π KPT-PCP Scholar Β· Final Year B.Cs. (Hons) Network Engineering, Universiti Malaysia Sabah π» Networking, Cybersecurity & Self-Hosted Infrastructure π Based in Selangor, Malaysia
Networking is my passion, but I build the full stack around it: from Zero Trust architectures down to the Docker Compose files that keep my own homelab running. I thrive in hands-on environments where I can configure, deploy, break, and fix real systems rather than just simulate them. My personal motto: "Networks That Never Sleep."
I run NOVAFORTRESS, a self-hosted homelab (UGREEN DXP4800 Plus, Debian 12) where I deploy and harden production Docker stacks, including a live school management system serving real users.
An end-to-end IoT medical telemetry platform predicting asthma attacks using Edge AI and environmental monitoring.
- Hardware: Dual-processor edge architecture (ESP32 Gateway + Raspberry Pi Pico). Features an INMP441 I2S microphone for acoustic ML confidence scoring and environmental sensors (DHT22, MQ-135, Sharp PM2.5).
- Cloud Backend: Laravel 12 API, Mosquitto MQTT for ultra-low latency, Brevo SMTP for intelligent anti-spam emergency alerts, and a Python Random Forest AI engine.
- Frontend & Auth: Next.js 14 clinical dashboard with Laravel Sanctum multi-tenant security and password recovery flows.
- Infrastructure: Self-hosted on NOVAFORTRESS via Docker Compose with secure Zero-Trust WSS bridging using Cloudflare Tunnels.
- Team: 4 members. I built all the hardware and code; my teammates focused on research and documentation and contributed ideas and improvements.
π Kafa Lokub: School Management System (Production, 80+ students)
A 29-module school management system for KAFA Masjid Al-A'laa Lokub, built in about a month as a university service-learning (SULAM) project, covering academics, attendance, kewangan (finance/yuran), notifications, and parent-student linking.
- Stack: Laravel 11, Next.js 16, MySQL 8, Nginx, Cloudflare Tunnel, self-hosted on NOVAFORTRESS
- Hardening: Completed a 16-finding security audit (Audit V3), including fixes for a payment race condition and XSS in print functions, TLS 1.2+/HSTS, SSL Labs A+
- Ops: Automated deploys, cron-driven Laravel scheduler, daily encrypted backups, custom alerting scripts
- π Team award: Anugerah Pembentang Sistem Terbaik (best system presenter), Program Pendigitalan Pengurusan Masjid, DUN Karambunai. I presented the system.
- Role: Full-stack developer and system presenter in the SULAM team (architecture, backend, frontend, deployment, security). Volunteer maintainer since the course ended.
Low-cost, open-source ZTNA framework for SMEs, built around a 3-zone architecture (Client Edge β Cloud Control Plane β Localized Data Plane).
- Tools: OpenZiti, Laravel API Proxy, AWS EC2, mTLS
- Modules: Identity & Endpoint Management, Dynamic Access Policy Engine, Endpoint Posture Verification, Geo-Fencing, Service Cloaking Monitor, Audit & Threat Logging (8 total)
- SDG Alignment: Industry, Innovation & Infrastructure (SDG 9), Decent Work & Growth (SDG 8)
- Status: All 8 modules built and the control plane running on AWS EC2. Now in testing, full review and documentation; final report due JanβFeb 2027
Full-stack group project digitizing community event management and engagement.
- Stack: Native PHP, MySQL, JavaScript (AJAX), HTML5/CSS3
- Features: RBAC, QR code attendance scanning, payment verification, community forum
- Role: Full-Stack Developer (Admin Panel, Database Architecture, Auth System)
Ongoing self-hosted homelab used to deploy, monitor, and secure production-grade Docker stacks.
- Unified multi-service Compose architecture, Cloudflare Tunnel exposure, named-volume permission management via ACLs
- Live testbed for infrastructure practices later applied to Kafa Lokub and Z-Forge
(more projects coming soon as labs and coursework progress)
All badges verifiable on my Credly profile
Cisco Networking Academy
- CCNA: Introduction to Networks (Apr 2025)
- CCNA: Switching, Routing, and Wireless Essentials (Apr 2025)
- Network Support and Security (Apr 2025)
- Introduction to Packet Tracer (Apr 2025)
- Networking Basics (Nov 2024)
- Networking Devices and Initial Configuration (Nov 2024)
Google Cloud Skill Badges
- Manage Kubernetes in Google Cloud (May 2024)
- Perform Predictive Data Analysis in BigQuery (May 2024)
- Monitor and Manage Google Cloud Resources (May 2024)
- Analyze Images with the Cloud Vision API (May 2024)
- Analyze Sentiment with Natural Language API (May 2024)
- Analyze Speech and Language with Google APIs (May 2024)
Fortinet
- Getting Started in Cybersecurity 1.0 (Mar 2023)
- Introduction to the Threat Landscape 1.0 (Feb 2023)
Fortinet Certified Fundamentals: Cybersecurity(expired Mar 2025)
CompTIA
- CompTIA Cloud+ ce Certification (valid through Apr 2029)
Awards & Scholarships
- π Anugerah Pembentang Sistem Terbaik (Program Pendigitalan Pengurusan Masjid, DUN Karambunai, Kafa Lokub)
- π KPT-PCP Scholarship (Pelajar Cemerlang Politeknik, 2023β2027)
- π Director's Award (PolyCC & PSP, 2024, CGPA 3.99)
- ποΈ Dean's List Award (Every Semester, 2020β2023)
- π‘ TM Fiber Optic Certification (CA1C, Aug 2023) (not on Credly, institutional cert)
Tulip Resources Sdn Bhd β IT Technician (AugβOct 2026, full-time during semester break)
- Supported VPN connectivity, installed VPN client certificates and trained users for an IT infrastructure rollout for a government defence client
- Site surveys, network cabling and roadside-unit racking across about 10 sites for a government traffic monitoring and enforcement network
- Tested site links to a central command centre over Peplink routers and monitored subcontractors' civil works
PKT Logistics Group Sdn Bhd β Network Support Trainee (JanβJun 2023, diploma industrial training)
- Configured Aruba & HP switches, Cisco & Ruckus APs
- Monitored & upgraded HQ and Peninsula networks
- Supported Windows Server and basic AWS environments
- Completed Fortinet NSE1β3 during internship
- Universiti Malaysia Sabah (UMS) β Bachelor of Computer Science (Hons.) Network Engineering (2023β2027)
- Politeknik Seberang Perai (PSP) β Diploma in IT (Networking), CGPA 3.99 (2020β2023)
Kafa Lokub, Z-Forge (FYP), and NOVAFORTRESS aren't pinned here as they're self-hosted / private repos, not public GitHub projects. See Featured Projects above for those.
β‘ This README is my GitHub Profile Portfolio, showcasing production systems, academic labs, and ongoing infrastructure work. Updated as FYP2 and NOVAFORTRESS progress.