My Work
IT Hosting OPS Tech lead 2024-2025, Solution Engineer 2025-Current
• "Serve as the primary escalation point (L3/Tier 3) for all critical system outages, leading incident response teams to minimize downtime and restore service integrity."
• "Architected and led the post-mortem analysis process for major incidents, translating root cause findings into actionable preventative measures that reduced recurring outage frequency
• "Drove cross-functional collaboration between Engineering, Development, and Operations teams during high-severity outages to ensure swift, coordinated resolution and adherence to SLAs.
• "Expertly diagnose and resolve complex, multi-layered infrastructure failures across [mention specific systems, e.g., network, cloud environments, databases], consistently restoring service within defined RTO/RPO targets.
• "Partnered with business stakeholders to translate complex operational challenges into scalable, high-availability technical roadmaps and architectural blueprints."
• "Authored comprehensive Solution Design Documents detailing technical scope, cost analysis, risk assessment, and implementation phasing for major infrastructure transformations."
• "Drove the migration of legacy systems ([Old System]) to a modern, cloud-native platform, completing the transition on time and under budget while maintaining 99.99% uptime during cutover phases."
PCI/DSS Compliance
• Newly acquired MSP provider, successfully reversed engineer IT infrastructure with 15 days of handover.
• Successfully passed PCI/DSS compliance afterwards.
• Task given within 3 months of deadline to secure and ensure compliance.
• Complete overhaul of Active Directory, Identify Access, Server remediation and Workstation remediation, File-server structure and access redesign.
Azure Virtual Desktop Optimization
• Did Full Design, Implementation, UAT and Documentation.
• Reduced Azure Cost from 11k down to 4k monthly cost.
• Configured Azure Virtual Desktop for 3 geo location in AMEA region.
• Created secure access and removed all direct RDP access over the internet.
• Optimized all Azure components to further reduce cost.
• Migrated legacy application to work on new Azure Virtual Desktop.
• On going Managed Service Client.
• Printer management redesigned using Printix technology.
• Reviewed M365 license usage and migrated PST saved in local NAS to shared/user mailboxes.
Modern Desktop Project
• Did Full Design, Implementation, UAT and Documentation.
• This project had a goal of moving away from on-premise solution to 100% cloud based modern desktop fleets.
• Configured Hybrid Exchange for Migration to M365.
• Migrated all users/shared mailbox, without interruption to email flow.
• Configured Fleet of Surface Pro for Autopilot and Intune.
• Configured Environment for Hybrid Domain Join.
• Worked with 3rd party application vendor to ensure working application inside WVD.
• Ensured all sites including 3rd party VPN and routes are working.
• Implemented Security Hardening for Surface and reduce attack surface.
• Replaced On-prem print server with Printix Cloud Print solution.
Windows Virtual Desktop
• Deployed RDS replacement for a financial institution.
• Did Full Design, Implementation, UAT and Documentation.
• 1-to-1 replica and deployed with no interruption to existing RDS.
• Worked with 3rd party application vendor to ensure working application inside WVD.
• Ensured all sites including 3rd party VPN and routes are working.
• User profile deployed with FSlogix utilizing Azure Files with Active Directory ACL integration.
Modern Desktop Project
• Did Full Design, Implementation, UAT and Documentation.
• This project had a goal of moving away from on-premise solution to 100% cloud based modern desktop fleets.
• Configured Hybrid Exchange for Migration to M365.
• Configured Fleet of Surface Pro for Autopilot and Intune.
• Worked with 3rd party application vendor to ensure working application inside WVD.
• Ensured all sites including 3rd party VPN and routes are working.
• Implemented Security Hardening for Surface and reduce attack surface.
• Replaced On-prem print server with Printix Cloud Print solution.
Windows Autopilot (WHITEGLOVE)
• Designed/Implemented Windows Autopilot(WHITEGLOVE)
• Configured tenancy for Autopilot and Surface Pro autodeloplyment via Serial number.
• Configured deviced security policies such as Bitlocker, Windows Hello and Windows Defender policies.
• Deployed Office 365 and 3rd party applications.
Windows Virtual Desktop
• Designed/Implemented WVD tailored to match existing on-premise infrastructure.
• Worked with 3rd party developer to migrate application to work in Azure. (OfficeTech, CBS)
• Ensured new solutions/technologies worked with dated process and applications.
Azure High Availability RDS infrastructure
• Designed/Implemented a high available and scalable RDS infrastructure that can handle 700 users.
• Infra was a hybrid Azure-on-premise design, due to internal apps was needed to be published.
• Utilized multiple SAAS and PAAS from Azure to provide a cost-effective solution.
Azure Hosted Training environment
• Designed/Implemented a secure RDS environment consisting of multiple RDS, SharePoint, Exchange Servers and File-server.
• RDS servers are locked down using Deepfreeze technology.
• Ensured that all data will be cleared upon end of class, in compliance with Data Privacy law.
ADFS implementation for Office 365 and local Active Directory, with SSO
• Configured internal domain ADFS to authenticate with Office 365 and other 3rd party relying provider.
• Infra was a hybrid Azure-on-premise.
Migration Office 365
• Migrated on-premise exchange email to Office 365 (Users and Shared Mailbox).
• Migrated data/files from on-premise file server to SharePoint online.
Shared Environment lock-down
• Reviewed current RDS environment for customers, and Identified security issues.
• Secured RDS environment from outside access utilizing cost effective solutions such as Network Security Groups, and Point-to-Site native Azure authentication.
MFA lockdown Office 365/ Azure
• Advocated to secure cloud-based credentials upon joining the company.
• Successfully secured all Domain Admin level credentials for the company.
Azure Hybrid
• Implemented migration of on-premise servers to Azure with a site to site connection to on-premise.
• Servers consisted of Production SQL servers, Domain Controller, RDGateway, NPS, ADFS, Domain Controllers.
DR solution
• Implemented Azure DR solution for on-premise, Azure and Datto, multiple technology that doesn’t have an out of the box solution available.
• Achieved with bridging two cloud networking and on-premise Network linked via IPSec tunnel (Datto Cloud DR VLAN and Azure VLAN and On-premise Network)
• Wrote BCP recovery steps and revert step process documentation.
Nutanix Migration
• Migrated all servers from a Hyper-V cluster running on a 10-year-old hardware.
• Created a migration plan with minimal disruption to user and production.
• Migrated a total of 10TB worth of VM Data.
Azure SQL and Secure VPN provisioning.
• Provisioned an SQL server and provided a secure way for 3rd party developer access to the environment without opening the whole infrastructure.
• Developers was only able to access SQL server and nothing else.
SharePoint online lock-down.
• Successfully configured conditional access for SharePoint across multiple site consisting of multiple countries such as Malaysia, Vietnam, Australia.
• Successfully implemented Azure MFA with RDS environment, with Exclusion when users are at office internal network.
Azure Hybrid Migration
• Migrated on-premise SQL, DC, File-server, Print Server, CRM to Azure.
• Planned with minimal downtime and disruption to production.
Azure Hybrid Migration NPS, Azure AD Connect, AD Certificate Services
• Migrated on-premise NPS, AD Certificate Services and Azure AD connect to Azure.
• Planned with minimal downtime and disruption to production.
SCCM Project
• Migrated from SCCM 2007 to SCCM Current Branch.
• Created new image deployment for Windows 7 and Windows 10 machines.
• Migrated all repositories from old SCCM to new SCCM repository.
Migration Office 365
• Migrated from web-hosted free email into Office 365 for Business.