Projects

Architected and deployed production Red Hat OpenShift Virtualization platform for BIDV (Bank for Investment and Development of Vietnam). Successfully migrated 200+ enterprise VMs to KubeVirt-based infrastructure, enabling VM and container workload consolidation. Implemented backup/disaster recovery with Velero, established monitoring with Grafana Stack, and validated banking security compliance. Achieved 30% infrastructure cost reduction through resource consolidation.

Leading comprehensive DevSecOps transformation for tier-1 Vietnamese financial institutions (Vietinbank, BIDV) and Mobifone. Established secure-by-default CI/CD pipelines with integrated security gates (SAST/DAST/SCA), automated vulnerability management workflows, and compliance-as-code frameworks. Implemented shift-left security practices, reducing time-to-remediation by 60%. Designed threat modeling processes and security champions program across development teams.

Designed and deployed production-grade OpenShift Plus platforms for BIDV and Vietnam General Department of Taxation. Architected multi-cluster federation with RHACM (Red Hat Advanced Cluster Management) across development, staging, and production environments. Implemented zero-trust security with RHACS (Red Hat Advanced Cluster Security), establishing runtime threat detection and policy enforcement. Migrated 300+ containerized workloads with zero downtime.

Deployed and configured enterprise IBM API Connect platform for Vietinbank and BIDV banking operations. Established API gateway architecture with OAuth 2.0/OIDC authentication, rate limiting, and threat protection. Implemented API lifecycle management, versioning strategies, and developer portal. Integrated with backend banking systems while ensuring PCI-DSS compliance for payment APIs. Supporting 10M+ daily API transactions.

Architected and deployed AWS EKS-based infrastructure for decentralized finance (DeFi) protocol. Designed GitOps CI/CD pipeline with automated testing, security scanning, and deployment orchestration. Managed Kubernetes cluster scaling, monitoring, and security hardening for blockchain node infrastructure. Implemented microservices architecture with NestJS backend and MongoDB, supporting high-throughput smart contract interactions.

Designed and implemented end-to-end CI/CD pipeline for AI-powered SaaS platform. Containerized multi-tier application architecture with Docker Compose, orchestrating web servers, API services, and background workers. Provisioned AWS infrastructure (EC2, RDS, S3, CloudFront) with infrastructure-as-code. Established automated testing, blue-green deployments, and CloudWatch monitoring with alerting.

Led technical architecture and development for high-traffic trivia platform. Designed serverless architecture on Firebase with Next.js frontend, implementing SSR/SSG for optimal SEO performance. Established frontend development standards, component library, and responsive design patterns with Tailwind CSS. Mentored team on modern React patterns and performance optimization techniques.