PORTFOLIO
Khairul Fahmi Bin Mazlan
|· Kuala Lumpur, Malaysia
IT engineer specializing in server infrastructure, enterprise networking, and surveillance systems. Omada Expert certified, designing and deploying SDN and VIGI solutions for real clients. Also hands-on with Docker, Linux, Kubernetes, and CI/CD.
0+
Apps deployed on Linux servers
0+
Virtual servers on Proxmox VE
0+
CCTV cameras deployed
0
APs migrated to Omada SDN
0+
Customers supported
SKILLS
What I Work With
Networking & SDN
Surveillance & Security
Infrastructure & Virtualization
Monitoring & Observability
CI/CD & DevOps
Cloud & Serverless
Databases
Web Development
AI Dev Tools
PROJECTS
Things I've Built
ASEAN Battery EV
Maintained backend infrastructure and server operations for the ASEAN Battery EV platform. Managed deployment, uptime monitoring, and server configurations.
Stratagem Asia
Set up GitLab Runner with CI/CD pipeline for automated deployment; site automatically updates on every push to GitLab. Maintained backend server and infrastructure.
ARCHITECTURE
Self-Hosted on k3s
A self-hosted full-stack setup running on a single-node k3s cluster. Frontend and backend run as separate deployments under their own subdomains. An external Nginx Proxy Manager sits in front of Traefik so k3s can coexist with other services already using ports 80/443 on the host.
Browser → Cloudflare → Nginx Proxy Manager → Traefik → Service → Pod
IN PROGRESS
Expanding to a multi-node k3s cluster with Ansible playbooks for provisioning and configuration — bare-metal nodes, reproducible setup, and zero manual SSH steps.
EXPERIENCE
Where I've Worked
Technical Support Engineer (EUC, Server, Network)
Kesatria Awan Sdn. Bhd.
- Monitor 20+ Linux servers and network devices via Zabbix with real-time Telegram alerting; maintain server room UPS and power distribution infrastructure
- Deploy and manage 30+ applications across Docker containers and Linux environments, maintaining 99%+ uptime
- Provision and maintain 20+ VMs on Proxmox VE with scheduled snapshots and backup policies
- Design and deploy enterprise Wi-Fi using TP-Link Omada SDN and Ruijie APs; configure L2/L3 switching, VLANs, and inter-VLAN routing
- Plan and install Point-to-Point (P2P) wireless links to bridge buildings and remote sites without cabling
- Configure multi-WAN, firewall rules, and IPSec/SSL VPN for secure remote access across client networks
- Manage email infrastructure including migration, domain setup, SPF/DKIM/DMARC hardening, and mailbox administration via Mailcow
- Deploy and commission CCTV/IP camera systems (VIGI, Hikvision) with NVR integration; configure ONVIF cross-brand camera federation
- Manage DNS, CDN, and SSL for 10+ client domains via Cloudflare; handle incident escalation and root-cause analysis
- Administer Active Directory, user accounts, and endpoint support for EUC across multiple client environments
★ Wireless and wired network sustained at 99%+ uptime across all client sites; P2P links replaced costly leased-line alternatives.
★ Eliminated surveillance blind spots across 70+ cameras with unified VIGI/Hikvision NVR management via ONVIF.
★ Servers, network, and surveillance unified under a single monitoring stack — mean time to resolution cut significantly.
Training Coordinator (Part-Time)
Inframesia Technologies
- Administer DevOps Bootcamp 2025 & 2026 on Infratify platform (HRD Corp certified)
- Participate in coursework and quizzes to sharpen practical DevOps skills
System Administrator (Intern)
Koperasi Belia Islam Malaysia Berhad
- Maintained Windows Server 2003/2008 environments and performed daily backup procedures
- Performed daily IT operations and end-user troubleshooting
IT Technician (Part-Time)
ZBM IT Solutions
- Supported 200+ customers and completed 100+ hardware repairs
- Performed software diagnostics, virus removal, and OS reinstallation
EDUCATION
Bachelor of IT (Hons)
International Islamic University Malaysia (IIUM)
2021 – 2025 · CGPA 3.41
CERTIFICATIONS
CCNA – Introduction to Networks
Cisco
OCNA – Router and Switching
TP-Link
OCNA – Wireless
TP-Link
Graduate Technologist
Malaysia Board of Technologists
VIGI Certified Instructor (VCI) for VCSA
TP-Link Systems Inc.
Omada Certified Instructor (OCI) for OCNA Router & Switching
TP-Link Systems Inc.
Omada Certified Instructor (OCI) for OCNA Wireless
TP-Link Systems Inc.
TP-Link Network Professional (TPNP) SMB Business Wi-Fi
TP-Link Systems Inc.
VIGI Certified Security Administrator (VCSA)
TP-Link Systems Inc.
TP-Link Network Professional (TPNP) SMB Business Routing & Switching
TP-Link Systems Inc.
Omada Expert – Omada & VIGI Design Solutions (Exam + 3-Day Bootcamp)
TP-Link Systems Inc.
CERTIFICATION SPOTLIGHT
Omada Expert Certified
Omada Expert Certified
TP-Link Systems Inc. · Year 2026
Approved by Brian Dong · TP-Link APAC Vice President
Achieved the Omada Expert designation by passing rigorous examinations and completing a 3-day intensive bootcamp focused on enterprise network design, Omada SDN solutions, and VIGI surveillance integration, including real-world outdoor deployment challenges.
- Passed Omada Expert Examinations
- 3-Day Intensive Bootcamp · 11–13 June 2026
- Expert in Omada & VIGI Design Solutions
WHAT IS AN OMADA EXPERT?
An Omada Expert is a highly skilled IT professional, system integrator, or network engineer who has completed certification training for TP-Link Omada. This credential verifies the ability to design, deploy, and manage enterprise-grade Software-Defined Networking (SDN) environments using Omada hardware.
CORE COMPETENCIES
Centralized Cloud Management
Manage access points, switches, and gateways from a single interface using the Omada SDN platform.
Network Design & Scaling
Plan robust, high-performance Wi-Fi and wired networks for businesses, campuses, and hospitality venues.
Advanced Routing & Switching
Configure L2/L3 switches, firewalls, and multi-WAN setups to optimize business uptime.
Remote Troubleshooting & Deployment
Utilize Zero-Touch Provisioning (ZTP) to configure networks remotely without on-site IT personnel.
Integrated Security & Surveillance
Connect networks with VIGI surveillance and smart access control for end-to-end security.
BEYOND THE TERMINAL
Fun Facts
Has more watch straps than dress shirts
Smashed burger connoisseur
Teh tarik is the original load balancer — fixes everything
Runs more self-hosted services than most companies
Powered by coffee and terminal output
Nasi lemak before any major deployment
CONTACT
Get In Touch
Open to Network Engineer, DevOps, or IT Infrastructure roles
Omada Expert certified with real client deployments in enterprise networking and surveillance. Also hands-on with Linux servers, Docker, Kubernetes, and CI/CD. Open to roles in network engineering, pre-sales, IT infrastructure, or DevOps.