PRODUCTION CONTROL PLANE • PLATFORM SRE

Hồ Việt Anh(Andy Anh) • @AndyAnh174

Infrastructure & DevOps Engineer • Ho Chi Minh City University of Technology and Education (HCMUTE)

Architecting resilient multi-tier cloud and bare-metal platforms with Proxmox VE (Dual Xeon E5-2680v4 • 196GB RAM), Kubernetes (14+ container services), Jenkins Blue/Green zero-downtime deployments, LLMOps tracing, and security vulnerability research (2 Published CVEs).

$curl -sSL https://andyanh174.dev/resume.sh | sh

SLA Uptime

99.999%

Bare-Metal Cores

56T / 196G

Disclosed CVEs

Live Architecture Control Plane

SLA 99.999% • ALL SYSTEMS NOMINAL

Orchestration12/12 PODS RUNNING (100%)

Kubernetes & k3s Cluster

Production Container Orchestrator

14+ Containerized Microservices with Docker

Horizontal Pod Autoscaler (HPA) Policy

Rolling Updates via Jenkins CI/CD Pipelines

Kubernetes

Proxmox VE

Docker

MikroTik

Jenkins

Spring Boot 3.5

Elasticsearch 8.x

Prometheus

Grafana

CrowdSec IPS

Keycloak SSO

PostgreSQL 17

Redis 7

Linux Server

TypeScript

Kubernetes

Proxmox VE

Docker

MikroTik

Jenkins

Spring Boot 3.5

Elasticsearch 8.x

Prometheus

Grafana

CrowdSec IPS

Keycloak SSO

PostgreSQL 17

Redis 7

Linux Server

TypeScript

Kubernetes

Proxmox VE

Docker

MikroTik

Jenkins

Spring Boot 3.5

Elasticsearch 8.x

Prometheus

Grafana

CrowdSec IPS

Keycloak SSO

PostgreSQL 17

Redis 7

Linux Server

TypeScript

Kubernetes

Proxmox VE

Docker

MikroTik

Jenkins

Spring Boot 3.5

Elasticsearch 8.x

Prometheus

Grafana

CrowdSec IPS

Keycloak SSO

PostgreSQL 17

Redis 7

Linux Server

TypeScript

GITOPS & CI/CD AUTOMATION ENGINE

Interactive GitOps DAG Pipeline Visualizer

End-to-end automated delivery pipeline orchestrating container multi-arch builds, security vulnerability scanning, Blue/Green zero-downtime routing, and live telemetry observability.

1.2s

Source & Validation

Lint, Typecheck & Signature

Commit GPG Signature Verified

TypeScript Strict Compile (0 errors)

ESLint & Markdown Linting Passed

Tool: GitHub Actions / Git➔

2.5s

Security & SAST

Vulnerabilities & CrowdSec

Secret Leaks & Token Audit: Clean

Trivy Container & Dependency Scan

CrowdSec Dynamic Policy Verification

Tool: Trivy & CrowdSec➔

4.8s

Multi-Arch Package

Docker Buildx & Cache

Multi-stage Dockerfile optimized

BuildKit Cache Mounts (4x speedup)

Pushed to private registry

Tool: Docker Buildx➔

3.1s

Blue/Green Deploy

Liquibase & Nginx Hot-Swap

Liquibase DB Migrations Executed

Green Pods Healthy & Warm

Nginx Upstream Switched (0s downtime)

Tool: Jenkins & K8s➔

0.9s

Telemetry & SRE

Prometheus & LangSmith

24/24 Pods Probed (100% Healthy)

Alertmanager Connected (Telegram/Slack)

LangSmith LLMOps Latency P99: 11.8ms

Tool: Grafana & LangSmith➔

pipeline-runner:~/output

# Stage [Source & Validation] Log Stream — Target: GitHub Actions / Git

›[00:00:01] ⚡ Checking git revision: commit 8f2a1b9 (main branch)

›[00:00:01] 👤 Author: Hồ Việt Anh <hovietanh147@gmail.com>

›[00:00:02] 🔍 Running TypeScript compiler (tsc --noEmit)...

›[00:00:02] ✨ TypeScript check completed in 1.18s with 0 errors.

