haziq@hzply :: status online
HZPLY.XYZ // PERSONAL FILE

Haziq Nizam.

> Senior IT Service Engineer — Kuala Lumpur

I run identity, endpoint, and security operations for a fintech group — and build small, sharp web tools on the side under the name HazPlay.

View Projects Get in touch
01About

I started in electrical engineering, drifted into IT as the sole tech resource at a small firm, and found I liked security more than switchgear. Since then I've built out infrastructure from scratch, led an EDR migration, stood up DLP programs, and mentored the next hire into the role I used to hold.

Right now I run endpoint, identity, and security operations across Microsoft 365 and Entra ID for a fintech group with entities across the region — with security as the specialty layered on top of a broader IT ops track.

Outside the job, I write single-file web apps for fun, coach kids to swim on weekends, and put a few kilometres into open water when I get the chance.

02Experience
May 2026 — Current
Senior IT Service Engineer current
Fintech Group
  • Built a full internal web app giving IT real-time visibility and control over 390+ M365 groups — evolved from a local PowerShell tool into a production system, well received internally.
  • Built an AI-queryable interface into the firewall estate, letting an LLM pull live traffic logs, VPN sessions, and system status across multiple sites — demoed to leadership.
  • Built onboarding/offboarding automation via Azure Automation runbooks with managed identity, replacing a paid third-party tool with native M365 tooling — live in production.
  • Own endpoint lifecycle (Windows/iOS) via Intune and Apple Business Manager, and identity via Entra ID + Entra PIM.
  • Run security operations across Defender for Endpoint, Defender for O365, and Purview — DLP, threat investigation, attack simulation.
  • Administer FortiGate firewalls and PRTG network monitoring; handle IT service management via Jira/Confluence.
Jan 2023 — May 2026
3y 5m
Security Consultant promoted
IT Security Provider
  • IT Team Lead — technical direction and mentoring for a junior team member.
  • Administered and enhanced Microsoft 365 security posture — Conditional Access, user lifecycle management, and service health monitoring.
  • Led migration from legacy AV to EDR across all managed endpoints; rolled out DLP and endpoint data classification org-wide.
  • Ran Data Centre Risk Assessments (ANSI/TIA-942) for financial institutions, supporting BNM RMiT compliance.
  • Integrated VPN with M365 via SAML; implemented SaaS backup across SharePoint, Exchange, Teams.
Aug 2021 — Jan 2023
1y 6m
Associate Network Security Engineer
IT Security Provider
  • Sole internal IT resource — full-stack support across software, hardware, and network.
  • Administered Microsoft 365 services (Outlook, Teams, SharePoint, OneDrive) — user provisioning, licensing, access management, and service health monitoring.
  • Built ITSM workflows in SharePoint/Power Automate; migrated on-prem storage to cloud.
  • Supported ISO 27001 efforts and initial DLP delivery for external clients.
Jul 2017 — Dec 2018
1y 6m
Service Tech Team Lead → Sales & Technical Advisor
UPS/AVR Systems Provider
  • Led field team on a 120kVA AVR installation across three Borneo sites in six days.
  • Delivered high-quality installation and preventive maintenance for UPS and AVR systems.
  • Moved into client-facing technical advisory on UPS/AVR systems and SNMP configuration for remote monitoring.
  • Built professional client relationships and post-sales support, becoming the go-to resource for device configuration.
03Core Skills

IDENTITY & M365

  • Microsoft 365 Administration
  • Entra ID & Entra PIM
  • Intune / Apple Business Manager
  • Conditional Access

SECURITY OPERATIONS

  • Endpoint Security & EDR
  • Data Loss Prevention (Purview)
  • Defender for Endpoint / O365
  • ISO 27001 / ISMS

NETWORK & INFRA

  • Fortinet FortiGate
  • PRTG Monitoring
  • VPN + SAML Integration
  • Data Centre Risk Assessment

OPS & DELIVERY

  • ITSM (Jira / Confluence)
  • Power Automate
  • Incident & Change Management
  • Team Leadership & Mentoring
04Side Projects
Haz Daily↗
Daily briefing dashboard covering world news and cyber threats — TL;DR and plain-language summaries pulled from live sources.
HAZPLAY
Money Packet Calculator↗
Malaysian Edition — calculates optimal banknote denominations for duit raya and money packets.
HAZPLAY
Phish-Case Files↗
Portfolio archiving monthly phishing awareness exercises — exhibit-style screenshots with watermark overlays.
HAZPLAY
Table Topics Spinner↗
Toastmasters prompt-spinner app, built for club meetings and public-speaking practice.
HAZPLAY
GroupDesk (CLI)↗
Self-contained PowerShell tool that spins up a local web server — zero dependencies, PKCE OAuth, flags orphaned/stale M365 groups. Demo UI.
HAZPLAY
Shared Mailbox Report↗
PowerShell script that pulls shared mailbox delegate access from Exchange Online into a single self-contained interactive HTML report — no Power BI needed.
HAZPLAY
BreachBox↗
Solo, story-driven web-hacking mini-game — break into a mecha-corp portal using real techniques (DOM inspection, console leftovers, HTML comments, base64) to chain a master access code.
HAZPLAY
05Certifications
2024
Certified Data Centre Professional
EXIN
2023
Certified in Cybersecurity (CC)
ISC2
2022
M365 Certified: Fundamentals
Microsoft
2022
ITIL 4 Foundation
AXELOS
2022
DLP Endpoint Specialist
McAfee
2021
NSE 3: Network Security
Fortinet
06Beyond Work
🌊
Open Water Swimming
Top 15, Perhentian 4km
🥋
Taekwondo
Black Belt, 1st Dan (WTF)
🏊
Swim Instructor
Weekend coaching, kids
💻
Web Design
HazPlay, single-file apps