Hello, I'm Viqi Agung Saputra

Cloud Security & DevSecOps Engineer

PT Uangme Fintek Indonesia

• Led cloud security control orchestration across Alibaba Cloud and AWS environments, implementing robust RAM/IAM least-privilege policies, EventBridge remediations, and continuous compliance auditing via AWS Config.
• Spearheaded the integration of DevSecOps quality gates inside Jenkins CI/CD pipelines, automating vulnerability scanning with Bearer Scan (SAST) and Dependency-Track (SCA) to block insecure builds from production.
• Established an automated cloud audit logging architecture using Alibaba Cloud ActionTrail integrated with DingTalk webhooks, accelerating real-time incident notifications and threat visibility.
• Conducted thorough infrastructure posture reviews and risk assessments utilizing ScoutSuite, uncovering and mitigating hidden misconfigurations across production environments.
• Managed multi-environment database capacities for Alibaba Cloud ApsaraDB, deploying rigorous monitoring thresholds and proactive storage provisioning to eliminate risk of service degradation.
• Collaborated directly with external banking partners to design and deliver secure financial data transmission mechanisms via hardened SFTP tunnels, guaranteeing end-to-end data integrity.

Site Reliability Engineer

PT. Akulaku Finance Indonesia

• Optimized system configuration consistency and stability by containerizing core architectures through Docker, mitigating environmental configuration drift issues by approximately 40%.
• Architected an enterprise-grade observability framework using the ELK Stack (Elasticsearch, Filebeat, Logstash, Kibana) and Elastic APM, successfully driving down Mean Time to Resolution (MTTR) by 35%.
• Deployed Apache APISIX as a centralized API Gateway and Service Discovery fabric, enhancing proxy reliability and accelerating cross-environment service integration speeds by 30%.
• Designed a hardened Bastion Host (Jump Server) architecture to enforce secure access control, robust session auditing, and a reduced attack surface across production database layers.
• Actively prepared architectural evidence and control documentation for Secure SDLC workflows, playing an instrumental role in successfully achieving the ISO 27001:2022 certification.
• Engineered automated cross-region backup and instant disaster recovery pipelines to Alibaba Cloud OSS, validating operational readiness via active drill executions for critical Kingdee ERP components.

System Administrator (Cloud & Security)

PT. Astra Graphia Information Technology (AGIT)

• Fine-tuned enterprise Cloudflare WAF configurations, IP whitelists, and custom rulesets, ensuring uninterrupted service availability across more than 200,000 distinct requests while satisfying regulatory standards.
• Centralized multi-platform monitoring for 20+ bare-metal and cloud instances by deploying Prometheus and Grafana via Docker, accelerating incident response speed to system anomalies by 60%.
• Deployed a centralized security log analysis engine utilizing Loki and Grafana within Azure Kubernetes Service (AKS) clusters, capturing real-time insights for over 50 containerized enterprise applications.
• Managed security log aggregation and threat detection profiles using Wazuh SIEM to actively safeguard 30+ multi-platform server nodes and 70+ enterprise users integrated with Microsoft 365 and Azure AD.
• Accelerated endpoint detection and response migration timelines by 60% through the development of automated software distribution playbooks using Ansible to deploy Palo Alto Cortex XDR.
• Conducted monthly automated web application vulnerability assessments using OWASP ZAP and performed Static Application Security Testing (SAST) for mobile binaries via MobSF.
• Implemented GitOps-driven deployment infrastructure for automated Kubernetes lifecycle workflows utilizing ArgoCD and unified enterprise package storage within Sonatype Nexus Repository.
• Mitigated edge security threats and DDoS risks by executing strategic traffic-shaping limits, advanced security policies, and FortiGate 2FA network tokens to support over 70 active corporate users.
• Co-led internal alignment and technical verification drills for ISO 27001 standard frameworks, resulting in a successful corporate audit certification with zero major non-conformances.

IT Programming Analyst

Telkom Indonesia

• Designed comprehensive end-to-end network topologies and successfully integrated enterprise IP PBX voice infrastructures to maximize transmission clarity and service stability.
• Configured and hardened Palo Alto Next-Generation Firewalls while provisioning core IMS Huawei voice services across major regions.
• Delivered multiple high-availability communications products including SIP Trunk Intercity Dual Homing, Cloud PBX engines, Hosted PBX lines, and New Permata Teleconferencing systems.

System Administrator

Pluit Hospital

Junior Engineer

Datacom Solusindo