Hi, i'm Zaw

Video intelligence and enterprise AI infrastructure — on-prem, government security baseline.

• Operate the OpenShift estate — namespaces, RBAC and SCC policy, network policies, quotas, Routes, HAProxy ingress, PV/PVC storage
• Built and run MariaDB Galera multi-master HA — survives node loss with no failover downtime, fronted by HAProxy for routing and health checks
• ELK monitoring across cluster, systemd, and MariaDB logs — dashboards and alerts that surface failures before users report them
• Own the Linux layer — patching, kernel and package management, resource limits, storage mounts, sequenced to keep production up
• Day-1 build and Day-2 ops on an enterprise AI platform running on GPU-backed nodes, plus database ownership of schema, tuning, backup and recovery
• Provision infrastructure with Terraform — environments rebuilt from code, not reassembled by hand
• Harden to CIS and government IM8 baselines; remediate scan findings and produce the audit evidence
• Privileged access through CyberArk, service credentials in Vault — no long-lived secrets in configs or node images
• Identity governance across Entra ID and on-prem LDAP — user/group lifecycle, RBAC, Azure Policy — over a mixed Linux and Windows estate
• IPSec VPN tunnels so field devices reach internal systems without public exposure

Infrastructure and delivery behind Singtel's NaaS, 5G, and multi-access edge computing products.

• First responder across Linux servers and Kubernetes clusters — traced failures node to pod to service, with root-cause analysis feeding back into runbooks
• Administered Kubernetes clusters for edge workloads — node management, workload placement, resource limits, Helm-packaged deployments
• Full-stack Zabbix monitoring across infrastructure, network, and application metrics
• Jenkins CI/CD pipelines and ArgoCD rollouts — Git as source of truth, cluster drift reconciled automatically instead of patched in place
• Troubleshot and performance-tuned OpenSearch, MySQL, Redis, MongoDB, and container workloads
• Owned OS patching across the Linux fleet — systems current, vulnerabilities closed, no production downtime
• Terraform for provisioning; Ansible for daily Docker and virtualised operations
• Python automation for security (IoC IP filtering) and operations (system health checks)

End-to-end IoT monitoring platform turning plant-sensor telemetry into dashboards, mobile apps, and analyst-ready datasets.

• Designed and delivered an end-to-end IoT monitoring platform, turning raw sensor data from plant-monitoring microcontrollers into real-time dashboards, mobile apps, and analyst-ready datasets
• Built responsive dashboards with the MERN stack and Next.js, deployed on Vercel, visualising soil moisture, temperature, and humidity readings
• Built MQTT and WebSocket ingestion feeding a Confluent Kafka streaming layer, cleaning, transforming, and aggregating telemetry from a fleet of plant-monitoring devices
• Partnered with data analysts to define schemas and expose query-ready datasets for trend analysis and anomaly detection
• Delivered a native iPadOS app in Swift for on-site monitoring and alerts, plus a cross-platform Flutter companion app
• Secured REST APIs with JWT authentication and role-based access control
• Implemented CI/CD with Docker and GitHub Actions, plus monitoring for pipeline health and device uptime