2023 — present
Cyber Security & Network Engineering
Engineering and operating enterprise security across Palo Alto, FortiGate, Zscaler ZIA/ZPA, Azure and AWS environments.
Based in Malaysia
Aaron Ng
Data Architecture · Network Security · Infrastructure
I work across enterprise architecture, network security and infrastructure. Outside work, I build and self-host tools that solve problems I actually have.
01
About
I am a technical practitioner with more than a decade of experience across enterprise applications, integration architecture and cyber security.
My work sits between design and operations: understanding constraints, making sensible trade-offs and leaving systems clearer than I found them. I value boring technology used well, documentation that survives handover and controls that work in practice.
- Focus
- Architecture, security, infrastructure
- Approach
- Practical, evidence-led, maintainable
- Also
- Self-hosting, small tools, systems operations
02
Experience
Selected areas of work, in reverse chronological order.
2018 — 2023
Integration Architecture & Digital Transformation
Designed integration landscapes, APIs, SSO and security assessments for complex enterprise platforms and transformation programmes.
2015 — 2018
Enterprise Applications & Procurement Technology
Delivered SAP supply-chain and procurement solutions, user enablement and practical in-house applications.
03
Projects
Technical work described by the problem and outcome.
01
EV Efficiency Tracker
- Problem
- Charging data, efficiency and ownership costs were fragmented across apps and spreadsheets.
- What I built
- A self-hosted application for recording charging sessions and analysing efficiency and cost over time.
- Technologies
- TypeScript · PostgreSQL / SQLite · Docker
- Result / status
- In active personal use; deployed as a containerised service.
02
Enterprise Security Modernisation
- Problem
- Legacy security platforms and cloud connectivity needed to change without disrupting critical services.
- What I built
- Firewall refreshes, workload repatriation plans and Zero Trust connector migrations with explicit operational controls.
- Technologies
- Palo Alto · FortiGate · Zscaler · Azure · AWS
- Result / status
- Delivered across production enterprise environments.
03
Infrastructure Automation
- Problem
- Repeated infrastructure tasks were slow to reproduce and difficult to audit.
- What I built
- Small, purpose-built tools and repeatable deployment workflows for services I operate myself.
- Technologies
- Containers · Linux · Git · Shell · Networking
- Result / status
- Continuously refined through practical use in the homelab.
04
Homelab
A small environment for learning, operating and testing ideas properly.
I run infrastructure at home to understand the full lifecycle of a system—not only how to deploy it, but how to secure, observe, maintain and recover it.
The goal is not novelty or scale. It is a dependable environment that provides useful services and a safe place to test changes before trusting them elsewhere.
Compute & storage
Containerised services backed by resilient local storage, with deliberate separation between data and workloads.
Network
Segmented networks, policy-based access, secure DNS and controlled ingress rather than a flat trusted LAN.
Remote access
Private access to internal services using identity-aware and encrypted connectivity; no unnecessary public exposure.
Operations
Backups, monitoring, service health checks and documented recovery steps for the systems that matter.
Automation
Repeatable configuration and deployment where it reduces effort; manual control where it improves understanding.
Current focus
Improving observability, reducing operational complexity and keeping the environment understandable.
Representative stack TrueNAS · OPNsense · Docker · Home Assistant · Private DNS · VPN / Zero Trust access