About
Cloud / DevOps Engineer with 5+ years designing and operating workloads across AWS and Azure. Collaborative and adaptable, with experience spanning startup to enterprise environments. I bring infrastructure expertise with security-first engineering, from architecting scalable Kubernetes platforms and DR strategies to embedding FinOps and compliance.
Skills
- Agile
- Amazon Web Services
- Docker
- Go
- JavaScript
- Kubernetes
- Linux
- Microsoft Azure
- PostgreSQL
- Python
- Redis
- Scrum
- Terraform
Experience
DevOps Engineer
Katalon
Aug 2024 to Jun 2026
US SaaS AI-augmented Test Automation Platform • Enabled resilient multi-cloud disaster recovery across AWS/Azure by identifying and defining reusable infrastructure patterns (ArgoCD, Kubernetes, networking stack) and deployment playbooks, supporting a 99.95% SLA and sub-10-minute RTO for 12+ mission-critical applications through quarterly failover drills. • Reduced enterprise onboarding time from weeks to days through engineering multi-tenant SaaS provisioning workflows that accommodate tenant-specific SSO identity integration, data isolation, and network segmentation. • Designed and deployed a multi-provider guardrail layer fronting 2M+ LLM requests/month across Bedrock and LiteLLM, powering PII masking and prompt-injection defense without disrupting core functionalities. • Cut compute costs by 30–40% and accelerated node provisioning 5x across production and AI workloads through KEDA-based autoscaling and scheduling of fractional NVIDIA GPU-backed worker nodes with Karpenter. • Co-engineered a Terraform and Helm self-service platform with standardized cloud modules, abstracting infrastructure complexity for service teams - cutting infrastructure drift to 14% and release time by 33%.
Cloud Engineer
Katalon
May 2023 to Aug 2024
US SaaS AI-augmented Test Automation Platform • Architected a scalable AWS landing zone across 50+ accounts and 8 regions, enforcing least-privilege governance through Control Tower, Organizations, and SCPs, with automated tagging for cost allocation and resource ownership. • Designed hub-and-spoke network architecture with Transit Gateway and Client VPN, segmenting cross-account traffic and enforcing RBAC across US and Vietnam branch offices and business units. • Drove 55–85% improvement in security posture across AWS, endpoint, and device layers - proactively remediating 65+ critical misconfigurations and 0-day threats via Wiz CSPM, CrowdStrike Falcon EDR/XDR, and Jamf MDM. • Collaborated with cross-functional teams to achieve 90% control adherence across SOC 2, GDPR, and ISO 27001, facilitating European market expansion for a $1M+ ARR customer base. • Resolved a chronic performance and cost bottleneck impacting customer-facing SaaS workloads by rearchitecting NAT Gateway placement and implementing topology-aware traffic routing across compute nodes, eliminating unnecessary network hops and cross-AZ dependencies, ultimately reducing annual AWS network spend by over $350K.
Junior DevOps Engineer
National Australia Bank
May 2022 to May 2023
Enterprise Banking • Built centralized CI/CD pipelines in Jenkins to automate build, test, and release, including database migrations. • Wired EKS/AKS pod failure and deployment alerts into ServiceNow to auto-create and route incident tickets by team, decreasing MTTD by 20% and initial triage effort across 15 teams.
Software Engineer Intern
FuniMart
Mar 2021 to Jan 2022
B2B Dropshipping Marketplace Startup • Built MERN features and CI/CD workflows with GitLab CI, Docker, and ECS for a Shark Tank Vietnam startup.
Education
University of Queensland
Master of Engineering Science, Software Engineering
Australia
2024 to 2024
GPA: 3.76 / 4
University of Information Technology – Vietnam National University
Bachelor of Engineering, Information Systems
2019 to 2023
GPA: 3.42 / 4
Licences & certifications
SAA
AWS
DVA
AWS
DOP
AWS
AZ-900
Azure
Terraform Associate
CKA
CKS