TAKE YOUR BUSINESS TO THE NEXT LEVEL WITH GALAXYAI
- Senior Solution Architect & Full-Stack Engineer with 11+ years of experience designing & implementing large-scale distributed systems serving millions of users with low maintenance cost.
- Proven track record in architecting SaaS platforms, leading development teams of 20-30 people, delivering mission-critical applications across diverse industries including AI services, healthcare, live streaming platforms.
- Expert in cloud architecture, microservices design, AI/ML integration. Support three startups from inception to acquisition by famous organization.
- Optimizing cloud infrastructure and choosing the right tech stack to reduce unnecessary costs, increase performance, and lower complexity provides significant advantages for your product/startup and constitutes a major competitive advantage.
- Ability to help the companies reduce costs by 60-70% instead of wasting $50,000-$200,000 per month on cloud services, despite already having hired a certified and experienced cloud developer/architect.
- Ability to maintain organizational compliance with various standards regarding intellectual property, tangible assets, intangible assets, and future assets.
- Ability to build and manage a lean organization of 2-50 people, leveraging their individual abilities, knowledge, and characteristics to achieve desired results.
- Ability to reorganize into a better, leaner organization, promoting team member values and fostering a fair working environment to retain talent.
- Strategically prioritize mastering essential tools and technologies over chasing unnecessary skills, ensuring deeply understand their purpose and optimal use cases.
With a 15-year vision to launch my own startup, I've honed a versatile, systems-first expertise to design scalable solutions-knowledge others might require a team to match. This breadth of independent capability is my defining strength.
CORE COMPETENCIES
- Architecture & Design: Microservices, Distributed Systems, CQRS, Event-Driven, Domain-Driven, Data-Driven, Cross Clustering, Peer To Peer, Hub-spoke, Saga ...
- Cloud Platforms: AWS, Azure , GCP, Vultr, Linode...- Languages: C# .NET Core, Golang (Fiber/Gin/Echo), Python (FastAPI/Django), Rust (ActiX/Axum)...
- Frontend: Angular, React, TypeScript, RxJS, NgRX, Redux, TailwindCSS, AntDesign, MaterialUI...
- Databases: MSSQL, MongoDB, PostgreSQL, MySQL, Cassandra, Redis, Elasticsearch, Qdrant, Pipecone, Milvus (Vector Dbs)...
- DevOps: Kubernetes, Docker, Terraform, Github/Azure/Bitbucket/Gitlab CI-CD, ArgoCD...
- System: Networking, , Monitoring, Alerting, Notification, HPA, VPA, Cross-Clustering, WebSocket, WebRTC, MediaStream, Prometheus, Grafana, Datadog, Open telemetry, Kibana, HTTP2, HTTP3, TCP/UDP, QUIC, gRPC, Istio, Linkred, Rate Limiter, Kafka, RabbitMQ, ActiveMQ, MQTT, IoT...
- BigData: Apache Kafka, Spark, Hadoop, Hive, HBase, Airflow; Azure Databricks, Factory ; Goole Big Query, Pub/Sub, Scikit-learn, Pandas, MLflow, Dagster, PySpark, Dbt, Dataform, snowflake...
- AI/ML: PyTorch, TensorFlow, Computer Vision, NLP, Voice/Audio processing, OCR, LLM, Langchain, Machine Learning, Deep Leaning, Time Series Analysis, Feature Engineering, Explainable AI, Explainable Forecasting, Fine-tuning, Hugging face transformer, Whisper, Tabluea, Bert, vClip, Langchain, XGBoost, SVM, GANs, ARIMA/SARIMA, ETS, Prophet, LSTM, Transformer-based, TCN, N-BEATS, CNN, VGGNet, ResNet, Inception, U-Net, ViT, YOLO, EfficientNet, Mask R-CNN, Segment Anything, Stable Diffusion, CLIP, SHAP, LIME, InterpretM, ELI5, Captum, Saliency Maps, Integrated Gradients, GAMs, Bark, coqui TTS, Faiss...
