hoang@cloud:~$
HOANG.OPS
EST. 2026
∞
BOOT_SEQUENCE.LOG
~/hoang/portfolio.sh
>

Phan Lê Thanh Hoàng, DevOps & Cloud Engineer. ENDLESS DEPLOYMENT

CloudOps intern @ XBrain × AWS Accelerator: building HA infrastructure with Terraform, Kubernetes & GitOps, operating a live 18-microservice AI storefront.

microservices in production ops
0
accelerator phases · P3 live
0
AWS services deployed
0+
GPA @ FPT University
0
[VIEW PROJECTS][DOWNLOAD CV]
SYS.ACTV2.0.0
ap-southeast-1

# About

Software Engineer with a solid full-stack background, transitioning strongly into Cloud Architecture and DevOps. Designing and hardening highly available AWS environments with Infrastructure as Code (Terraform), container orchestration (Docker / Kubernetes), GitOps delivery, and SLO-driven observability, building scalable, cost-aware, secure infrastructure. Bridging application development with resilient cloud operations.

current_role
CloudOps Intern
track
Cloud / DevOps (CDO)
open_to
Internship · Full-time

# Ops Log

A chronological deployment log of cloud infra built and projects shipped.

./deployments.logstreaming
  1. ★FEATURED
    [2026-04 → present]

    XBrain × AWS Accelerator · Cloud/DevOps Internlive

    └─Role:Cloud Infrastructure & DevOps (CDO track)
    • └─P1 Foundation: 3-tier HA on AWS with VPC, IAM least-privilege, KMS, RDS/DynamoDB, plus a Bedrock Knowledge Base + RAG pipeline over an OpenSearch vector store.
    • └─P2 IaC + K8s: Terraform with remote state (S3 + DynamoDB lock) and modules; Docker + Kubernetes (minikube / EKS) deployed via Helm.
    • └─P2 Delivery: GitOps with ArgoCD, GitHub Actions CI/CD, and Argo Rollouts canary that auto-aborts on bad metrics.
    • └─P2 Observability & security: OpenTelemetry → Prometheus/Grafana/Loki, SLO burn-rate alerts, RBAC + OPA/Gatekeeper, Trivy/Cosign supply-chain, External Secrets.
    • └─P3 Service takeover: operating a live 18-microservice AI storefront (gRPC + Kafka on K8s) with build→ECR→Helm, on-call incident response, cost/SLO under real constraints.
  2. [2026-01 → 2026-06]

    GZMart · E-commerce Platform

    └─Role:Fullstack Member
    └─Stack:React 18, TypeScript, Tailwind, Redux, Socket.IO, Ant Design
    └─Highlight:Multi-role ERP system (Buyer / Seller / Admin)
  3. [2025-09 → 2025-12]

    VIC SPORT · Online Sport Booking

    └─Role:Project Lead
    └─Stack:React, TypeScript, Vite, Ant Design, Google Maps API, Socket.IO
  4. [2025-05 → 2025-09]

    FLearning · Online Learning Platform

    └─Role:Project Lead
    └─Stack:React.js, Redux Toolkit, Axios, Socket.IO, Vercel, GitHub Actions (CI/CD)
    └─Highlight:First CI/CD pipeline with GitHub Actions, the DevOps entry point
  5. [2025-01 → 2025-05]

    FPT Software

    └─Role:Frontend Developer Intern

# XBrain × AWS Accelerator

AWS · Powered
Live since: April 2026
Da Nang · Blended
actively shipping

Real, production-style cloud work, not slideware. A three-phase accelerator: build the AWS foundation, specialize on the Cloud / DevOps track, then take over a live AI product and operate it under real SLAs, budgets, and incidents.

track
CDO · Cloud/DevOps
structure
3 phases
role
CloudOps Intern
region
ap-southeast-1
// evaluated on
architectureIaCGitOpsobservabilitysecuritycostincident responsedecision defense
$cat program-phases.md

phase_1 · Foundation · AWS Core

W1–W7
3-tier app hardened week over week, capped by a 48h AI-SaaS hackathon on a personal account under a $100 cap.
  • └─Well-Architected 6-pillar design · VPC, subnets, IAM least-privilege, KMS
  • └─RDS / DynamoDB · Lambda · CloudFormation · S3 storage tiers
  • └─Amazon Bedrock Knowledge Bases + RAG over OpenSearch vector store
  • └─Network Firewall, VPC Peering / Transit Gateway, Flow Logs, AWS Backup
  • └─FinOps: tagging + Cost Explorer, Automated Cost Guard, self-healing security

phase_2 · Specialization · Cloud / DevOps (CDO)

