S3, Athena, Glue, & API Gateway.
  • Designed, developed, & implemented an AWS networking automation using Transit Gateway & Direct Connect, managed by Terraform.
  • Designed, developed, & implemented a GCP secure project provisioning & VPC Service Controls automation, managed by Terraform.
  • Designed, developed, & implemented a GCP automation to manage Workforce Identity Federation (WIF) provisioning & configuration.
  • Managed SSO & platform migrations for AWS, GCP, & Terraform due to company acquisition.
  • Designed, developed, & implemented a centralized AWS DNS forwarder solution using Route 53 Profiles.
  • Codified AWS Service Control Policies (SCPs) so they can be managed through Terraform for reusability, consistency, & accountability.
  • Established AWS Account Factory for Terraform (AFT) & supporting automations for account & VPC/network provisioning.
  • Designed, developed, & implemented an AWS shared VPC model with Men & Mice DNS, Aviatrix network integration, & CI/CD pipeline automation to help optimize Cloud networking costs.
  • Supported security, FinOps, & observability teams to configure & deploy applications in the Cloud.
  • Deployed & managed an API and static website authentication & authorization solution in AWS using Cognito, API Gateway, Lambda, DynamoDB, & CloudFront.

Awards

Good Neighbor Award

Awarded by NI
November 2022
Facilitator for departmental Lunch and Learn - Simplify, Standardize and Modernize IT session.

You Rock Award

Awarded by NI
July 2022
USM (Universiti Sains Malaysia) guest lecturer for Advanced Cloud Computing Platform topic.

Eagle Excellence Award

Awarded by NI
December 2018
Created WebSphere Commerce DataLoad automation, reducing workload & the amount of time required for development & production releases.

IT Innovation Hackathon

Awarded by NI
August 2018
Proposed a centralized logging platform for applications & services. Finished third in the competition.