- Leadership: Cross-functional team management, technical roadmap design, Waterfall/Agile/Scrum...
DAILY RESPONSIBILITIES & DUTIES
- Collaborate with stakeholders to gather requirements and provide the most feasible approach and optimal technology choices.
- Design and architect data models, context objects, protocols, event flows, libraries, and standards that must be applied.
- Prioritize requirements to plan features and modules, then break them down into tasks for team members to start working on.
- Plan for company-wide technical improvements, product delivery milestones, and provide technical leadership support in the absence of team members.
- Ensure products are up to date with the latest changes and free from vulnerabilities in dependencies.
- Ensure products comply with security standards such as Data Privacy (PPI), CCPA, GDPR, ISO Standards, OWASP Community, OpenSSF, NIST Cybersecurity Framework, SANS, and PCI DSS.
- Ensure software and applications follow key design principles and standards such as KISS (Keep It Simple, Stupid), DRY (Don't Repeat Yourself), YAGNI (You Aren't Gonna Need It), Separation of Concerns, Modularity, SOLID...
- Ensure the team's skill set, milestones, task breakdown, and risk management strategies align with desired business outcomes while maintaining system reliability, availability, scalability, and architectural quality requirements.
- Mentor the next generation of technical leaders in trust-building, technical learning, teamwork, code review best practices, and time management.- Review architectural proposals from other team leaders, UI designs, and QA testing reports.
- Document technical details using UML diagrams and non-technical flow diagrams.
- Manage software development practices in a collaborative and agile environment.
- Continuously learn and research new technologies that might be beneficial for future use.
- Plan to enhance the skills of team members and technical leaders.
- Demonstrate expertise in problem-solving and conflict resolution.
- Apply detailed and creative thinking to drive teams forward and overcome obstacles.
PROFESSIONAL EXPERIENCE
SOLUTION ARCHITECT | ETREEM (USA) (Sept 2022 – Present)
Led the development of an enterprise-scale AI-powered payment processing system
- Architected & implemented a multi-tenant SaaS platform for AI services using .NET Core & Python
- Designed & deployed PCI DSS-compliant payment processing infrastructure
- Implemented distributed CQRS architecture leveraging Domain-Driven Design principles
- Reduced cloud infrastructure costs by 30% through optimized service communication patterns
- Design & Implement a data warehouse to store transaction data for a large number of customers, including ETL processes before pushing data to Databricks, Snowflake, enabling the business team to work with Power BI/Tableau.- Maintain multiple cloud modules using Terraform (IoC).
- Design a multi-cloud architecture based on Argo CD, supporting AWS, Azure, and VPS.
- Assist clients in migrating various services from Azure to AWS, such as MSSQL to PostgreSQL, MongoDB to DynamoDB, AKS to EKS, Blob Storage to S3, Message Bus to SQS + SNS, Azure Functions to Lambda, ACR to ECR/JFrog, Azure API Management to AWS API Gateway and Route 53, and more.
- Reduce cloud costs by replacing low-performance, high-cost solutions with better alternatives.
- Design and architect applications and data warehouses to align with SOC 2 and PCI compliance requirements.
- Develop encryption methodologies for customer information, payment cards, and transaction data within databases to prevent data leaks, interpolation, extrapolation, or inference from real-world relationships.
- Design & Implement encryption methodologies and multi-layer encryption sessions for secure payment transactions between the client and server, ensuring security through HTTPS and QUIC protocols while maintaining ease of integration for customers.
- Document all technical aspects, including libraries and designs planned for system implementation.
- Create API documentation for third parties and customers to facilitate interaction with the system.
- Architect & Design JavaScript libraries, NuGet packages, modules, plugins for various programming languages, and interfaces that support both legacy and modern customer systems to interactive with our system.
- Architect & Implement a web-based CRM with AngularTS, PrimeNg, NgRX, gRPC, WebSocket, SSE for administrators, receptionists, and guards to interact with events, customer information, and actions recorded by the system.