W8–W12
Building a mini platform end-to-end: IaC → K8s → GitOps → observability → progressive delivery → cluster-level security.
  • └─Terraform IaC: remote state (S3 + DynamoDB lock), modules, ADRs
  • └─Kubernetes (minikube / EKS) · Helm · GitOps with ArgoCD
  • └─GitHub Actions CI/CD · Argo Rollouts canary with metric auto-abort
  • └─OpenTelemetry + Prometheus / Grafana / Loki · SLO burn-rate alerts
  • └─RBAC + OPA/Gatekeeper · External Secrets · Trivy + Cosign supply chain

phase_3 · Service Takeover · Production Ops

live
Operating a live 18-microservice AI storefront on Kubernetes as a real engineer: own the SLA, run incidents, improve under real constraints.
  • └─Build → ECR → Helm deploy of a polyglot gRPC + Kafka microservice system
  • └─5 pillars: Security · Reliability · Performance · Cost · Auditability
  • └─On-call incident response, SLO error budgets, decision logs (ADRs)
  • └─Postgres / Valkey / Kafka, OpenTelemetry stack, injected-fault resilience
▲ partner: AWS▲ operator: XBrain▲ region: ap-southeast-1● status: actively shipping

# Projects

// INFRASTRUCTURE· XBrain × AWS Accelerator
./accelerator/p3

AI Storefront · Production Takeover

live

Operating a live 18-microservice AI storefront on Kubernetes as a real on-call engineer.

  • └─Polyglot gRPC + Kafka system: build → ECR → Helm deploy
  • └─On-call incident response · SLO error budgets · decision logs (ADRs)
  • └─Security, reliability, performance, cost & auditability under real constraints
KubernetesgRPCKafkaHelmECRPostgresValkeyOpenTelemetry
./accelerator/p2

Cloud-Native Delivery Platform

shipped

A mini platform built end-to-end: IaC → Kubernetes → GitOps → progressive delivery → observability.

  • └─Terraform with remote state (S3 + DynamoDB lock) and reusable modules
  • └─EKS via Helm · ArgoCD GitOps · Argo Rollouts canary with metric auto-abort
  • └─OTel → Prometheus/Grafana/Loki · SLO burn-rate alerts · OPA + Trivy/Cosign
TerraformEKSHelmArgoCDGitHub ActionsArgo RolloutsGrafanaOPA
// APP DEV· fullstack background
./projects/gzmart

GZMart

Multi-role e-commerce platform with AI features (Gemini AI, Google Vision).

React 18TypeScriptReduxSocket.IOGemini AI
githubshipped
./projects/flearning

FLearning

Online learning platform: first GitHub Actions CI/CD pipeline (DevOps entry point).

ReactRedux ToolkitSocket.IOVercelGitHub Actions
githubshipped
./projects/vic-sport

VIC SPORT

Online sports booking with Google Maps & OAuth integrations.

ReactTypeScriptViteGoogle Maps API
githubshipped
./projects/tourhub

TourHub

Tour booking website with VietQR payment integration.

Java ServletJSPSQL ServerVietQR
githubshipped

# Tech Stack

// CLOUD PLATFORM

aws · core services
  • AWS EC2
  • S3
  • RDS
  • DynamoDB
  • VPC
  • IAM
  • KMS
  • Lambda
  • ECR
  • Amazon Bedrock

// DEVOPS & AUTOMATION

iac · containers · cd
  • Terraform (IaC)
  • Docker
  • Kubernetes (K8s/EKS)
  • Helm
  • GitOps (ArgoCD)
  • GitHub Actions
  • Argo Rollouts (Canary)

// OBSERVABILITY & SECURITY

slo · supply-chain · cost
  • OpenTelemetry
  • Prometheus / Grafana
  • Loki
  • SLO / Burn-rate Alerts
  • AWS CloudWatch
  • CloudTrail
  • OPA / Gatekeeper
  • Trivy + Cosign
  • External Secrets
  • Cost Guard (Lambda + EventBridge)
// APP DEV · supporting role./background
  • React 18
  • TypeScript
  • Redux Toolkit
  • Node.js
  • Socket.IO
  • MongoDB
  • SQL Server

# Education & Certs

FPT University

Bachelor · Software Engineering
period
2022 – 2026
major
Software Engineering
gpa
8.62 / 10
graduating
2026
progress
Y1Y2Y3Y4 ●

Certifications

./certs/*.crt
  • Project Management2025
  • React Ultimate · Udemy2025
  • Research Methods2025
  • Web Design for Everybody2024
  • Software Development Lifecycle2024
cloud training: XBrain × AWS Accelerator · see ~/ops_log

# Contact_

tty/contact
$ compose --to=hoangplt.work@gmail.com