Muhammad Hafeeze Bin Zakaria
Kuala Lumpur,14
Summary
Senior System & Cyber Security Engineer with over 14 years of experience specializing in the design, deployment, and management of complex Microsoft 365 and Azure environments . Proven track record in enhancing organizational security posture through infrastructure hardening , vulnerability remediation , and leading large-scale migrations during critical cyber attacks. Expert in Active Directory (L2/L3) , SCCM , Microsoft Intune, and automation via PowerShell . Adept at aligning technical operations with business continuity goals to ensure high availability and robust data protection
Overview
14
14
years of professional experience
1
1
Certification
Work History
Senior Systems Engineer ( Cyber Security )
Cheetah Digital
Cyberjaya, Selangor (Remote)
03.2025 - 06.2025
- Operate, run, and maintain data security systems and solutions, including Data Loss Prevention (DLP), Hardware Security Module (HSM), SSL Certificate Management (CLM), Multi-Factor Authentication (MFA), and Mobile Device Management (MDM).
- Continuously engineer and enhance data security solutions in line with emerging threats and security risks.
- Ensure availability, uptime, and service delivery of data security solutions in accordance with SLA requirements.
- Ensure data security solutions are implemented across all in-scope IT assets and perform ongoing verification to confirm completeness and accuracy of coverage.
- Proactively identify opportunities to enhance and improve data security solutions.
- Manage solution upgrades, patching, and technology refresh activities in line with Marigold Group obsolescence, resilience, and patch management frameworks.
- Maintain close working relationships with internal stakeholders, vendors, and principals to deliver high-quality security services.
- Initiate, plan, and execute data security-related projects, including RFI/RFP preparation, technical evaluations, proof of concept (POC), project delivery, and closure.
- Collaborate with internal and external IT security audits and ensure audit findings are addressed within agreed timelines.
- Develop and maintain up-to-date operating manuals and documentation for data security solutions.
Microsoft 365 Engineer
Software AG
Kuala Lumpur, Malaysia (Remote)
06.2022 - 02.2025
- To troubleshoot tickets with issues in relation to any Microsoft product (SCCM, Active Directory, Office 365, Hyper-V, Exchange) at a Level 2 or 3 capacity.
- Configure and manage Intune and related products in complex workplace environments.
- Application packaging & deployments to ensure the correct packaging, testing and rollout of applications to end users.
- Deploy Office/Microsoft 365 Environments.
- Deploy Azure AD Environments.
- Deploy advanced Microsoft 365 Services including Enterprise and Mobility and Microsoft 365 management managing and optimize Microsoft 365 applications, including Exchange, Teams, OneDrive and SharePoint.
- Architect Office/Microsoft 365 Service Environments.
- Maintenance of On-Premises and Azure Active Directory environments including Group Policies.
- Deployment of Infrastructure improvements on Client environments.
- Assist in maintaining and deploying other Client applications and environments.
Lead Principal Modern Workplace
DKSH
Taman Tun Dr Ismail, Kuala Lumpur (Remote)
09.2021 - 04.2022
- Lead, implement and maintain Microsoft Intune and System Center Configuration Manager (SCCM/MEMCM) solutions for endpoint management and software distribution.
- Design, deploy and maintain endpoints in selected platform ensuring optimal performance and security for large scale enterprise setup.
- Provide technical leadership, mentorship and guidance to Workplace L2 and Ops support teams to resolve operational issues.
- Monitor and proactively address endpoint-related incidents and performance issues to maintain a high level of service stability.
- Develop and maintain PowerShell scripts to automate tasks, improve processes.
- Investigate root causes of incidents and implement permanent fixes to prevent recurrence.
- Create and maintain documentation, guides, policies and knowledge base articles related to supported endpoint technologies.
- Stay current with industry best practices and emerging technologies in endpoint management, security and automation.
Senior Engineer Modern Workplace
Isentia
Bangsar South, Kuala Lumpur
03.2020 - 08.2021
- Implement a comprehensive modern workplace strategy aligned with business objectives, focusing on areas such as cloud adoption, collaboration tools, and end-user computing.
- Design, deploy, and manage modern workplace technologies, including Microsoft 365, Office 365, SharePoint Online, Intune and Teams.
- Ensure a seamless and intuitive user experience by providing training, support, and troubleshooting for modern workplace solutions.
- Implement and maintain security policies, perform regular security assessments, and ensure compliance with data protection regulations.
- Provide support for Office 365 issues, troubleshoot and resolve technical problems related to applications, connectivity, and performance.
- Monitor Office 365 services' performance and proactively identify and address potential issues.
- Optimize service configurations for efficiency and cost-effectiveness.
- Experience with Entra ID and Active Directory Group Policy integration with Intune.
- Implement and manage identity and access solutions using Azure Active Directory.
- Deploy and manage Mobile Device Management and Mobile Application Management (Microsoft Intune and Microsoft Defender for Endpoint).
- Implement and manage data protection solutions like Azure Information Protection and Microsoft 365 Data Loss Prevention.
- Responsible to troubleshoot complex technical issues related to Intune configuration and functionality.
- Identify opportunities for process improvement and technological advancements to enhance the modern workplace experience.
- Work closely with Customer's IT teams, security team, business units, and other stakeholders to understand their needs and deliver effective solutions.
System Engineer ( Wintel )
BT
Bangsar South, Kuala Lumpur
05.2016 - 03.2020
- Support superior in managing day-to-day operating expenditures against operating budgets to ensure efficient usage of resources.
- Install, configure, deploy, monitor, and maintain the Windows and Linux servers on-premises and Cloud (AWS, Azure). As well as Working knowledge of Microsoft Windows Server operating systems.
- Patch and capacity management.