- Train the development and support teams to enhance their understanding of the overall system architecture and various scenarios.
- Define strategies for data cleaning and feature engineering to build models for OCR tasks, anomaly transaction detection, and more.
- Mantain the quality of OCR models, anomaly transaction detection, and customer behavior classification.
- Support LangChain for documentation indexing and document retrieval for virtual assistants.
- Led the implementation of automated invoice processing pipeline using TensorFlow
- Techstacks: .NET, Python, AI, Microservices, Bigdata, Angular, Blazor, MSSQL, MongoDB, Redis, Qdrant, Elasticsearch, Oauth2, Websocket, Hadoop, Spark, Snowflake, Qdrant, Milvus, Pytorch, TensorFlow, DynamoDb, Azure Devops, Github CI-CD, Azure, AWS, EKS, AKS, Terraform, ArgoCD
SOLUTION ARCHITECT & LEAD FULL-STACK | VIN AI RESEARCH (VIETNAM) (Sept 2021 – Mar 2023)
Spearheaded development of enterprise IoT & access control systems
- Architect, Designed & implemented real-time IoT device management system supporting 100,000+ concurrent connections
- Architected custom OAuth2 service & license management system
- Led team of 30 developers across multiple projects- Reduced deployment time by 60% through implementation of infrastructure as code
- Design and implement middleware packages for various programming languages to interact with commercial services running on on-premise servers, VPS, and the cloud.- Ensure ETL pipelines operate consistently across multiple database clusters and data warehouse infrastructures.
- Fine-tune facial recognition and inference using gRPC and QUIC protocols.
- Implement data encryption for all human activities to ensure compliance with Data Privacy (PPI), CCPA, and GDPR.
- Develop threat detection and anomaly detection mechanisms with high accuracy for every event recorded by the system.- Automate and track all system changes to prevent attacks via intranet networks.
- Architect & Implement a web-based CRM with ReactJS, Ant Design, gRPC, WebSocket, SSE for administrators, receptionists, and guards to interact with events, customer information, and actions recorded by the system.
- Implemented real-time data synchronization system for IoT devices using MQTT & Kafka- Intranet systems for smart CCTV cameras that leverage standard cameras enhanced with intelligent analytics to detect anomalous actions & human behavior.
- Intranet-based smart access control systems via CCTV cameras.
- Techstacks: .NET, Golang, Cplus, Python, AI, Microservices, Bigdata, ReactJS, MySQL, MongoDB, Redis, Milvus, Qdrant,
Elasticsearch, Oauth2, Websocket, WebRTC, Hadoop, Spark, Snowflake, Pytorch, TensorFlow, BigQuery, gRPC, GraphQL,
Gitlab CI CD, Azure, AWS, EKS, AKS, Onpremise K8s clustering, Terraform, ArgoCD
BACKEND & CLOUD ARCHITECT | BELIVE TECHNOLOGY (SINGAPORE) (Sept 2018 – Feb 2022)
Led architecture & development of large-scale live streaming platform
- Designed microservices architecture handling 200,000 concurrent users per second with single pool of x10 m4.xlarge intances, included db cluster & whole infrastructure.
- Implemented AI-powered influencer ranking system
- Reduced infrastructure costs by 40% through optimized database scaling solutions
- Delivered custom streaming solutions for enterprise clients including Rakuten, Grab, Samsung
- Architect and develop a web scraper/auto crawler to collect data from various sources such as Twitter, Facebook, Instagram, livestream platforms, YouTube, Dailymotion, and ranking systems. The goal is to gather influencer data, follower interactions, behaviors, and customer insights to build a big data platform for analyzing influencer performance on social media.
- Design the ETL process for data collected from crawlers, push data to Hadoop, and maintain Hive, Airflow, and Spark.
- Build a reinforcement learning model to classify influencer characteristics, analyze their fan demographics, and assess the quality of influencers based on their posts and advertisements.
- Develop, fine-tune, and improve classification models and anomaly detection systems to identify harmful content, such as violent, mature, or illegal material, that may be broadcast privately or publicly on our livestreaming platform.
