Chi Chong Fong

With AWS:

• Deployed Transit Gateway replaced by Virtual Private Gateway on AWS Cloud using Direct Connect to on-premises devices and backup Site to Site VPN connection to Layer 3 Firewall e.g. FortGate.
• Deployed new cloud infrastructure for Maxims branch project e.g. EC2 instance, internet gateway, Layer 3 load balancer, RDS on new VPC environment.
• Prevented natural disaster or human mistake, created backup policy for all EC2 instance or RDS database based on company compliance.
• Enhance security level on AWS environment using AWS CloudWatch alarms when alert triggered cloud administrator or resource owner.
• Troubleshoot with routing mismatch or network security group misconfigurations and application performance.
• Maintenance workloads e.g. SSL certificate renewal on Cloudfront or load balancer, RDS version upgrade, Windows and Linux patching upgrade
• Consultant cloud solution with customers

With Azure:

• SaaS, PaaS, IaaS on Azure
• Security consideration by company , deployed private communicate to Storage account by Service Endpoint under Microsoft backbone, not Internet.
• Implement compliance and policy requirements, applied Azure policy to resource consistency.
• Implement principle of least privilege PoLP, created custom RBAC role for granted least permission for all users.
• Implement availability, used Azure scale set for fault tolerance, granted virtual machine in available zone without downtime.
• Prevent steal password, used Azure MFA registered on Azure and Microsoft Authentication App must installed on device anyone.
• Improved Windows server for storage is not enough, extend drive using Azure file share, benefit of many virtual machines.
• Improved one Windows or Linux server only for storage is not enough, extend managed disk.
• Enhance security level on Azure environment using Azure Monitor to avoid problem occurred.
• Enhance resource level on Azure environment using Lock to prevent delete resource by people.
• Analyzed budget aspect on company used Azure Price Calculator to get estimate of monthly cost of service and also created budget alert for exceed cost on Subscription.
• Improved scalable aspect, build Hub and spoke network topology for storage, workload, identify environment.
• Prevented natural disaster or human mistake, backup all resource is best solution for disaster recovery.
• Implemented disk security, used Azure disk encryption for double encryption via PowerShell, and key is used generated by Microsoft.
• Implemented routing and DNS aspect, used Azure private DNS for internal or public DNS for public resource.
• Consider BYOD devices by company, used Azure Point to Site VPN from anywhere.
• Deployed encrypted tunnel for connection between cloud and On-premise.
• Troubleshoot with routing mismatch or network security group misconfigurations and application performance.
• Consultant cloud solution with customers

• Troubleshot complex multi-vendor network service provider issues.
• Performed troubleshooting for Cisco, CheckPoint, F5 BigIP load balancer and packet analysis.
• Provided complete end-to-end engineering and installation of route-based IP network solutions.
• Provided network support services for devices such as switch, routers, and other hardware.

• Troubleshot complex multi-vendor network service provider issues.
• Performed troubleshooting for Juniper, Cisco, and packet analysis.
• Implemented project for installation and configuration.
• 7x24 hours working

• Troubleshot complex multi-vendor network service provider issues.
• Performed troubleshooting for Juniper, Cisco, and packet analysis.
• Performed configuration for Juniper, Cisco, Huawei router.
• Managed over 20 customer request per day.

• Troubleshot complex multi-vendor network service provider issues.
• Managed, tracked, and coordinated problem resolution and escalation processes.
• Provided complete end-to-end engineering and installation of route-based IP network solutions.
• Provided network support services for devices such as switch, routers, and other hardware.
• Training onsite