d
ducminh645

Duc T.

@ducminh645

DevSecOps and Platform Engineer, K8s, CI CD Security

Vietnam
English, Vietnamese
About me
Senior Platform & DevSecOps Engineer with 4+ years of experience in Kubernetes, Docker, automated CI/CD pipelines, and cloud infrastructure. Specialized in zero-downtime deployments, infrastructure security hardening (Trivy, Semgrep, SonarQube), and fast incident recovery. Let's connect to build, automate, and secure your production environments!... Read more

Skills

d
ducminh645
Duc T.
Offline • 

See my services

Infra as Code
I will fix docker, kubernetes, and ci cd pipeline issues
From$15 / projectMore details

Work experience

VPBank

Senior DevSecOps Engineer

VPBank

Aug 2024 - Present • 2 yrs 3 mos

Senior Platform & DevSecOps Engineer across digital banking and insurtech ecosystems (VPBank & OPES Insurance), specializing in cloud infrastructure, container orchestration, and CI/CD security. Key Contributions & Achievements: • Cloud & Kubernetes Architecture: Designed, migrated, and managed multi-cluster Kubernetes environments hosting high-concurrency microservices and AI workloads on AWS EKS and enterprise hybrid cloud. Enforced non-root security contexts, resource quotas, and ingress routing with zero downtime. • DevSecOps Pipeline Automation: Built automated CI/CD workflows using GitLab CI and GitHub Actions, shifting security left with SAST (Semgrep, SonarQube), secret detection (Gitleaks), container vulnerability scanning (Trivy), and image signing (Cosign). • Infrastructure as Code & GitOps: Provisioned and standardized scalable infrastructure using Terraform; streamlined declarative deployments via ArgoCD GitOps pipelines. • Secrets Management & Hardening: Centralized credential lifecycle and access control using HashiCorp Vault / OpenBao, integrated with External Secrets Operator to eliminate hardcoded secrets across production environments. • Observability & Reliability: Deployed monitoring and centralized logging stacks (Prometheus, Grafana, Elasticsearch, Graylog) to track cluster health, detect latency bottlenecks, and minimize MTTR.