Education

Bachelor's Degree

University of Michigan
Ann Arbor, USA
2001 - 2006

Repositories

C CompilerGenerate C from a Python3 file using Cython and then compile with GCC.
QuickEC2Create a quick AWS EC2 instance for testing purposes along with the necessary VPC, Subnet, and Security Group. The defaults deploy an Amazon Linux instance in the us-east-1 region.
cloudformation-cloudfront-invalidatorCreate invalidations to automatically purge CloudFront cache for a specified distribution when uploading files to its corresponding origin S3 bucket.
cloudformation-cloudtrail-sqsCreate AWS resources using CloudFormation to get CloudTrail events.
cloudformation-dns-forwarderAWS CloudFormation template to deploy private DNS forwarders for on-prem or inter-VPC resolution.
cloudformation-eks-fargateCreate an AWS Elastic Kubernetes Service (EKS) cluster with a Fargate profile.
cloudformation-events-teamsSend AWS events from Amazon EventBridge to Teams and ServiceNow.
cloudformation-link-creatorGenerate CloudFormation links based on template files uploaded to S3 buckets.
cloudformation-private-ec2Deploy a fully private EC2 instance in a VPC and Subnet without Internet Gateway, NAT Gateway, or public IP addresses. Inbound SSH is enabled through the AWS console using an Instance Connect VPC Endpoint and Transit Gateway private connections, while outbound goes through Transit Gateway only.
cloudformation-scp-notificationAn AWS CloudFormation template to deploy an application that notifies SNS Subscriptions for Organizations Service Control Policy (SCP) changes.
cloudformation-templateTemplate repository for CloudFormation templates in GitLab for structure and best practices.
cloudformation-waf-aclAn AWS CloudFormation template used to provision and manage AWS WAFv2 resources, including a Web ACL, managed rule groups, a custom regex pattern set, and an IP set.
encryption-pocA simple substitution / rotation cipher implementation in Python to demonstrate the concept of encryption.
pipeline-templatesAzure DevOps (ADO) pipeline templates.
private-github-siteServe public static HTML + CSS + JavaScript pages from private GitHub repositories. The Cloudflare Worker uses Personal Access Token (PAT) to fetch contents from GitHub.
pypi-ai_documentation_orchestratorOrchestrate the creation of a documentation file plus a technical diagram.
pypi-aws_access_advisorGenerate IAM actions list from AWS Access Advisor reports.
pypi-aws_administratorRun AWS administrative scripts.
pypi-aws_authenticatorLogin to AWS using CLI named profiles, IAM access key credentials, or SSO.
pypi-aws_cfstackGet AWS CloudFormation stack template and parameters.
pypi-aws_crawlerCrawl through AWS accounts in an organization using master assumed role.
pypi-aws_secrets_vaultManage secrets vaults in AWS Secrets Manager.
pypi-aws_snippetsPython3 classes and functions to execute common AWS operations.
pypi-aws_tgw_detailsGet AWS Transit Gateway details.
pypi-aws_tgw_routesManage AWS Transit Gateway routes.
pypi-azdo_pipelineCall Azure DevOps pipeline and optionally search output.
pypi-get_aws_detailsGet multi-region details from AWS Organizations accounts.
pypi-get_rds_supportGet RDS instance support details from AWS accounts.
pypi-get_s3_bucket_sizeA Python module to get the size of S3 buckets using CloudWatch metrics.
pypi-multithreaderExecute Python functions with multithreading.
pypi-playsongsPlay MP3s from a specified directory.
pypi-s3streamerStream files to AWS S3 using multipart upload.
pypi-ssooidcCreate temporary credentials with AWS SSO-OIDC access tokens.
pypi-terraform_rumsGet Terraform RUM statistics.
pypi-terraform_usageGet Terraform usage statistics.
pypi-tfc_adminMake Terraform Cloud API calls for common platform administration tasks.
pypi-vault_secretsMake API calls to Vault Secrets to retrieve secrets.
python-moduleTemplate repository for Python modules in GitLab for structure and best practices.
rclone-helperA quick script to add functionalities to rclone and its Python wrapper, rclone-python.
serverless-lambda-distributedProof-of-concept experiment for distributed computing using AWS Lambda as data collection and processing nodes.
site-uploaderUpload files to S3 with presigned URLs.
static-s3-siteServe a static HTML + CSS + JavaScript website from an S3 backend using AWS credentials so the bucket does not have to be public or have website hosting enabled.
terraform-aws-amplify-static-siteA terraform module to host a static website on AWS Amplify.
terraform-aws-blue-green-canaryA Terraform module to perform Blue-Green / Canary deployments using AWS Application Load Balancer (ALB).
terraform-aws-dns-profileTerraform module to manage Route 53 Profiles containing Private Hosted Zones. Other resource components such as Resolver Rules and VPC Endpoints will be implemented in the future.
terraform-aws-dynamic-credentialsA Terraform module to manage OIDC dynamic provider credentials in AWS.
terraform-aws-ec2-instanceTerraform module to manage an EC2 instance in AWS.
terraform-aws-endpoint-serviceTerraform module to manage an AWS VPC endpoint service along with the corresponding Elastic Load Balancer.
terraform-aws-events-alertsTerraform module to create alerts based on events from AWS services. Messages are sent to SNS, which can optionally be routed through to Lambda and SQS.
terraform-aws-fat-lambdaA Terraform module to create and execute ECS compute tasks using container images on a scheduled basis (cron job) where a Lambda function may not be sufficient. Feedbacks are sent to emails through SNS, and failed invocations are alerted through the same using Pipes.
terraform-aws-lambda-layerA Terraform module to manage AWS Lambda layers.
terraform-aws-lambda-urlA Terraform module to create and manage a Lambda function that can be invoked with a function URL. Sample Lambda function that can be used with the URL is included.
terraform-aws-networkTerraform module to create a VPC and other corresponding networking components.
terraform-aws-network-aclA Terraform module to manage AWS VPC Network ACLs.
terraform-aws-presigned-uploadsTerraform module to manage a file upload infrastructure using S3 presigned URLs and Lambda.
terraform-aws-rest-apiTerraform module to create REST API in AWS API Gateway.
terraform-aws-rest-api-lambda-endpointTerraform module to create a Lambda-based REST API endpoint in AWS API Gateway.
terraform-aws-rest-api-resourceTerraform module to create AWS API Gateway REST API resource for endpoint parents.
terraform-aws-s3-athenaA Terraform module to manage the configuration of Athena to query an S3 data source. Data cataloguing is executed by AWS Glue, which can be triggered on-demand, on a schedule, or from S3 *Object Created* events.
terraform-aws-s3-notificationsA Terraform module to manage notifications for S3 object creation events. This should be deployed in the account where the S3 bucket resides, unless you're willing to deal with cross-account requirements, which are out-of-scope for this module.
terraform-aws-s3-uploadsA Terraform module to manage S3 buckets as upload destinations, where each user group is confined to a single bucket to ensure data security and privacy.
terraform-aws-s3-vpc-endpointsA Terraform module to manage S3 Interface and Gateway endpoints. It creates both Interface and Gateway type endpoints. Gateway endpoint is free, but Interface endpoint charges you for traffic flow.
terraform-aws-secure-domainA Terraform module to create and manage a Route 53-hosted domain name with DNSSEC protection.
terraform-aws-security-groupTerraform module to manage AWS Security Groups. Currently, the ingress and egress rules support IPv4, IPv6, and Security Group ID inputs.
terraform-aws-transfer-serverTerraform module to manage AWS Transfer Server, user, and the backend S3 Bucket for storage.
terraform-aws-transit-gatewayTerraform module to manage cross-account, inter-VPC AWS Transit Gateway networking.
terraform-github-repositoryTerraform module to create GitHub repositories along with a branch ruleset targeting the default branch.
terraform-google-services-policyTerraform module to deny access to GCP services, with project-level exceptions.
terraform-google-tagging-policyTerraform module to manage resource tagging policy for a GCP organization.
terraform-google-vpc-accessTerraform module to manage VPC Service Perimeters, Access Levels, and Ingress / Egress policies.
terraform-google-wifTerraform module to manage Workforce Identity Federation (WIF) for Google Cloud Platform (GCP).
terraform-moduleTemplate repository for Terraform modules in GitLab for structure and best practices.
terraform-sentinel-policiesTerraform Sentinel policies.
terraform-tfe-project-workspace-governorA Terraform module to create Workspaces that can trigger other Workspaces in a Project, with shared credentials.