Hieu
Nguyen

System / DevOps Engineer

2+ years building Linux, Kubernetes, and Azure/AWS infrastructure. I streamline CI/CD, cut downtime, and keep production boring — in a good way.

Kubernetes Azure · AKS AWS Terraform Jenkins Helm ArgoCD GitOps Docker DevSecOps
~
0 yrs experience
0 uptime
0 faster deploys
0 vulns reduced
Nguyen Xuan Hieu
name:Nguyen Xuan Hieu
location:HCMC, Vietnam
languages:VI / EN · TOEIC 855
education:HCMUT — VNU HCMC
gpa:8.38 / 10
email:nguyenxxuanhieu.bd@gmail.com

DevOps Engineer &
Kubestronaut

With 2 years as a System/DevOps Engineer, I specialize in Linux administration, Kubernetes, and Azure / AWS. I focus on streamlining CI/CD, reducing downtime, and cutting operational cost through infrastructure that is observable and repeatable.

At Upskills Vietnam I delivered Klaara product solutions for CIMB Bank — Jenkins/Helm pipelines that dropped deploy time from 1 hour to 15 minutes, a monorepo migration that cut builds from 30 minutes to 15 seconds, and image sizes from ~1.2GB to ~250MB.

Security is part of the pipeline, not a ticket at the end. SonarQube, Trivy, and Snyk integration mitigated vulnerabilities by over 70%. HPA plus MySQL group replication held 99.95% uptime.

core competencies

Kubernetes / Helm90%
CI/CD · Jenkins90%
Azure / AKS88%
DevSecOps85%
Terraform / IaC85%
AWS / GCP80%
System / DevOps Engineer
Upskills Viet Nam · Financial Services
Jul 2024 — Aug 2025

Delivered Klaara product solutions for CIMB Bank. Maintained core systems with monitoring, alerts, and recovery to minimize downtime. Built Jenkins/Helm pipelines that cut deployment time from 1 hour to 15 minutes (2 releases/week). Migrated CI/CD to a monorepo (Git submodules), reducing build time from 30 minutes to 15 seconds. Shrunk Docker images from ~1.2GB to ~250MB. Integrated SonarQube, Trivy, and Snyk and mitigated vulnerabilities by over 70%. Designed Helm charts, HPA autoscaling, and MySQL group replication for 99.95% uptime — plus RBAC, secure ingress, and password rotation.

Azure AKSTerraformJenkinsKubernetes HelmOpenShiftPrometheusGrafana
Cloud Engineer Intern
CloudAce VietNam · Cloud Solutions
Feb 2024 — May 2024

Assisted with GCP infrastructure (VPC, IAM, Compute Engine, GKE) for scalable application deployments. Supported Terraform modules with reusable, version-controlled provisioning. Deployed AI microservices on GKE with Cloud Storage datasets, and practiced GitOps with ArgoCD plus GitLab CI.

GCPGKETerraformArgoCDGitLab CI
DevOps / C++ Intern
Bosch Global Software Technologies · Automotive
Aug 2023 — Jan 2024

Configured and troubleshot Linux systems across the software development lifecycle. Containerized automotive applications with Docker for consistent build and test environments. Tracked toolchain resource usage with Linux utilities and AWS CloudWatch. Contributed to CI/CT pipelines using Jenkins, Git, and Docker.

LinuxJenkinsDockerAWSCloudWatch

Orchestration

KubernetesAKSGKEEKSOpenShiftHelmDocker

CI/CD & GitOps

JenkinsGitHub ActionsGitLab CIArgoCDGit

Infrastructure as Code

TerraformAnsibleHelm Charts

Cloud Platforms

AzureAWSGCPIAMVPCKey Vault

Observability & Security

PrometheusGrafanaLokiTrivySnykSonarQube

Systems

LinuxBashPythonNginxMySQLNetworking
01
CIMB Bank — Klaara CI/CD on AKS

Production delivery for a financial product: Jenkins + Helm, monorepo migration, image slimming, and DevSecOps gates. Deployment time 1h → 15m; builds 30m → 15s.

Azure AKS Jenkins Helm SonarQube Trivy
02
AWS Landing Zone & CI/CD Automation

Side project (May–Aug 2025). Isolated Dev/UAT accounts, modular Terraform, GitHub Actions to ECS Fargate with blue/green releases, multi-AZ RDS, and centralized CloudWatch / CloudTrail.

AWS Terraform GitHub Actions ECS Fargate SonarQube
03
GKE GitOps for AI microservices

At CloudAce: Terraform-provisioned GCP, GKE workloads with Cloud Storage datasets, and ArgoCD GitOps so cluster state followed git — not click-ops.

GKE ArgoCD Terraform GitLab CI
04
Automotive toolchain containerization

Bosch internship: Dockerized automotive tooling, Jenkins CI/CT, and CloudWatch plus Linux profiling (htop, iostat, perf) for consistent, measurable builds.

Docker Jenkins Linux AWS

Let's build something
production-grade together.

Open to DevOps / platform / SRE roles and infrastructure work. If your pipeline is slow, your cluster is noisy, or your images are still 1GB — let's talk.

send_message.sh
your name
your email
message