Kendrick Yang

Kendrick Yang

System & Cloud Infrastructure Specialist

Current post
Singapore Institute of Management, since Aug 2024
Previously
GovTech · ST Electronics Infosec · NUS
Experience
13 years
Based
Singapore
Visas held
AWS Solutions Architect – Associate · Red Hat RHCSA
Education
BSc Information & Communication Technology, Singapore University of Social Sciences

Thirteen years keeping Singapore government agencies and campuses running: AWS architecture, security compliance, and the automation that removes work nobody should still be doing by hand.

Connect on LinkedIn

Experience

Six entries since 2010, newest first. Each stamp is inked in the colour of the field the work sat in.

  1. – present Current

    System Specialist

    Singapore Institute of Management

    • Stood up an internal RHEL repository, so servers with limited outbound connectivity can still pull packages and stay current on patches.
    • Ran the AWS side of a Checkpoint to FortiGate firewall migration with minimal downtime.
    • Operate AWS on Control Tower: IAM, CloudTrail, GuardDuty, Route 53, ALB and NLB, Transit Gateway, GWLB.
    • Built Lambda and EventBridge automation for Active Directory lifecycle and Microsoft 365 licence provisioning.
    • Automated patching estate-wide through AWS Systems Manager.
    • Administer Microsoft 365, Intune and Entra ID.

    AWS & cloud · Security · Automation · Microsoft · Linux

  2. –

    Cloud Infrastructure Engineer

    Government Technology Agency (GovTech)

    • Ran Tenable Nessus Security Center across Whole-of-Government, aligned to IM8.
    • Rescheduled scanning to cut hosting cost while holding device coverage and SLA reporting.
    • Wrote a custom API script around a ManageEngine ServiceDesk limitation, enabling tenant switching for selected users.
    • Presented monthly vulnerability-management findings to ministry-level engineers across agencies.

    Security · Automation · Platforms

  3. –

    Senior Engineer

    ST Electronics Infosec

    • Deployed LogRhythm SIEM for government, including IOC playbooks and end-user training.
    • Integrated the security stack: CarbonBlack, CyberArk, ExtraHop, Symantec, FortiGate, Palo Alto, Checkpoint, Gemalto Luna HSM, Tenable Nessus.
    • Automated patching in air-gapped environments with PowerShell, and the Linux estate with Ansible.
    • Hardened Windows and Linux to CIS benchmarks; deployed AD, Exchange and PKI for government customers.
    • Led tailored end-user training on the solutions deployed.

    Security · Automation · Microsoft · Linux

  4. –

    Specialist Associate

    National University of Singapore, Faculty of Science

    • Administered CentOS servers and the Joomla CMS; carried the estate from Joomla 2.5 to 3.
    • Rebuilt faculty webpages on a responsive Bootstrap front end.
    • Ran timetable booking, lecture-hall AV and desktop support.

    Linux · Platforms

  5. –

    National Service

    Singapore Armed Forces

  6. –

    Programmer

    Ministry of Health Holdings (MOHH)

    • Built Java web charts for data-mining dashboards over the MOH database.

Certifications

The visas: issued by someone other than me.

Side projects

Built on weekends, on my own hardware, where breaking things costs nobody anything.

AI & automation

  • Automated trading bot

    A rule-based signal engine places risk-sized orders with stops attached. An AI review layer reads the bot's own track record and proposes tuning, and anything that would raise risk waits for my approval.

  • Control room for AI coding agents

    A self-hosted dashboard that watches AI coding agents across all my projects, with a ticket board, in-browser approvals for their actions, and a chat assistant I can reach from my phone.

  • AI coding-agent workflows

    Custom skills, hooks, sub-agents and tool integrations that automate the parts of the development loop that repeat.

  • Multi-account cloud AI assistant

    An MVP with one orchestrator dispatching to workers, each scoped to its own cloud account, so several accounts can be reasoned about without cross-contamination.

  • Conversational search assistant

    A hackathon build that remembers preferences across turns, runs semantic search over Singapore's open government datasets, and surfaces shopping and travel links on request.

  • Subtitle reading and translation pipeline

    Reads subtitles burned into video frames with GPU text recognition, then translates them with an AI model into a clean subtitle file.

Infrastructure

  • Self-hosted zero-trust homelab

    Docker, tunnelled zero-trust ingress, a mesh VPN and WireGuard for remote access.

Games

  • Browser multiplayer RPG

    A shared town and instanced zones in real 3D. The game server owns every value and a Postgres backend keeps the world, so a client can never cheat its way to loot.

  • Tower-defence game on Roblox

    Server-authoritative and data-driven: towers, enemies and waves are config tables, and the maps are built procedurally at runtime.

Small builds

  • Fireworks line-of-sight checker

    Enter a postal code and floor, and a real sightline calculation against the surrounding buildings says whether you can see the National Day fireworks from home.

  • AI to apparel, end to end

    A print-on-demand experiment testing whether one operator can close the whole loop: image generation, mockup, storefront, organic discovery and direct fulfilment.

  • Website for a home café

    A hand-written, no-build site for a neighbourhood home café: the menu, pickup details and one-tap ordering over chat.

Currently reading, running, or breaking: MCP servers and sub-agents · RAG pipelines · multi-agent cloud orchestration · CI/CD pipelines · Grafana and Prometheus · Elasticsearch

Skills

Six fields, one ink each. The same inks mark the entries above.

AWS & cloud
Control Tower · IAM · CloudTrail · GuardDuty · CloudWatch · EC2 · S3 · RDS · Route 53 · ALB · NLB · Transit Gateway · GWLB · VPC peering · NAT · endpoints · Lambda · EventBridge
Security
FortiGate · Palo Alto · Checkpoint · LogRhythm SIEM · Tenable Nessus · Qualys · CarbonBlack · CyberArk · ExtraHop · Gemalto Luna HSM · CIS benchmarks · IM8
Automation
PowerShell · Python · Bash · Ansible · Puppet · AWS Systems Manager
Microsoft
Active Directory · Entra ID · Microsoft 365 · Exchange · Intune · MS Graph API
Linux & virtualisation
RHEL 6 – 10 · CentOS 6 / 7 · system hardening · local repo management · VMware ESXi · vCenter · Hyper-V
Platforms & tools
Docker · ManageEngine ServiceDesk · Joomla · SharePoint