About

DevSecOps Engineer

I'm a DevSecOps Engineer with over 8 years of experience designing, building, and operating cloud-native infrastructure at scale. I specialize in Kubernetes platforms, CI/CD automation, infrastructure as code, and observability.

My approach combines deep technical expertise with a focus on developer experience — because the best infrastructure is the infrastructure developers don't have to think about. I've led platform engineering initiatives for organizations ranging from startups to enterprises, always with an emphasis on reliability, security, and automation.

When I'm not building infrastructure, I write about DevOps practices, experiment in my homelab, and contribute to open-source projects in the cloud-native ecosystem.

Career Timeline

Key milestones in my professional journey.

Senior DevSecOps Engineer

TechCorp International

Hanoi City, Vietnam

Lead platform engineering for a multi-region Kubernetes infrastructure serving 200+ microservices.

  • Designed and deployed multi-cluster Kubernetes platform across 3 AWS regions
  • Reduced deployment frequency from weekly to 50+ daily deployments
  • Implemented GitOps workflow reducing mean time to recovery by 70%
  • Built unified observability stack processing 2M+ metrics per minute

DevSecOps Engineer

CloudScale Solutions

Hanoi City, Vietnam

Managed cloud infrastructure and CI/CD pipelines for SaaS products on AWS and GCP.

  • Migrated 40+ services from EC2 to Kubernetes with zero downtime
  • Built reusable Terraform modules reducing provisioning time by 80%
  • Implemented security scanning pipeline catching 500+ vulnerabilities pre-deploy
  • Automated disaster recovery testing with quarterly game days

Systems Administrator

DataFlow Systems

Hanoi, Vietnam

Managed Linux infrastructure, networking, and automation for data processing platforms.

  • Automated server provisioning with Ansible reducing setup time from days to hours
  • Implemented centralized logging with ELK stack across 100+ servers
  • Designed and deployed high-availability PostgreSQL clusters
  • Established monitoring and alerting reducing incident response time by 60%

Skills

Technologies and tools I use to build reliable infrastructure.

Cloud

AWS
GCP
Azure
DigitalOcean
Cloudflare

Containers

Docker
containerd
Podman
BuildKit
Harbor

Kubernetes

EKS
GKE
K3s
Rancher
Helm
Kustomize
ArgoCD
Istio

CI/CD

GitLab CI
GitHub Actions
Jenkins
ArgoCD
Tekton
Flux

Automation

Ansible
Terraform
Pulumi
Python
Bash
Go

Infrastructure

Terraform
Pulumi
CloudFormation
Crossplane
Terragrunt

Security

Vault
Falco
Trivy
OPA
CrowdSec
Cert-Manager

Monitoring

Prometheus
Grafana
Loki
Tempo
Datadog
Alertmanager

Networking

Cilium
Calico
WireGuard
Nginx
Traefik
HAProxy

Operating Systems

Linux
Ubuntu
RHEL
Alpine
Windows Server

Languages

Python
Go
Bash
HCL
YAML
TypeScript

Tools

Git
GitLab
GitHub
Jira
Confluence
Lens
k9s