- Commission, maintain and support operating environment, system and global application (e.g. VMWare, Hyper-V, storage, monitoring, backup, cloud, etc.) to ensure high availability and performance.
- Perform day-to-day operations, administration, tuning and capacity management for all systems ensuring good performance.
- Resolve system issues and timely escalation of issues according to service level objectives.
- Develop, maintain procedures for administration and monitoring for all systems.
- Participate in evaluation, implementation and maintenance of complementary tools and solutions to strengthen performances and efficiency.
- Develop, maintain disaster recovery procedure for all identified critical systems.
- Adhere to established best practices, procedures, guidelines and compliance to audit and industry standards (CSV, ICS, etc.)
- To create automation task via scripting such as power shell.
- Provide enterprise server support: Troubleshoots issues related to the Windows Active Directory and Group Policy also covering on ADFS, right management.
- Be responsible for AD related functions such as replication, backup, creation of groups, and Identity management.
- Manage AD based DNS and DHCP responsibilities for the customer.
- Administration of various type of virtualization platform (Microsoft Hyper-V and Linux Virtualization)
- Perform various type of virtualization task include P2V, V2V migrations, cloning and template creation.
- Perform server hardening including put all servers in a secure data centre; never test hardening on production servers and always harden servers before connecting them to the internet or external networks avoid installing unnecessary software on a server segregate servers appropriately.
Sales Engineer ( Network & Security )
Ingram Micro
Kuala Lumpur, Malaysia
02.2015 - 04.2016
- Pre-sales support for Juniper and Fortinet technologies and solutions and identify and analyze customer's requirements and architecture.
- Solution design proposal preparation for bids and projects which includes proposed security architecture and sizing and ensure to meet project dateline at all times.
- Provide technical sales advice/support for security solutions including sizing, licensing, technical advice, presentation, proof of concepts, demonstration, and troubleshooting
- Perform project assessment, consultative services when meeting with prospects.
- Perform site survey and assess customer's IT infrastructure
- Work with vendors, system integrators and end users when prospecting for business opportunities, includes product presentation & technical enablement.
- Work with internal Product Managers & Business Managers to design marketing programs.
- To meet vendor's certification requirement.
IT Support Engineer
Genting Malaysia Berhad
Kuala Lumpur, Malaysia
03.2011 - 12.2014
- Provide 2nd and 3rd level support for IT operations including IT application systems, IT equipment's and IT infrastructure in the Company.
- Perform hands on installation and troubleshooting of IT hardware& software in a large/ small and fast paced user environment.
- IT maintenance support, troubleshooting, monitoring, and resolving stations (e.g Desktop/laptop/iPad) Issue on user site.
- Proficient in programming, scripting, and database such as Visual Basic, Excel, Macro, HTML, My SQL etc.
- Well versed in major used network protocols, computer hardware, software and operating system such as Windows family and Mac.
- Timely generate and submission of incident and project progress reports as when required.
- Asset management and inventory control support project implementations as when required.
- Perform daily backup recovery operation and support
- Vendor management for preventing maintenance and facilities breakdown.
- Liaise for technical and procurement matters.
- To report, liaise and follow up with software provider on application related technical issues and problems.
- To recommend continuous improvement and enhancement of performance, reliability, security, and reliability of all IT-related application.
Education
Bachelor of Science - Business Information Technology
University of Coventry
6 2011
Skills
- Windows Server administration
- Windows 365 (Cloud PC)
- Azure Virtual Desktop (AVD) with Microsoft 365
- Microsoft SharePoint Online
- Azure Active Directory (AAD) / Entra ID
- Microsoft Endpoint Manager (MEM)
- Microsoft Defender for Office 365
- Microsoft Intune management
- Google Workspace
- Amazon Web Services Expertise
- Microsoft Defender for Office 365
Accomplishments
- Disaster Recovery: Led large-scale Windows Server migration and cloning during a live cyber attack to restore operations.
- Infrastructure Hardening: Secured data centers by hardening servers and segregating networks to prevent external threats.
- Business Continuity: Developed BCP frameworks to identify and recover from potential system security threats.
- Intune Deployment: Led the implementation of Microsoft Intune on Azure for modern mobile device management.
- Endpoint Control: Managed SCCM and Ivanti deployment to automate patching and software delivery.
- Mobility Services: Deployed advanced M365 Enterprise and Mobility services to secure corporate data.
- Cloud Architecture: Architected and deployed full Microsoft 365 and Azure AD environments.
- Email Security: Setup SPF, DKIM, and DMARC protocols to remediate phishing and spam risks.
- Identity Management: Managed L2/L3 Active Directory operations and SSO for cloud application authentication.
Cyber Security & Recovery
Microsoft Intune & Endpoint Management
Microsoft 365 & Infrastructure
Languages
English
Malay Language
Personal Information
Certification
Managing Virtual Machines with Red Hat OpenShift Virtualization
Develop AI solutions in Azure
AZ‐104 - Microsoft Azure Administrator
Interconnecting Cisco Networking Devices: Accelerated (v3) (CCNAX v3)
MD-102T00 Microsoft 365 Endpoint Administrator.
Certifications
01-2025
Timeline
Senior Systems Engineer ( Cyber Security )
Cheetah Digital
03.2025 - 06.2025
Microsoft 365 Engineer
Software AG
06.2022 - 02.2025
Lead Principal Modern Workplace
DKSH
09.2021 - 04.2022
Senior Engineer Modern Workplace
Isentia
03.2020 - 08.2021
System Engineer ( Wintel )
BT
05.2016 - 03.2020
Sales Engineer ( Network & Security )
Ingram Micro
02.2015 - 04.2016
IT Support Engineer
Genting Malaysia Berhad
03.2011 - 12.2014
Bachelor of Science - Business Information Technology
University of Coventry