- Architect a real-time messaging system for users to communicate internally or interact with influencers.
- Design a secure payment gateway for business customers, ensuring seamless integration with various payment methods.
- Architect GraphQL and gRPC contracts for both web and mobile clients following the BFF (Backend for Frontend) design pattern.
- Architect and build a livestreaming engine that supports multiple broadcast sources, including video, FFmpeg, RTSP, HLS, OBS, phone cameras, WebRTC, and CCTV.
- Architect and implement an OAuth2 server to support SSO, OpenID, and OAuth client authentication based on the OAuth2 standard.
- Led team of 60 developers across multiple projects which scale from 10 to 60 persons in just 2 years.
- Techstacks: .NET, Golang, Python, AI, Microservices, Bigdata, ReactJS, MySQL, Blazor, MongoDB, Redis, Elasticsearch, Oauth2,
Websocket, Pytorch, TensorFlow, BigQuery, DynamoDb, gRPC, GraphQL, WebRTC, Automation, Jenkins CI-CD, Github CI-CD, Azure Devops,
Azure, AWS, EKS, AKS, Terraform
SENIOR FULL-STACK ENGINEER | MELLOWOOD MEDICAL (CANADA) (Sept 2019 – Oct 2022)
Led development of healthcare SaaS platform
- Implemented HIPAA-compliant video conferencing system supporting 50+ concurrent users in single room
- Designed & implemented secure payment gateway integration
- Developed real-time data synchronization system for medical records
- Reduced system response time by 50% through optimization of database queries
- Design and develop a payment gateway for patients, clinics, hospitals, and local banks.
- Design and develop a dynamic email and SMS system for various purposes, including marketing, client interactions, and clinic communications.
- Develop a secure documentation service that complies with Data Privacy (PPI), CCPA, and GDPR regulations to protect document sharing between patients, clinics, and hospitals, preventing unauthorized access—even by administrators.
- Design and develop a highly secure real-time communication system using WebSocket and WebRTC for video conferencing, chatting, and document and file sharing without an intermediate server, ensuring no data leaks or unauthorized recordings by third parties.
- Techstacks: .NET, Golang, Python, AI ML, Microservices, Bigdata, ReactJS, MySQL, Blazor, MongoDB, Redis, Elasticsearch, Oauth2, Websocket, gRPC, GraphQL, Automation, Azure Devops, AKS, Azure, WebRTC, Terraform
SENIOR FULL-STACK ENGINEER | NEOGOV (USA) (Mar 2017– Sept 2018)
Develop & improve a multi-tenant SaaS HR platform using .NET Core 5 & Angular TypeScript.
- Built & publish mobile apps using React Native, Swift, Kotlin, AI
- Improving platform accessibility for distributed teams
- Managed Azure cloud infrastructure & SQL database administration, ensuring 99.9% system uptime
- Led troubleshooting efforts for production issues while maintaining code quality through comprehensive unit testing.
- Research latest AI & ML techniques.
- Techstacks: .NET, Python, AI ML, Pytorch, Tensorflow, Microservices, Bigdata, Bigtable, BigQuery, ReactJS, ReactNative, Kotlin, Swift, MSSQL, Blazor, MongoDB, Redis, Elasticsearch, Oauth2, Websocket, gRPC, GraphQL, Appium, Selenium, Automation, Azure Devops, AKS, Terraform
FULL-STACK ENGINEER | AS WHITE GLOBAL (VIETNAM, AUSTRALIA) (Mar 2016 – Sept 2017)
Developed & improved a multi-tenant SaaS insurance system.
- Built & developed the entire distributed system for insurance.
- Built & developed an automation system that enables the QA team to easily define actions & expected outcomes for all test cases, regardless of their automation testing knowledge.
- Tech Stack: .NET, Angular, MSSQL, Redis, Elasticsearch, OAuth2, Websocket, GraphQL, Appium, Selenium
FULL-STACK ENGINEER | CAMINO INFORMATION SERVICE (USA) (Jan 2015 – Mar 2016)
Developed & improved a multi-tenant SaaS platform for healthcare.
