Projects

Cloud Resume Challenge

LiveBlog postCode

My résumé site, built end to end on AWS for the Cloud Resume Challenge, a 16-step project by Forrest Brazeal, plus most of its DevOps mods. You are reading the output of its pipeline.

How it's built

  • Next.js static site in a private S3 bucket, served by CloudFront through Origin Access Control, with Route 53 and an ACM certificate.
  • Visitor counter on an API Gateway HTTP API, a Python Lambda and DynamoDB, incremented atomically.
  • About 40 AWS resources in Terraform. One codebase for test and prod, state in HCP Terraform.
  • Test and prod are separate AWS accounts in one AWS Organization, managed as code with org-formation.
  • GitLab CI with OIDC, so no AWS keys are stored. Every push runs unit tests, a test deploy and Playwright smoke tests. Prod waits for one manual approval.
  • Five CloudWatch alarms send alerts through SNS to email and, through a notifier Lambda, to Slack.

AWS · Terraform · HCP Terraform · GitLab CI · Python · Next.js · Playwright · org-formation

SLEUTHTeam project, SIT

Code

Scam Likelihood Estimation Using Telegram History. A buyer shares their chat with a Telegram seller, and SLEUTH returns a risk score from 0 to 5, the warning signs it found, and advice on what to do next. Built by a team of six.

My part

  • The DevOps side: the Docker setup and the CI/CD pipeline in GitHub Actions, which builds the image, runs the tests inside the container, health-checks the web app and publishes the image to GHCR.
  • The command-line app, and a rewrite of the automated tests in pytest so the pipeline runs them on every change.
  • The three Gemini stages, with a teammate.

Python · Gemini · Telethon · Streamlit · Docker · GitHub Actions · GHCR

Experience

Oct 2026 to Nov 2026

Student Software Developer (part-time)

Singapore Institute of Technology · Student Work Scheme

Building BACMODS, a timetable planner for SIT Applied Computing students, in a team of four. A data pipeline from the official module lists to JSON, clash-detection logic, pull-request reviews, testing and deployment.

Sep 2025 to Feb 2026

System and Network Engineer Intern

Zectech Pte Ltd · Singapore

  • Automated image retrieval from about 20 remote CCTV sites, replacing about 160 engineer-hours a month of site travel with scheduled Bash and cron jobs.
  • Built the connectivity it runs over: IPsec site-to-site tunnels on FortiGate, and an OpenVPN relay on a DigitalOcean VPS for 4G sites behind CGNAT.
  • Handled 15+ network and endpoint faults a week as one of three first-line engineers, including after-hours callouts.
Sep 2025 to Feb 2026

Security System Engineer (part-time)

AGB Communication Co., Ltd · Remote

Assessed client infrastructure and reported findings by severity, each with a remediation path. The medium and high-severity items were fixed.

Education

2026 to present

BSc (Hons) Applied Computing (Fintech)

Singapore Institute of Technology

2023 to 2026

Diploma in Computer Engineering

Singapore Polytechnic · GPA 3.87 / 4.0

Certifications

Cloud and Kubernetes

  • AWS Certified Solutions Architect AssociateAWS
  • HashiCorp Terraform AssociateHashiCorp
  • Kubernetes and Cloud Native Associate (KCNA)Linux Foundation
  • Kubernetes and Cloud Native Security Associate (KCSA)Linux Foundation
  • AWS Certified Cloud PractitionerAWS
  • Azure Fundamentals (AZ-900)Microsoft
  • Oracle Cloud Infrastructure FoundationsOracle
  • Oracle Cloud AI FoundationsOracle

Security

  • Certified Ethical Hacker (CEH Practical)EC-Council
  • eCPPTINE
  • eJPTINE
  • Fortinet Certified Associate in CybersecurityFortinet
  • SOC Analyst Level 1 (SAL1)TryHackMe
  • Jr Penetration Tester (PT1)TryHackMe

Recognition

2024

Lenovo and Cisco security halls of fame

Reported vulnerabilities in their web infrastructure through responsible disclosure.

2025

Cisco NetAcad Riders, Silver Award

Cisco Networking Academy