Production zero-trust platform: 26 mapped controls over 35+ endpoints, per-request IP binding, JWT stage-machine MFA, and an Nginx/UFW/fail2ban edge. DIGITEX 2026 Silver.
Zero TrustNginxTLS 1.3Node.js
// network & security engineer
I design, secure, and operate networks — from routing and segmentation to production zero-trust.
Chan Qing Yee — CS (Networks & Security) graduand, UTM 2026. Enterprise routing and segmentation, carrier-network deployment, and hardened production infrastructure — designed, deployed, and operated.
carrier networks
Huawei Malaysia — U Mobile 5G RAN & Microwave upgrade, 100+ teams
routing & segmentation
Full Cisco CCNA curriculum — OSPF, VLANs, ACLs, VPN, DHCP
production security
Zero-trust platform shipped and operated — DIGITEX 2026 Silver
// open to singapore roles · Johor Bahru → Singapore
// featured case study
SecureExam UTM
DIGITEX 2026 SilverA production examination platform where every request is treated as untrusted: eight defense-in-depth layers spanning TLS 1.3, an Nginx/UFW/fail2ban edge, per-request IP binding, JWT stage-machine MFA, and least-privilege RBAC — 26 mapped controls over 35+ endpoints, built solo and operated on a hardened DigitalOcean Singapore host.
- 11,700+
- LOC
- 26
- Controls
- 35+
- Endpoints
- 4
- RBAC roles
NginxTLS 1.3Node / ExpressMySQL 8Flask
Read the full case study →request path · 8 layers
explore →- Browser lockdown· client
- TLS 1.3· transport
- Nginx reverse proxy· edge
- JWT + TOTP MFA· authn
- RBAC · 4 roles· authz
- Node + Express· app
- MySQL 8· data
- Risk scorer· detection
// selected work
See all projects →Project Engineer internship on Huawei’s U Mobile 5G upgrade — deployment coordination across 100+ subcontractor teams and 1,000+ site acceptance deliverables, plus 5 automation tools cutting daily reporting by 93%.
5G RANMicrowavePythonPowerShell
Enterprise network design
CourseworkA network design for a Malaysian SME, built and verified in Cisco Packet Tracer: 8 routers over 7 departmental segments, OSPF area 0, VLAN-segmented staff floors, relayed DHCP, an IPsec remote-access VPN, and ACLs that keep remote workers out of Finance.
OSPFVLANsACLsIPsec VPN
// credentials
See all →CCNA: Switching, Routing & Wireless Essentials
Cisco
CCNA: Enterprise Networking, Security & Automation
Cisco
CCNA: DevNet Associate
Cisco
Google Cybersecurity Professional
Google
OCI 2025 AI Foundations Associate
Oracle
// off the keyboard
“Not all those who wander are lost.”
Looking for a network & security engineer in Singapore?
I’m open to roles and happy to walk through any of this in detail.