Systems & Security Operations Engineer · DevSecOps & Compliance Automation
Systems & Security Operations Engineer with 7+ years of enterprise infrastructure, identity governance, and security operations experience across government-adjacent, critical operations (HTX/ICA, DCS, NEC). Proven track record authoring full ISO 27001 / CSA CyberTrust Mark ISMS frameworks and operating enterprise CyberArk PAM vaults under active ICA Category-2 clearance lineage.
Passionate about compliance-as-code, zero-dependency security automation, and deterministic Clojure/Babashka tooling.
| Repository | Focus & Description | Stack / Architecture |
|---|---|---|
🛡️ security-tools |
6 Zero-Dependency Security Automation Tools Vulnerability prioritizer, triage engine, PAM request classifier, policy-to-ticket generator, IAM matcher, and access review summarizer. Fully tested (50 tests, 175 assertions). |
Clojure, Babashka, Pure Functions |
🔒 pdpa-sg-clj |
Singapore PDPA Compliance CLI & CI/CD Scanner Static-analysis CLI tool detecting NRIC leaks, secret exposures, and PII redactor for repository pipelines. |
Clojure, Babashka, Static Analysis |
🕵️ aur-audit |
Supply-Chain Security Audit CLI Static analysis scanner detecting obfuscated payloads, backdoors, and suspicious network calls in build scripts. |
Babashka, Linux Security |
🇸🇬 mcpf-adapter |
MyCareersFuture Government API Adapter Zero-dependency CLI bridging Singapore MCF v2 job portal APIs to scrape, SHA-256 cache, and emit JSONL job intelligence. |
Clojure, Babashka, REST API |
🚀 lithan-capstone-project |
TasteLocal DevSecOps Microservices Capstone Production containerized microservices on Northflank featuring automated CI/CD, PostgreSQL/SQLite, secure API gateways, and RBAC. |
Clojure, Docker, Northflank |
- Identity & Access Management (IAM/PAM): CyberArk PAM Vaulting, Session Recording, Active Directory & Entra ID, Least-Privilege RBAC.
- Security Compliance & Frameworks: ISO 27001 Annex A ISMS Authoring, CSA CyberTrust Mark (Cert No. 797101), IBM Guardium DAM, Carbon Black EDR, Tenable Nessus.
- Automation & DevSecOps: Clojure, Babashka, Python, Go, Bash, SQL, Docker, GitLab CI / GitHub Actions, REST/gRPC.
- Clearance & Subsidy: ICA Category-2 (Official Secrets Act) Clearance Lineage ·
Built with determinism and security in Singapore 🇸🇬