Enterprise infrastructure
Linux, Windows Server, virtualisation, storage, and backup operations across office and data-centre environments.
INFRASTRUCTURE. SECURITY. OPERATIONS.Wan Firdaus.
Wan Muhammad Firdaus bin Wan M. Yusof
Wan Firdaus.
IT. With purpose.
I bring hands-on experience in infrastructure and cybersecurity together with the operational oversight needed to keep IT environments secure, stable, and well managed.
WFWAN FIRDAUS
Infrastructure to operations
Explore skills ↗My career spans enterprise infrastructure, retail, managed support, and secure production environments. At FIMM, my role combines technical delivery with procurement, vendor management, documentation, and audit support.
Practical cybersecurity
Endpoint protection, web application firewalls, privileged access management, and system hardening.
Microsoft 365 administration
Exchange, SharePoint, licensing, user administration, and email security in enterprise environments.
Operational ownership
Procurement, vendor coordination, in-house repairs, SOPs, and ISO and GTRM audit support.
Selected delivery highlights
Led an office infrastructure relocation, deployed in-house Zabbix monitoring, migrated a production website to RHEL 9, and resolved core-system performance issues.
View projects & achievements ↗Professional experience
From technical delivery to broader infrastructure and operational responsibility.
Jan 2023 — PresentCurrent role
Senior IT Executive
Federation of Investment Managers Malaysia
Kuala Lumpur
Combines hands-on infrastructure and cybersecurity operations with procurement, vendor management, documentation, and ISO and GTRM audit support.
Responsibilities & contributions
- Diagnosed high CPU load in the new FIMM core system and tuned the load balancer, PHP-FPM, and server settings to improve stability.
- Migrated the FIMM website from Rocky Linux to RHEL 9 to address security findings, penetration-test issues, and system bugs.
- Deployed an in-house Zabbix monitoring system from scratch as a cost-effective monitoring solution.
- Upgraded Active Directory and Windows Server environments; administered Linux and Windows servers, VMware, Hyper-V, and Veeam backups across local and data-centre environments.
- Deployed CrowdStrike EDR to notebooks and servers, configured Imperva/Cloudflare WAF protection, and implemented SecureKi privileged access management.
- Administered Microsoft 365, including Exchange, SharePoint, licensing, and Microsoft Defender email protection against spam and phishing.
- Used Kaseya for centralised patching and server administration, and Python scripts to automate bulk email and marketing activities.
- Provided primary IT support for 60+ staff and completed hardware repairs and upgrades in-house to reduce vendor costs.
- Supported ISO and GTRM audits through system hardening and SOP preparation, alongside procurement and vendor coordination.
- Maintained WordPress plugins, security fixes, backend functions, and website content.
Dec 2021 — Jan 2023
System Engineer
Zen Computer System Sdn Bhd
Cyberjaya
On-site resident engineer supporting MCMC infrastructure operations, hardware refresh, server and storage deployment, and daily maintenance.
Responsibilities & contributions
- Installed and configured HPE ProLiant DL380/DL560 servers, HPE Primera and MSA 2060 storage, and an MSL3040 tape library.
- Deployed ESXi hosts, vCenter, Veeam Backup, SSMC, and iLO Amplifier Pack.
- Monitored VMware performance and capacity through vRealize Operations, and backup status and reporting through Veeam ONE.
- Troubleshot VMware, Veeam, and hardware issues; supported Exchange Server, Active Directory, DNS, DHCP, and Kemp LoadMaster.
- Performed vMotion, vDS configuration, V2V/P2V migrations, and VM lifecycle administration.
- Managed disk-to-disk and disk-to-tape backups with weekly tape rotation; configured SAN storage, LUNs, and VMware datastores.
Jun 2021 — Dec 2021
Technical Support Engineer
Izeno Sdn Bhd
Kuala Lumpur
Supported internal users across Singapore, Indonesia, Thailand, and the Philippines, alongside managed customer support.
Responsibilities & contributions
- Provided first-level AWS support and prepared monthly Managed Support Service reports for customers.
- Administered email systems, Cisco Meraki devices, and Jira Service Desk.
- Provided regional user support across multiple offices.
Jan 2021 — Jun 2021
Support Engineer Analyst
Datacom Systems (Asia) Sdn Bhd
Kuala Lumpur
Provided global customer support for CloudBlue Commerce through email and telephone.
Responsibilities & contributions
- Guided customers on configuration, product usage, and best practices.
- Investigated technical issues, identified root causes, and delivered solutions.
- Managed cases and customer updates according to service-level agreements and documented procedures.
- Created technical notes and knowledge-base articles capturing troubleshooting steps and solutions.
Jul 2019 — Jan 2021
System Engineer
VINX Malaysia Sdn Bhd
Bangsar South
Supported AEON Group infrastructure across its data centre, headquarters, and retail stores nationwide, working with Japanese managers under strict operational standards.
Responsibilities & contributions
- Managed 45 Red Hat Linux servers, including subscriptions, support cases, SFTP, shell scripts, and LVM.
