Teong Eng Hock

Highly accomplished Senior Enterprise Security Consultant with over 20 years of progressive professional experience, including more than 13 years at NCS Pte Ltd leading critical, high-profile government, cloud, and enterprise infrastructure deployments. Proven technical lead and architect specializing in designing, migrating, and hardening complex perimeter security ecosystems, advanced proxy infrastructure, and threat prevention solutions. Recognized expert across market-leading platforms including Checkpoint (CCSM), Fortinet, Skyhigh Security, Tenable, and Zscaler.

Expert in orchestrating flawless, zero-downtime structural upgrades, automating secure environments, and managing cross-functional technical teams to fulfill stringent regulatory requirements.

Senior Consultant / Technical Lead - NCS Pte Ltd

(2013-02)

Core Focus: End-to-end management of complex enterprise infrastructure and multi-vendor security projects. Lead large-scale architectures, zero-downtime service migrations, and system deployments for major public sector and financial institutions. Drive strategic planning, workload distribution, vendor alignment, and junior engineering mentorship.

• Project: Piccadilly Project (Technical Lead) — Aug 2025 - In Progress. Nature: Greenfield enterprise proxy infrastructure deployment. Formulate comprehensive proxy architecture and design blueprints for Skyhigh/Trellix implementation. Present design framework to executive steering committees and technical stakeholders. Oversee deployment progress, ensuring stringent system hardening conforms entirely to tender standards. Diagnose and resolve high-level technical blockers during complex security
• Project: Central Core System (CCS) Project (Technical Lead) — Apr 2024 - May 2025. Nature: Next-generation secure infrastructure setup. Architected full design framework and technical slides for Tenable vulnerability evaluation suite integration. Delivered detailed architecture presentations to cross-functional client entities. Monitored end-to-end delivery timelines, system hardening compliance, and deployment requirements. Successfully troubleshooted infrastructure anomalies during implementat
• Project: IRAS Renewal Project (Security Engineer) — Apr 2024 - May 2025. Nature: Large-scale structural migration of strategic legacy defense solutions. Engineered the direct migration of legacy Bluecoat proxy infrastructure into an advanced Skyhigh Secure Web Gateway (SWG) using an optimized reverse proxy layout. Deployed and configured Trend Micro Deep Discovery Sandbox to bolster high-capacity advanced threat emulation. Enforced strict hardening baselines matching demanding governmental compl
• Project: MAS SCRIPS Project (Delivery Architect) — Mar 2021 - Jun 2023. Nature: High-availability critical statutory payment infrastructure security ecosystem. Provided architectural governance and validation for cross-product cybersecurity designs. Successfully coordinated the dense integration of key platforms: Trend Micro (Endpoint & SMTP), Tectia SSH, Carbon Black EDR, Forcepoint Web Proxy, and Forcepoint DLP. Conducted rigorous, multi-layered hardening and security policy reviews aligning w
• Project: GPCS Project (Technical Lead) — Apr 2017 - Jun 2019. Nature: Secure Enterprise Private Cloud ecosystem development. Led Technical Architecture Framework (TAF) review boards and slide presentations for senior executives. Designed and implemented high-performance nodes involving Trend Micro Endpoint, Axway Managed File Transfer (MFT), and Tectia systems. Architected API integrations and advanced infrastructure automation scripts to accelerate secure provisioning. Resolved complex integrat
• Served as GovTech Track Lead directing deployment programs for multi-vendor suites including Trend Micro, Tenable solutions, and Axway secure file transfer lines.
• Engineered strict OS-level hardening across corporate RedHat Linux distributions and enterprise Windows environments.
• Successfully migrated legacy physical firewalls to advanced virtual architectures, including migrating Cisco ASA to Checkpoint GAIA with zero business-service disruption.
• Executed multi-node firewall modernization including Checkpoint ClusterXL high-availability and McAfee Firewall Enterprise Control Center systems setup.
• Programmed internal automated scripting workflows to seamlessly merge distinct policy databases into unified management configurations.
• Conducted deep analysis using advanced text analytics and comparison tools to clean hundreds of legacy unused firewall rules and streamline traffic performance.

Systems Security Engineer - Appliance Business Systems Sdn Bhd

(2009-01 - 2013-02)

• Managed escalated tier-3 technical bug responses and product stabilization programs for Checkpoint infrastructure.
• Designed and maintained robust network defenses using advanced Checkpoint SmartDefense (IPS), strict network segmentation rules, and high-security traffic matching.
• Architected enterprise-wide remote worker capabilities utilizing Checkpoint SSL-VPN, SecureRemote, and SecureClient software lines.
• Configured high-availability multi-site networks employing Checkpoint ClusterXL, HA, and advanced core routing failover designs.
• Led project-based security implementations for corporate entities including SIRIM Berhad and Perodua.
• Maintained Sophos Email Security Appliances, defining precise corporate inbound/outbound mail routing rules, anti-spam policies, and web application filtering blocks via Astaro firewalls.

Software & Linux Systems Engineer - MCSB Systems (M) Berhad

(2006-11 - 2009-02)

• Built Linux-based firewall structures, programming precise network rule configurations via standard IPTables.
• Hardened corporate RedHat Linux servers and engineered custom systems logic via bash shell scripting and foundational Perl scripts.
• Engineered robust high-availability architectures using multi-node Linux clustering, active replication, and automatic failover designs.
• Designed network topology diagrams and configured core Cisco and 3Com switches, VLAN trunking, routing profiles, QoS parameters, and core services (DNS, DHCP, proxy, FTP).
• Developed custom IP telephony elements, unified call center profiles, SMS gateways, and automated email-to-fax/fax-to-email servers utilizing Digium and Redfone PRI/PSTN hardware integrations.

Network Engineer - JCMEX Trading Sdn Bhd

(2006 - 2006)

• Managed Asterisk VoIP systems deployment, network mapping, and clients infrastructural alignment.

Systems Technician - Chungco Technology Sdn Bhd

(2002 - 2003)

• Resolved core workstation hardware anomalies, OS defects, and foundational LAN installation tasks prior to pursuing advanced studies.

Diploma - Computer Science / Information Technology (Specialization: Networking) - Tunku Abdul Rahman University College (TAR UC) (2003)