- Built & developed a web application for a SaaS healthcare management system.
- Led troubleshooting efforts for production issues while maintaining code quality through comprehensive unit testing.
- Tech Stack: .NET, Angular, Microservices, MSSQL, MongoDB, OAuth, Websocket
JUNIOR FULL-STACK ENGINEER | EBIZWORLD (VIETNAM) (Jan 2014 – Jan 2015)
Developed & improved a multi-tenant SaaS platform for gambling.
- Built & published mobile apps for real-time betting, gambling, poker using Swift, Kotlin, AI, WebRTC, Websocket.
- Led troubleshooting efforts for production issues while maintaining code quality through comprehensive unit testing.
- Tech Stack: .NET, Angular, Python, Microservices, Kotlin, Swift, MSSQL, MongoDB, Redis, OAuth, Websocket
SYSTEM ARCHITECT | GALAXY AI (VIETNAM) (Mar 2013 – Present)
Architect, Business Development Manager, Bridge Engineer, Project Manager, Project Delivery Specialist
- Coordinated with famous clients: Titan groups, Kube, Rakuten Media, Automotive, TheFastDex, DanhGiaVongToc, LocalServices, Quincus, Yokogawa, Billgo, Arcstone...
- Optimized infrastructure for various clients.
- Built MVP (Minimum Viable Product) products for various clients to help them present their business ideas to investors.
- Helped clients migrate from legacy systems to cloud or hybrid solutions (combining on-premises & cloud).
- Helped clients optimizing cloud infrastructure and choosing the right tech stack to reduce unnecessary costs, increase performance, and lower complexity provides significant advantages and bring a major competitive advantage.- Helped the companies reduce costs by 60-70% instead of wasting $50,000-$200,000 per month on cloud services, despite already having hired a certified and experienced cloud developer/architect.- Build and manage a lean organization of 2-50 people, leveraging their individual abilities, knowledge, and characteristics to achieve desired results.- Maintain organizational compliance with various standards regarding intellectual property, tangible assets, intangible assets, and future assets
- Researched the latest AI & ML (Machine Learning) techniques.
EDUCATION
Master of Science in Artificial Intelligence (2022-2024) | The Ho Chi Minh City University of Science
Bachelor of Science in Computer Science (2011-2015) | The Ho Chi Minh City University of Science
Bachelor of Business Administration (2009-2011) | Van Hien University
CERTIFICATE
- Deep Learning Specialization (Coursera - DeepLeaning.ai, 2024)
- Machine Learning Specialization (Coursera - DeepLeaning.ai, 2024)
- Mathematics for Machine Learning and Data Science Specialization (Coursera - DeepLeaning.ai, 2024)
- IBM AI Agents Using RAG and LangChain (Coursera - IBM, 2023)
- IBM Unsupervised Learning, Recommenders, Reinforcement Learning (Coursera - IBM, 2023)
- IBM Data Science Professional (Coursera - IBM, 2022)
- Data Science Math Skills (Coursera - Duke University, 2022)
- Advanced Computer Vision, NLP, Audio & Timeseries Processing (VNUHCM - University Of Science, 2022)
- Data Modeling in Power BI (Coursera, Microsoft, 2021)
- Advanced Data Structures, RSA and Quantum Algorithms (Coursera - University of Colorado Boulder, 2021)
- The Blockchain (Coursera - University of California Irvine, 2020)
- IBM AI Developer Professional Certificate (Coursera, IBM, 2020)
- IBM AI Engineering Professional Certificate (Coursera, IBM, 2019)
- Advanced Cloud & Networking (VNUHCM - University Of Science, 2018)
- IBM Big Data with Spark & Hadoop (Coursera, IBM, 2018)
- Advanced C# & .NET, Golang, Angular, TSQL (Testdom, 2018)
- Multiple LinkedIn badges in .NET, Golang, Python, AI, Cloud Platforms, Databases (2017)