Muhammad Ammar
Zakwan bin Amran

// Software Developer — Sapura Industrial Berhad

A backend-leaning full-stack developer who's spent the last few years modernising legacy PHP systems, wiring up SSO and CI/CD, and automating the boring parts of enterprise IT — HRMS reporting, document processing, identity management. Off the clock, breaking things is the hobby: CTFs, self-hosted infrastructure, and a mini-PC turned personal server lab.

#01 experience.log

Software Developer

Sapura Industrial Berhad, Bangi

MAR 2025 — PRESENT

Manage and support the company's HRMS — vendor coordination, issue resolution, and custom attendance reports built from the HRMS API.
Upgrade legacy PHP applications, closing SQL injection, file-upload, and authorization gaps.
Set up and administer GitLab with CI/CD pipelines for automatic production deploys on merge.
Maintain on-premises Windows Server infrastructure running an XAMPP/Apache stack.
Full-stack development focused on backend systems on VPS infrastructure, using AI tools to speed up frontend work.
Automated business workflows with Power Automate, Python and PHP — OCR PDF reading, data validation, automated Delivery Order creation — cutting processing time by over 50%.
Administer Microsoft Entra ID (Azure AD) for identity, authentication and access policy.
Deploy and manage Microsoft Intune for company laptops — enrollment, compliance, app control, security baselines.
Designed an internal Inventory Management System for spare parts — receiving, issuing, tracking and reporting.

PHP Developer

CTOS Basis, Bangsar South

APR 2023 — MAR 2025

Upgraded PHP 5 applications to PHP 8 with OOP principles; refactored for maintainability and scalability.
Implemented Single Sign-On (SSO) across multiple systems, streamlining auth and improving security.
Selected ORM and router packages and applied dependency injection to optimise development.
Built applications under agile methodology for adaptability across the dev lifecycle.
Designed ETL pipelines in PHP pulling from databases, APIs and flat files, with SQL for transformation and quality checks.

Web Developer

Perbadanan Kemajuan Pertanian Negeri Pahang, Kuantan

MAR 2022 — SEP 2022

Developed and shipped 5 features into a new web application using an MVC PHP framework.
Redesigned database tables to store IDs instead of names, cutting storage use by 24%.
Reworked the UI and automated invoice numbering, lifting page speed by 14%.
Deployed 2 WordPress applications to RunCloud and configured their databases.
Built front and back ends for 5 sub-projects of an Office Management System with full CRUD, using JS, HTML, CSS, PHP and MySQL.

#02 personal-work.md

cybersecurity/

Cybersecurity

Built a Python class exploring data-security concepts — encoding, decoding, executing dynamic input in a controlled environment. View reference ↗
Helped a peer understand phishing vulnerabilities by building an educational mock website.
Configured Gophish to run authorised phishing simulations, assessing employee security awareness.

cloud/

Cloud Computing

Deployed serverless functions with AWS Lambda for lightweight task execution.
Built and managed secure, scalable REST APIs with API Gateway.
Hosted applications and databases on AWS EC2, S3 and RDS.
Deployed and managed applications on DigitalOcean Droplets.
Set up services on local VPS environments for dev and production.

self-hosted/

Server Management & Self-Hosted Infra

Configured a personal mini-PC to build hands-on server management skills.
Installed and hardened Ubuntu Server, including package management.
Containerised applications with Docker for isolated, scalable environments.
Set up Cloudflare to securely expose self-hosted services with DNS management.
Configured UFW to control and secure network traffic.

Muhammad AmmarZakwan bin Amran

Cybersecurity

Cloud Computing

Server Management & Self-Hosted Infra

Muhammad Ammar
Zakwan bin Amran