[PROCESS_STATUS: EXIT CODE 0 — STAGE COMPLETED]

ENTERPRISE TECH STACK & ARCHITECTURE

Technical Skills & Architecture Matrix

Production capabilities across Bare-Metal provisioning, Kubernetes cluster orchestration, Jenkins Blue/Green automation, LLMOps observability, and security hardening.

Container Mesh & Workloads

Kubernetes & Container Orchestration

12 Live Pods (Click to Inspect)

Containerizing 14+ services with Docker across a 3-tier isolated network (edge → app → data) and managing Kubernetes (K8s / k3s) clusters with HPA autoscaling and zero-downtime rolling updates.

Cluster Pod Matrix (Click any pod for kubectl describe)12/12 READY (100% HEALTHY)

Kubernetes (K8s / k3s)

Deployments, Services & HPA

K8S

Docker & Portainer

Multi-Arch Buildx & Compose

CONTAINER

3-Tier Network Isolation

Edge → App → Data Layers

SECURE

Multi-Cloud (AWS & GCP)

Hybrid Bare-Metal & Cloud

HYBRID

Hypervisors & Edge

Bare-Metal & Networking

On-premise bare-metal server provisioning, high-availability Proxmox virtualization, MikroTik RouterOS edge routing, and isolated VLAN segmentation.

Proxmox Bare-Metal:Dual E5-2680 v4

ECC DDR4 Memory:196 GB RAM

28 Cores / 56 ThreadsVLAN 10/20/30 Isolated

Proxmox VE (HA VMs / LXCs)

HYPERVISOR

MikroTik RouterOS (VLANs)

GATEWAY

Linux (Debian / Ubuntu Server)

Zero-Downtime Engine

CI/CD & Traffic Routing

Jenkins pipelines with Blue/Green hot-swap deployment and live simulated Canary traffic distribution slider.

Canary Traffic Split:90% Green / 10% Blue

Green: v3.5 (Prod)Blue: v3.6 (Canary)

Jenkins (Blue/Green Deploy)

PROD

GitHub Actions & GitLab CI

CI/CD

Liquibase & Flyway DB Migrations

MIGRATE

SRE Telemetry & LLMOps

Observability & Tracing

P99: 11.8ms

Prometheus metrics, Grafana dashboards, Loki/ELK log aggregation, Telegram/Slack Alertmanager, and LangSmith LLMOps tracing.

Cluster Response Time:11.8 ms avg

Prometheus & Grafana Telemetry

METRICS

Alertmanager (Telegram / Slack)

ALERTS

LangSmith LLMOps & Ollama GPU

LLMOPS

Published CVEs

Security Hardening

2 CVE Disclosures

CrowdSec intrusion prevention, Keycloak SSO/OAuth2, ClamAV antivirus file scanning, Restic backups, and security vulnerability research.

CVE-2026-22706Strapi CMS

CVE-2026-47380NocoDB Auth

Published on GitHub Advisory DB & CVE.org

CrowdSec IPS & Bot Defense

IPS

Keycloak Single Sign-On (SSO)

OAUTH2

Restic Daily Incremental Backups

BACKUP

Distributed Core & MCP

Backend & Search DB

Java Spring Boot 3.5 with ZGC, Elasticsearch 8.x Vietnamese analyzer, PostgreSQL 17/PostGIS, Redis 7, RabbitMQ, and Model Context Protocol (MCP) server development.

JVM GC Algorithm:ZGC (Sub-ms Pauses)

Search Engine:Elasticsearch 8.x VN

Redis 7 Cache + RabbitMQMCP Protocol 22 Tools

Spring Boot 3.5 (JVM ZGC)

JAVA

Elasticsearch 8.x (VN Analyzer)

PostgreSQL 17, Redis 7 & RabbitMQ

DB / MQ

PRODUCTION CASE STUDIES & ARCHITECTURE

Featured Engineering Projects

Real-world enterprise systems, high-availability web platforms, AI hybrid RAG engines, spatial GIS, and published security vulnerability disclosures.

