Selected Work

What it is

The official iOS and Android companion app for OGSE Sabah 2026 — the Oil & Gas Services & Equipment Conference & Exhibition, held 4–6 June 2026 at the Sabah International Convention Centre. Stakeholders include PETRONAS, Shell, ConocoPhillips, and regional operators across the energy sector.

Conference schedule

Full programme browsable at a glance. Sessions colour-coded by type — keynotes, panels, workshops, ceremonies — with a live indicator showing what's happening right now. One-tap bookmarks and direct calendar export.

Networking

Attendee directory with real-time private chat — no phone number exchange, no business cards. Exhibitors get a personal QR code on their profile; scanning it drops you straight into a 1-on-1 chat with them, replacing the traditional booth handshake.

Entry & access

Event entry QR code lives in the app, full-screen and ready to scan at the door. No printed badge, no digging through confirmation emails.

Auth

Passwordless. Email plus a 6-digit OTP — that's it. Session persists across restarts.

The constraint

A live, multi-day industry event with no margin for post-launch fixes. Real-time messaging, QR scanning, calendar sync, and attendee access all had to work correctly from the moment doors opened on June 4.

The platform

Malaysia's national B2B2C multi-operator booking platform — tours, attractions, accommodation, and transport in one place. Backed by Amazing Borneo: 500,000+ travellers served, $15.5M annual operation, 20 years in market, UNESCO Global Geopark partner, endorsed by Visit Malaysia 2026. Live and running.

The challenge

Extending a running production system from single-state coverage to national scale. The problem isn't building from scratch — it's that Sabah's supplier density, booking patterns, and user acquisition dynamics don't map cleanly to the rest of Malaysia. Every architectural decision has to be made without breaking what's already live.

MCP architecture

Building MCP (Model Context Protocol) infrastructure so the platform is addressable by AI agents and LLM interfaces before traditional search-driven discovery becomes irrelevant. Most tourism platforms will retrofit this under pressure. This one won't have to.

Status

Live nationally. Expansion and AI infrastructure ongoing.

Live at

malaysiatravel.com

Client

MIMOS Berhad — Malaysia's national security and ICT R&D institute, under the Ministry of Science, Technology and Innovation.

The brief

Implement Malaysian-origin encryption algorithms — developed by MIMOS — into Bouncy Castle, the world's most widely deployed open-source security library. Used by banks, governments, and enterprises globally in Java and C# applications.

What this means

Malaysian government-grade encryption is now available as a standard option in the security toolkit used by most of the world's enterprise developers. The implementation required porting the algorithm from C to Java — a non-trivial translation involving memory model differences, type system constraints, and preserving cryptographic correctness throughout.

Signal

Government-commissioned. Deployed in global infrastructure. One implementation, zero defects permissible.

Stack

Next.js, Django REST Framework, BNBChain, Tezos

Context

Two engineers — myself and the CEO. Full-time student. No established web3 authentication patterns in the market. Launched and held the position as Malaysia's largest NFT marketplace.

What I owned

User authentication architecture, designed from first principles before web3 auth libraries were production-mature. Twitter API identity verification as the primary trust layer for creator accounts. Bot attack mitigation under live conditions — a coordinated attack hit the platform on day two of launch; diagnosed and deployed the fix while the platform was live and under active assault. Search and query optimisation at production scale.

What I'd do differently

I would have pushed harder for Ethereum despite the gas cost argument — the long-term ecosystem depth wasn't on BNBChain. I proposed a two-way transaction sync layer for cross-chain consistency that got deferred. I also suggested XRP as a secondary contract target, which the team didn't pursue. The architecture needed more chain-agnosticism built in from day one.

Clients

CapitaLand, Epson, Sapura Energy, sgActive, and others across Singapore and Malaysia.

Stack

Python, UiPath, OutSystems

Procurement

End-to-end workflow automation for purchase orders, invoices, and goods receipt notes — removing manual handoffs from high-volume procurement cycles.

HR automation

A staff benefit proration problem at a major enterprise — S$100B+ in assets, operations across 40+ countries — that had been assigned to two external vendors and remained unsolved for over a year. The logic involved prorating benefits across partial employment periods, variable contract types, and cross-entity payroll structures at scale. Two professional vendors couldn't ship it. I solved it.

Pattern

Problems that appear administrative but are architecturally harder than they look. The difficulty is always in the edge cases at scale, not the happy path.