- Administered Windows Server 2003–2016, Active Directory, DNS, DHCP, DFS, and Windows Server Backup across AEON environments.
- Administered Microsoft 365 for 4,500 users, including accounts, groups, and user support.
- Supported VMware, Hyper-V, and Nutanix virtualisation environments.
- Provided hardware support for IBM X-Series, Dell EMC/Nutanix, Fujitsu, IBM V7000/V3700 storage, and IBM P-Series SAP servers.
- Managed backups using Windows Backup, Veeam, NetVault, and tape rotation; supported endpoint and server antivirus.
- Resolved shared-drive access, Microsoft 365, file recovery, SFTP, and DNS issues.
Jan 2017 — Jul 2019
System Engineer
Impressive Communications Sdn Bhd
Kota Damansara
Managed Data One Services IT infrastructure for a 24/7 billing and secure-printing operation serving telecom, banking, and utility clients.
Responsibilities & contributions
- Administered Linux and Windows servers, WatchGuard firewalls, and secure SFTP/FTP data transfers.
- Managed backup and restore, IT assets, procurement, and system maintenance.
- Supported NIPSON industrial printers and Lake Image barcode systems, coordinating with overseas engineers when required.
- Maintained CCTV, PABX, and door-access systems and provided frontline user support.
- Assisted with ISO 9001 audits and documentation.
- Led the Data One office migration from Shah Alam to Kota Damansara, including server racks, servers, firewalls, switches, and new cabling.
Feb 2016 — Dec 2016
Instructor / Facilitator
Startup Malaysia.org
Kuala Lumpur
Introduced school students to web and mobile application development.
Responsibilities & contributions
- Taught HTML, CSS, JavaScript, jQuery, and basic mobile app development using LiveCode.
- Selected for a Ministry of Finance-supported nationwide programme involving 100 schools across Malaysia.
Oct 2015 — Feb 2016
SL1M Trainee
Permodalan Nasional Berhad (PNB)
Kuala Lumpur
Completed on-the-job training at MNRB with a focus on internal SharePoint portals.
Responsibilities & contributions
- Developed seven SharePoint site portals for internal departments to improve workflows and information access.
Mar 2015 — Jul 2015
Intern
Skali Community Engagement Sdn Bhd
Kuala Lumpur
Contributed to software testing and community technology initiatives.
Responsibilities & contributions
- Created test scripts and identified bugs for the Arkib Negara “Hari Ini Dalam Sejarah” portal.
- Participated in CSR projects, including a dyslexia learning app and a charity event.
Capabilities built through practice
Technologies and disciplines used across my professional roles. Cloud self-learning is listed separately under education and training.
Servers & virtualisation
Cybersecurity & access
Microsoft 365 & cloud
Backup & monitoring
IT operations & governance
Automation & web
Projects & achievements
A selection of infrastructure, security, and process improvements delivered throughout my career.
Infrastructure relocation01
Data One office migration
Impressive Communications
Led the relocation of IT operations from Shah Alam to Kota Damansara.
Managed the end-to-end setup of server racks, servers, firewalls, network switches, and new cabling.
Performance & reliability02
Core-system troubleshooting
FIMM
Investigated high CPU load affecting the new core system.
Identified the root cause and fine-tuned the load balancer, PHP-FPM, and server configuration to support smoother operations.
Platform security03
Website OS migration
FIMM
Addressed website security findings, penetration-test issues, and system bugs.
Migrated the website operating system from Rocky Linux to RHEL 9 as part of remediation.
Observability04
In-house monitoring deployment
FIMM
Established a cost-effective way to monitor infrastructure.
Built and deployed a Zabbix monitoring system from scratch.
Access & protection05
Layered security implementation
FIMM
Strengthened protection for endpoints, servers, websites, and privileged access.
Deployed CrowdStrike EDR, configured Imperva/Cloudflare WAF protection, and implemented SecureKi PAM.
Secure data exchange06
Client SFTP processes
Multi-client project contributions
Supported secure file exchange for projects involving Celcom, TM, TNB, Bank Islam, Affin Bank, Bank Muamalat, Air Selangor, and LPPSA.
Designed and led SFTP/data-transfer processes for these client projects.
Internal collaboration07
Seven SharePoint portals
PNB / MNRB training placement
Supported departmental workflows and access to internal information.
Developed seven SharePoint site portals for different internal departments.
Education & certifications
Formal qualifications, professional credentials, and ongoing self-directed learning.
Professional certification
CompTIA
Security+
Professional cybersecurity certification.
CertifiedEducation
Bachelor’s Degree in Information Technology
UiTM Shah Alam
Diploma in Computer Science
UiTM Machang
Training & professional development
VMware Foundation — VTSP
VMware technical training / accreditation listed in my professional development.
AWS & Azure learning modules
Completed learning modules and courses through Udemy. Listed as training rather than cloud certification.
Start a conversationLet’s talk infrastructure,
Let’s talk infrastructure,
security, and IT operations.
To discuss a relevant opportunity and how my experience could support your team, please get in touch.
Email Firdaus