Enterprise DevOps

Dec 2025 – Present★ FEATURED

HCMUTE University ERP & Website Platform

Infrastructure & DevOps Engineer•Contracted by HCMUTE

Provisioned on-premise bare-metal infrastructure and designed the full-stack containerization for a Java Spring Boot 3.5 ERP system (departments, faculties, institutes) backed by PostgreSQL 17, Redis 7, and RabbitMQ.

Key Engineering Highlights:

›Containerized 14 services with Docker across a 3-tier isolated network (edge -> app -> data) with Keycloak SSO and Portainer.

›Built Jenkins CI/CD with Blue/Green zero-downtime deployment (dual slots, 90s health check, Nginx hot-swap, auto-rollback).

›JVM performance tuning (G1GC, ZGC) and Liquibase database migrations.

›Configured Prometheus + Grafana + Alertmanager (alerts routed to Telegram/Slack), Loki, ELK Stack, Traefik SSL, ClamAV, CrowdSec IPS, and Restic daily backups.

›Orchestrated on Kubernetes (K8s) for auto-scaling and deployed self-hosted local LLM (Ollama) with LangSmith tracing.

KubernetesDockerJenkinsSpring Boot 3.5PostgreSQL 17KeycloakPrometheusCrowdSecLangSmith

Visit Live

Enterprise DevOps

Oct 2025 – Present★ FEATURED

Pharmaceutical B2B E-Commerce Platform

FullStack Developer & DevOps•Freelance Project

Deployed and orchestrated on a self-managed Kubernetes (k3s) bare-metal cluster with Jenkins CI/CD, Elasticsearch 8.x full-text search engine, and VNPay nationwide fulfillment.

Key Engineering Highlights:

›Kubernetes (k3s) cluster with automated Jenkins CI/CD (GitHub webhook -> build -> DockerHub -> kubectl deploy).

›Configured Prometheus and built custom Grafana dashboards paired with Alertmanager for real-time alerting on API latency degradation, error spikes, and DB pool saturation.

›Full-text search engine using Elasticsearch 8.x with custom Vietnamese analyzer and autocomplete across 1,000+ medicines.

›Hardened with custom rate limiting, JWT rotation, Redis caching, MinIO S3 object storage, and integrated VNPay with dual shipping carriers (GHN, ViettelPost).

k3sJenkinsElasticsearch 8.xRedisMinIONginxPrometheusGrafanaVNPay

Visit Live

AI & LLMOps

Feb 2025 – Present★ FEATURED

RAG AI Chatbot for Educational Domain

DevOps & LLMOps Engineer•Contracted by HCMUTE

Retrieval-Augmented Generation (RAG) platform on university servers (.edu.vn) with full-stack LangSmith observability.

Key Engineering Highlights:

›Containerized full application stack with Docker ensuring consistent environments across dev, staging, and prod.

›Automated CI/CD pipeline on GitLab streamlining workflow from code commit to deployment.

›Nginx reverse proxy with SSL termination and strict routing to university backend infrastructure.

›Security hardening with Rate Limiting, DoS protection, and LangSmith real-time tracing of RAG latency and inference tokens.

DockerGitLab CILangSmithPythonRAGNginxFastAPI

Visit Live

Gov & Spatial

Jul 2024 – Mar 2025★ FEATURED

Dong Thap Martyrs' Cemetery GIS Platform

DevOps Engineer•Provincial Government Project

Spatial navigation and record digitalization platform integrated under official Vietnam government domain (.gov.vn).

Key Engineering Highlights:

›Set up GitHub Actions CI/CD with self-hosted runner on Linux VPS, automated Docker Compose + Nginx SSL deployment.

›PostgreSQL + PostGIS spatial database (250+ vertices, 500+ edges, SRID 4326) powering graph pathfinding engine, Flyway migrations, and JWT RSA 2048-bit authentication.

›Automated daily database backups with 30-day retention and data import pipelines for 2,500+ martyr records.

PostGISPostgreSQLGitHub ActionsDocker ComposeNginxFlywayJWT RSA

Visit Live

Open Source

Apr 2026 – Present

vibe-hnindex — Codebase Knowledge MCP Server

Creator & DevOps Engineer•Open-source Project

Published npm package and Model Context Protocol (MCP) server exposing 22 tools for AI coding assistants (Claude Code marketplace) with Next.js 16 documentation.

