Available for opportunities

Fullstack Developer
& Cloud/DevOps Engineer

I build scalable web systems end-to-end — from React frontends and Node.js APIs to AWS infrastructure, CI/CD pipelines, and production observability. I own the full stack, deploy it, and keep it running.

View Projects CV Fullstack CV DevOps
React · TypeScript Node.js · PostgreSQL AWS · Docker Terraform · Ansible GitHub Actions Prometheus · Grafana

// About

Building systems that run in production.

I'm a Fullstack Developer and Cloud/DevOps Engineer based in Ho Chi Minh City, Vietnam. I design and build web applications end-to-end — from TypeScript frontends and RESTful API backends to the AWS infrastructure that runs them in production, with CI/CD pipelines, observability stacks, and security baked in from the start.

My approach goes beyond writing code. I think in terms of system architecture, data consistency, and operational reliability. I've implemented PostgreSQL row-level locking to prevent race conditions in concurrent seat booking, designed CloudFront CDN delivery with Origin Access Control, and built Prometheus + Grafana monitoring stacks across containerized infrastructure.

I'm currently finishing my B.Eng. in Information Technology at International University — VNU-HCM, and actively looking for fullstack, backend, or DevOps/cloud engineering roles where I can contribute to real production systems from day one.

// Skills

Engineering Capabilities

Frontend
React.js TypeScript JavaScript Tailwind CSS TanStack Query Ant Design
Backend
Node.js Express.js REST APIs JWT / Auth Prisma ORM Zod
Databases & Cache
PostgreSQL MySQL MongoDB Redis
Cloud & Infra
AWS EC2 AWS S3 CloudFront Route 53 IAM CloudWatch SSM DigitalOcean
DevOps & CI/CD
Docker Docker Compose GitHub Actions Jenkins Terraform Ansible
Observability
Prometheus Grafana Node Exporter Alertmanager Blackbox Exporter CloudWatch
Tools & Networking
Linux / Bash Git Nginx Caddy HTTPS / TLS DNS Reverse Proxy

// Projects

Engineering Case Studies

Featured · Fullstack + Cloud/DevOps

CinemaHub — Movie Reservation System

A production-grade cloud-hosted movie reservation platform built end-to-end — from React/TypeScript frontend and Node.js/PostgreSQL backend to full AWS deployment with CI/CD automation and observability.

Live Demo GitHub

Backend Architecture

  • RESTful APIs for auth, reservations, movie management, and admin reporting using Prisma ORM
  • JWT authentication with rotating refresh tokens and Redis-based token revocation
  • PostgreSQL row-level locking to prevent double-booking under concurrent seat requests
  • Role-based authorization with granular access control across user, staff, and admin roles

AWS Infrastructure & Deployment

  • Frontend delivered via CloudFront CDN with Origin Access Control (OAC) and private S3 bucket
  • Backend on ARM64 EC2 with Caddy HTTPS, Docker multi-stage builds, and separate EBS data volumes
  • Route 53 DNS routing, IAM least-privilege roles, rate limiting, and environment secret management
  • Automated EBS snapshots, PostgreSQL backup workflows, and CloudWatch alerting

CI/CD Pipeline

  • GitHub Actions with OIDC authentication — no long-lived AWS credentials stored in secrets
  • Automated S3 sync for frontend assets and CloudFront cache invalidation on every push
  • SSM-based backend redeployment — remote Docker pull and container restart via Run Command

Scale & Data

  • Seeded with 50+ movies, 800+ showtimes, and 87,000+ generated seats for realistic load testing
  • Optimized cost/performance with ARM64 instances and Docker multi-stage image builds

DevOps & Infrastructure · March 2026

MERN Production Pipeline

Full infrastructure-as-code provisioning and observability stack for a MERN application on DigitalOcean, built to demonstrate production DevOps practices end-to-end.

  • DigitalOcean infra provisioned with Terraform; server config automated via Ansible playbooks
  • Dockerized frontend, backend, MongoDB, Jenkins, Prometheus, and Grafana via Docker Compose
  • GitHub Actions + Jenkins CI/CD with webhook-triggered deployment and container lifecycle management
  • Prometheus, Grafana, Node Exporter, Blackbox Exporter, and Alertmanager observability stack
  • Nginx reverse proxy with automated Let's Encrypt HTTPS certificates
TerraformAnsibleDocker Compose JenkinsGitHub ActionsPrometheus GrafanaNginxDigitalOcean
GitHub Demo Video

Fullstack · Sep 2025 – Jan 2026

ThesisBoard

A fullstack thesis management platform for students and academic supervisors — built with modular architecture, role-based access, and relational schema design.

  • Responsive dashboards and project management interfaces for students and supervisors
  • RESTful API design with structured MySQL schema for thesis tracking workflows
  • Auth0 integration for federated authentication and role-based access control
  • Modular monorepo architecture designed for maintainability and future scalability
ReactTypeScriptNode.js Express.jsMySQLAuth0
GitHub

// Engineering Mindset

How I Think About Systems

Observability First

Production systems that you can't measure are systems you can't operate. I instrument applications with metrics, alerting rules, and dashboards before they go live — not after something breaks.

Infrastructure as Code

Clicking through cloud consoles doesn't scale and doesn't reproduce. I want every resource I provision has a Terraform or Ansible definition behind it, making environments consistent, auditable, and recoverable.

Backend Systems Thinking

I think beyond request-response cycles. Concurrency, data consistency, token revocation, and schema design are first-class concerns — not afterthoughts. I've handled concurrent booking races at the database transaction level.

Security by Design

Least-privilege IAM, OIDC instead of stored credentials, restricted SSH exposure, rotating JWT tokens with Redis-based revocation — security decisions made at architecture time, not patched in afterward.

End-to-End Ownership

I write the feature, review the API contract, write the migration, containerize the build, set up the pipeline, deploy it, and watch the metrics. Ownership doesn't stop at merging the PR.

Reliability Engineering

Automated backups, EBS snapshots, recovery runbooks, and alerting before on-call pages are all part of the design — because deploying is easy, but keeping systems up is the actual job.

// Experience & Education

Background

May – Sep 2025 Brain-Life HCMC

Software Engineer Intern

  • Developed Android biofeedback games integrated with EEG headband devices for cognitive training and research applications
  • Contributed to brain–computer interface (BCI) systems and real-time EEG data processing workflows
  • Implemented and maintained stable communication pipelines between EEG hardware and mobile applications
  • Collaborated cross-functionally to improve EEG signal reliability and system performance
Expected Dec 2025 International University — VNU-HCM

B.Eng. in Information Technology

  • GPA: 3.14 / 4.0
  • Focused on software engineering, distributed systems, and network fundamentals
GPA 3.14 / 4.0

// Contact

Get in Touch

Open to fullstack, backend, DevOps, and cloud engineering opportunities.

Email

thientran03.it@gmail.com

LinkedIn

linkedin.com/in/thientr18

GitHub

github.com/thientr18