Tran Ngoc Minh DucTran Ngoc
Minh Duc
Building scalable cloud infrastructure, Kubernetes platforms, CI/CD pipelines, automation and cloud-native solutions.
# current stack
role: DevSecOps Engineer
focus: cloud-native platforms
location: Hanoi City, Vietnam
status: Available for freelance projects
$ kubectl get skills
Featured Projects
Infrastructure and platform engineering work across cloud-native environments.
Latest Blog Posts
Thoughts on DevOps, cloud infrastructure, and platform engineering.
Technology Stack
Tools and technologies I work with daily.
Experience
Professional journey in DevOps and platform engineering.
Senior DevSecOps Engineer
TechCorp International
Hanoi City, Vietnam
Lead platform engineering for a multi-region Kubernetes infrastructure serving 200+ microservices.
- Designed and deployed multi-cluster Kubernetes platform across 3 AWS regions
- Reduced deployment frequency from weekly to 50+ daily deployments
- Implemented GitOps workflow reducing mean time to recovery by 70%
- Built unified observability stack processing 2M+ metrics per minute
DevSecOps Engineer
CloudScale Solutions
Hanoi City, Vietnam
Managed cloud infrastructure and CI/CD pipelines for SaaS products on AWS and GCP.
- Migrated 40+ services from EC2 to Kubernetes with zero downtime
- Built reusable Terraform modules reducing provisioning time by 80%
- Implemented security scanning pipeline catching 500+ vulnerabilities pre-deploy
- Automated disaster recovery testing with quarterly game days
Systems Administrator
DataFlow Systems
Hanoi, Vietnam
Managed Linux infrastructure, networking, and automation for data processing platforms.
- Automated server provisioning with Ansible reducing setup time from days to hours
- Implemented centralized logging with ELK stack across 100+ servers
- Designed and deployed high-availability PostgreSQL clusters
- Established monitoring and alerting reducing incident response time by 60%
Recent Labs
Engineering experiments and hands-on notes.
Deploying Falco on Kubernetes
Runtime security monitoring with Falco on a production Kubernetes cluster, including custom rules and Falcosidekick integration.
Testing Cilium Network Policies
Evaluating Cilium as a CNI replacement with eBPF-based network policies, Hubble observability, and performance benchmarks.
WireGuard VPN Mesh Network
Building a peer-to-peer WireGuard mesh network for secure remote access to development infrastructure.
CrowdSec Intrusion Detection
Deploying CrowdSec for collaborative intrusion detection with bouncer integration on Nginx and SSH.
Stay updated
Get notified about new blog posts, projects, and DevOps insights. No spam, unsubscribe anytime.