Key Engineering Highlights:

›Hybrid search fusing keyword (SQLite FTS5 + BM25) and semantic (Qdrant vector DB + Ollama embeddings) via Reciprocal Rank Fusion.

›Parallel indexing with Node.js worker_threads (~3-4x speedup) and incremental SHA-1 change detection for 40+ programming languages.

›Automated GitHub Actions CI/CD matrix build on Node 20/22/24 with auto-publish to npm registry on tag release.

MCP ProtocolTypeScriptNode.jsQdrantSQLite FTS5GitHub ActionsNext.js 16Vercel

Source Code

Visit Live

Cloud & Bare-Metal

Oct 2024 – Present

Bare-Metal Self-Hosted Cloud Infrastructure

System Administrator•Self-funded Infrastructure

Self-operated bare-metal server cluster with Proxmox VE virtualization and MikroTik hardware edge routing.

Key Engineering Highlights:

›Dual Intel Xeon E5-2680 v4 (28 Cores / 56 Threads) with 196 GB ECC DDR4 RAM and ZFS NVMe pool running Proxmox VE HA VMs/LXCs.

›MikroTik hEX (E50UG) router gateway handling Edge routing, PPPoE termination, Static IP mapping, and hardware firewall rules.

›Network segmentation with VLANs ensuring strict 3-tier isolation (Edge -> App -> Data) between multi-tenant clients and staging sandboxes.

Proxmox VEMikroTik RouterOSDual Xeon E5-2680v4196GB RAMVLANsLinuxZFS

Visit Live

Enterprise DevOps

Apr 2025 – Nov 2025

Din Ky Binh Duong - Restaurant & Hotel Platform

DevOps Engineer•Freelance Project

Multi-branch restaurant and hotel management platform operating across 3 branches in Binh Duong.

Key Engineering Highlights:

›GitLab CI/CD pipeline with automated Docker Compose + Nginx deployment on Linux VPS.

›PostgreSQL 15 database with Alembic migrations across 20-table schema spanning 4 business domains (restaurant, hotel, events, blog).

›Configured Jinja2 HTML email notifications and module-based RBAC covering 14 modules.

GitLab CIDocker ComposePostgreSQL 15AlembicNginxLinux

Visit Live

Enterprise DevOps

Mar 2025 – Jul 2025

In Phu Long - Online Printing Platform

Full-Stack & DevOps Engineer•In Phu Long Company

Engineered a high-performance Full-stack web application and content management system tailored for commercial printing services.

Key Engineering Highlights:

›Frontend (Next.js 14+): Responsive, SEO-optimized web interface leveraging Server-Side Rendering (SSR) for ultra-fast page loads and dynamic user experiences.

›Backend & API (FastAPI): Asynchronous, high-performance API handling core business logic, routing, and order processing workflows efficiently.

›Database & Integration: PostgreSQL architecture utilizing JSONB for flexible article publishing and seamless RESTful integration across the full stack.

Next.js 14FastAPIPostgreSQLJSONBTypeScriptPythonREST APIDocker

Visit Live

AI & LLMOps

2025 – Present★ FEATURED

Cổ Chân Nhân AI — Agentic Hybrid RAG Assistant

Creator & AI/DevOps Engineer•Open-source AI System

Agentic Hybrid RAG system combining Vector Search (Qdrant), Knowledge Graph (Neo4j with 6,800+ entities), Text-to-Cypher AI query engine, DeepSeek V4 Flash thinking mode, and Remote MCP Server.

Key Engineering Highlights:

›Agentic Dual Retrieval: Fuses Qdrant Vector DB (30,214 chunks, Qwen3-8B 4096-dims) with Neo4j Knowledge Graph (6,800+ entities) and Voyage AI Reranker (rerank-2.5).

›Text-to-Cypher Engine: Automatically compiles natural language questions into Neo4j Cypher queries with Read-Only Safety Sanitizer.

›Deep Reasoning & MCP: DeepSeek V4 Flash multi-layer reasoning mode with Remote MCP Server (SSE/HTTP) for Claude Code, Cursor, Antigravity, and Discord Bot integration.

