Muaz Amirruddin

NOC Engineer

NOC and VoIP professional with over 5 years of hands-on experience in telco and managed services environments.

Proven track record serving prominent organizations including Celcom, NTT Cloud Communications, and M1 Digital Labs.

"Sometimes the wrong train can take us to the right place" - Paulo Coelho

Download Resume

Hi 👋, I am Muaz

A certified Cisco Network Associate (CCNA).

Azure Administrator (AZ-104) & Azure Networking Engineer (AZ-700).

Currently seeking a new role in Cloud Networking & Infrastructure.

Technical Expertise

Cloud & Infra

Azure Portal
AWS Console
Windows/Linux Servers
Hybrid Connectivity

Networking

Routing & Switching (CCNA)
SIP & VoIP Protocols
Network Security / Firewalls
Packet Analysis (Wireshark)

Operations

NOC Monitoring (NMS)
CI/CD (GitHub Actions)
Incident Management
Backup & Data Resiliency

Technical Projects

Azure Static Web App Portfolio

Automated deployment of a global high-availability portfolio using Azure SWA and GitHub Actions.

Read Full Documentation →

AWS Migration & Staging Pipeline

Architecting a Git-Ops workflow using S3, CloudFront, and OIDC for secure, branch-based deployments.

Read Full Documentation →

Azure Static Web App Portfolio

I built this project to kickstart my journey in Cloud Engineering by setting up a professional portfolio which will give me both hands-on experience and a platform to share my resume. This portfolio was deployed as an Azure Static Web App (SWA) since it is fast, utilizes a global CDN, and provides free SSL out of the box.

1. Frontend Web Development & Pre-requisites

The base template was sourced from Awesome Landing Pages / HTMLRev, which I customized and enhanced with the help of Gemini AI to improve accessibility, layout, and modern coding standards. Afterwards, I ensured index.html and assets were pushed to my GitHub repository and my Azure account was active.

2. Creating the Resource

Logged into the Azure Portal and initiated the creation of the Static Web App. I filled in the subscription details and created a new Resource Group: rg-muaz-portfolio. I picked the region closest to me (East Asia) and selected GitHub as my source.

3. Deployment Configuration

I used the Deployment Token approach. The authorization flow follows a specific handshake using GitHub Action secrets to ensure only authorized automated pipelines can modify the portfolio.

4. Advanced & Global CDN

Azure Static Web Apps automatically use a Global CDN, which replicates the HTML and images to edge servers all over the world. The location selection here primarily affects staging environments and Backend APIs (Azure Functions).

5. Resource Tagging

Tags were implemented for organization and resource tracking within the Azure environment.

6. Automating Updates (CI/CD Pipeline)

When I created the SWA, Azure automatically added a YAML file to my repository. Now, every time I push a change to GitHub, my website updates automatically within seconds.

# Automated Workflow Created by Azure
- name: Build And Deploy
  uses: Azure/static-web-apps-deploy@v1
  with:
    azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN }}

7. Create "Staging" branch in GitHub

A staging branch was added to the project, ensuring no accidental push and practice of professional CI/CD workflows by separating Production and Staging environments. To further enchance security to the main branch, a branch protection rule is implemented on it so any changes would not be committed directly on the main branch and require confirmation.

8. Custom Domains

To provide a professional identity to the portfolio, I registered muazamirruddin.com through Cloudflare. I configured the CNAME and ALIAS records to point to the Azure SWA endpoint, enabling secure HTTPS traffic under a personalized URL.

AWS Migration & Staging Pipeline

Moved from "Click-Ops" to "Git-Ops." This project involved migrating my infrastructure to AWS to gain granular control over CDN invalidations, OIDC security, and branch-based environment routing.

1. Architecture Evolution

Transitioned from Azure SWA to a custom stack using Amazon S3 for storage and CloudFront for global distribution with Origin Access Control (OAC) that restricts access to private S3 buckets, ensuring content is served only through designated CloudFront distributions rather than public URLs.