›Infras & Message Broker: Docker containerized architecture with RabbitMQ 4 task queues, Redis semantic caching, MongoDB analytics, and unbuffered SSE Nginx reverse proxy.

DeepSeek V4Neo4jQdrantFastAPINext.js 16MCP ProtocolRabbitMQRedisDocker

Source Code

Visit Live

Security & Research

May 2026★ FEATURED

Security Research & CVE Disclosures

Security Researcher•Global Open-Source Community

Discovered and officially reported security vulnerabilities in popular open-source software.

Key Engineering Highlights:

›CVE-2026-22706 (May 13, 2026): Security Reporter for Strapi Open-source CMS (Session Expiration & Token Revocation).

›CVE-2026-47380 (May 19, 2026): User Enumeration via Sign-In Timing in NocoDB.

›Credited in GitHub Advisory Database and CVE.org official vulnerability records.

AppSecCVE Vulnerability ResearchSecurity HardeningPenetration Testing

CVE-2026-22706 / CVE-2026-47380

CAREER TRACK RECORD & LEADERSHIP

Work Experience & Education

Operational history managing high-load university portals, commercial client deployments, research club leadership, and university academic background.

ACADEMIC BACKGROUND•Sep 2023 – Present

Ho Chi Minh City University of Technology and Education (HCMUTE)

Bachelor of Engineering in Data Engineering • GPA: 3.01 / 4.0

In Progress

Part-time, Contracted

May 2025 – Present•HCMUTE, Vietnam

Infrastructure & DevOps Engineer / Web Developer

Ho Chi Minh City University of Technology and Education (HCMUTE)

Production University Web Services Operated:

hcmute.edu.vn beta.hcmute.edu.vn chatbot.hcmute.edu.vn 360.hcmute.edu.vn tuoitre.hcmute.edu.vn

Advised on server procurement and operated production university web services, managing uptime, deployments, and incident response for hcmute.edu.vn, beta.hcmute.edu.vn, chatbot.hcmute.edu.vn, 360.hcmute.edu.vn, and tuoitre.hcmute.edu.vn.

Supported the design and development of internal web applications and platforms for the university, collaborating directly with faculty and IT departments.

Managed containerized deployments on on-premise bare-metal infrastructure with Docker and Kubernetes, handling monitoring, rolling updates, and security hardening.

KubernetesDockerJenkinsSpring Boot 3.5NginxPrometheusGrafanaCrowdSecLangSmith

Fresher

Mar 2026 – Jun 2026•Vietnam

System Administrator (Fresher)

Aura Beauty

Maintained company systems, IP camera (CCTV) surveillance, and network infrastructure; configured LAN/WAN, VPN, and TCP/IP routing while diagnosing and resolving connectivity incidents.

Managed and verified CI/CD pipelines for internal projects, monitoring build stages and ensuring reliable deployment workflows.

Configured and serviced company hardware, including assembling, repairing, and maintaining PC workstations, IP cameras, and networking equipment.

Supported the development of a workflow automation system integrated with LarkSuite to streamline internal business operations and team communication.

System AdminLAN/WANVPNTCP/IPCI/CD VerificationLarkSuite AutomationCCTV

Club Leadership & R&D

May 2025 – Present•HCMUTE, Vietnam

Founder & Leader

HCM UTE Research on Technology and Innovation Club (RTIC)

Founded and lead the RTIC research club at HCMUTE, conducting technical workshops in DevOps, Cloud Infrastructure, and AI.

Built and manage the club bare-metal server cluster using Proxmox VE, MikroTik RouterOS, and Docker hosting.

Mentored student teams in CI/CD automation, Git workflows, and building production-grade software.

Proxmox VEMikroTikLinuxTeam LeadershipDevOpsBare-Metal

UNIX INTERACTION & REAL-TIME CLI

Interactive DevOps CLI Terminal

Inspect live server metrics, query Kubernetes pods, verify published CVE disclosures, and explore full-stack capabilities with real-time autocompletion.

andyanh@control-plane:~ (auto-suggest active)

⚡ AndyAnh174 Cloud & DevOps Control Plane Shell (v2.4.0)

Tip: Press Tab or ➔ to autocomplete, ↑/↓ to navigate suggestions, or type 'help' for full command list.