2. Secure Authentication (OIDC)

Eliminated long-lived AWS Access Keys. Used OpenID Connect to establish a short-lived trust relationship between GitHub Actions and AWS IAM.

Condition: { StringLike: { "token.actions.githubusercontent.com:sub": "repo:MuazAmirruddin/AWS-Portfolio:*" } }

3. Multi-Branch Logic

Implemented a "Smart Deployer" in YAML. Code pushed to dev updates the staging bucket; code pushed to main updates the live production bucket.

if [[ "${{ github.ref }}" == "refs/heads/main" ]]; then
  echo "BUCKET_NAME=${{ secrets.S3_BUCKET_PROD }}" >> $GITHUB_ENV
  echo "DIST_ID=${{ secrets.CF_DIST_ID_PROD }}" >> $GITHUB_ENV
  else
  echo "BUCKET_NAME=${{ secrets.S3_BUCKET_DEV }}" >> $GITHUB_ENV
  echo "DIST_ID=${{ secrets.CF_DIST_ID_DEV }}" >> $GITHUB_ENV
  fi

4. Cloudflare Subdomain Routing

Configured Cloudflare DNS to manage the staging.muazamirruddin.com subdomain, pointing to the secondary CloudFront distribution.

M1 Digital Labs Sdn. Bhd.

Network Operation Center Engineer | 12/2022 - Present

Infrastructure Surveillance: Provide 24/7 proactive monitoring of hybrid infrastructure, including on-premises network devices and Windows/Linux server environments to ensure 99.9% uptime.
Cloud Health Management: Oversee Azure and AWS cloud health utilizing Azure Monitor and AWS Health Dashboard; triaging alerts and executing incident response.
Data Resiliency: Manage and audit daily backup operations for critical business data, ensuring successful recovery points and compliance with RPO/RTO targets.
Endpoint & Security Ops: Orchestrate monthly Windows Patch Management and coordinate threat response for malware/suspicious activity, maintaining environment hardening.

NTT Cloud Communications

Global Support Engineer | 05/2021 - 11/2022

Global Technical Support: Acted as a Tier 1 escalation point for global enterprise clients, managing complex Service Desk requests for UCaaS solutions.
VoIP Protocol Analysis: Diagnosed voice quality issues by analyzing SIP call flows to isolate faults between carrier, SBC, and internal networks.
Microsoft Teams Engineering: Provided specialized support for Teams Phone System, troubleshooting call routing, Direct Routing, and media quality issues.
Identity & Access Management: Managed full lifecycle of Teams Voice users, including provisioning and configuration via Teams Admin Center.

Celcom Networks Sdn. Bhd.

Network Operation Center Engineer | 06/2019 - 05/2021

RAN Operations: Monitored Radio Access Network (RAN) availability; performed remote Layer 1 remediation including BBU and RRH resets to restore service.
Core Transport Monitoring: Supervised the Packet Transport Network (PTN) to ensure high-speed backhaul performance and SLA compliance.
Fiber Infrastructure Assurance: Managed surveillance of the core optical fiber backbone; utilized NMS alerts to pinpoint fiber cuts, reducing Mean Time to Repair (MTTR).

Muaz Amirruddin

Hi 👋, I am Muaz

Technical Expertise

Cloud & Infra

Networking

Operations

Technical Projects

Azure Static Web App Portfolio

AWS Migration & Staging Pipeline

Azure Static Web App Portfolio

1. Frontend Web Development & Pre-requisites

2. Creating the Resource

3. Deployment Configuration

4. Advanced & Global CDN

5. Resource Tagging

6. Automating Updates (CI/CD Pipeline)

7. Create "Staging" branch in GitHub

8. Custom Domains

AWS Migration & Staging Pipeline

1. Architecture Evolution

2. Secure Authentication (OIDC)

3. Multi-Branch Logic

4. Cloudflare Subdomain Routing

Azure Network Engineer

Azure Administrator

Teams Administrator

Cisco CCNA

M1 Digital Labs Sdn. Bhd.

NTT Cloud Communications

Celcom Networks Sdn. Bhd.