Dorian Dinh Xuan

• Improving and optimizing AWS infrastructure across development, staging and production using Terraform and GitOps practices.
• Building GitLab CI/CD pipelines that automate build, test, static code analysis (SonarQube), container image scanning (Harbor) and multi-environment deployments.
• Strengthening AWS security with WAF rules, AWS Shield and CloudWatch/CloudTrail alerts for unauthorized actions such as IAM policy changes, security group modifications and permission escalations.
• Migrating on-premises applications to AWS, containerizing and deploying them on ECS Fargate.

Stack: AWS, Terraform, GitLab CI/CD, SonarQube, Harbor, AWS WAF, AWS Shield, CloudTrail, CloudWatch, ECS Fargate, Docker

• Designed and implemented a multi-tenant architecture for an IoT microservices platform on AWS EKS, ensuring secure isolation, scalability and efficient resource management.
• Enforced tenant boundaries with Kubernetes namespaces, network policies and custom Helm charts.
• Led AWS cost optimization initiatives, achieving a ~40% reduction in cloud expenses.
• Established a standardized AWS Organization with Control Tower, Permission Sets and OUs, and integrated IAM Identity Center with Google Workspace SSO.
• Implemented Karpenter for dynamic EKS scaling, CircleCI pipelines and ArgoCD for GitOps-based deployments.
• Deployed HashiCorp Vault with Vault Secrets Operator for dynamic secrets and policy automation.
• Set up a full Prometheus stack (Prometheus, Grafana, Loki, Promtail, Alertmanager) for observability and proactive alerting.

Stack: AWS, EKS, ECS, Terraform, Helm, Karpenter, ArgoCD, CircleCI, Vault, Prometheus, Grafana, Loki, Alertmanager, Control Tower, MongoDB, Python

• Designed the networking architecture (VPCs, subnets, routing, security groups) for secure, scalable infrastructure.
• Provisioned ECS Fargate, S3, Amazon DocumentDB and AWS Cognito, including integration with Azure SSO.
• Secured secrets with encryption and AWS Secrets Manager, and configured AWS SES for transactional email.
• Built a CircleCI pipeline automating build, test, Docker image creation and deployment to ECS.

Stack: AWS, ECS Fargate, DocumentDB, S3, Cognito, Secrets Manager, SES, CircleCI, Docker

• Enhanced and modernized an existing AWS infrastructure to improve performance, security and cost efficiency.
• Automated resource provisioning and scaling using Terraform Enterprise integrated with AWS Lambda for event-driven automation.
• Standardized operational workflows and documentation in Confluence.
• Achieved significant cost savings through right-sizing, performance tuning and continuous cloud monitoring.

Stack: AWS, Terraform Enterprise, Lambda, Python, Confluence

• Developed a Python-based automation framework to streamline firewall rule provisioning for Palo Alto devices.
• Integrated Jira ticket parameters to auto-generate and apply firewall configurations, significantly reducing manual workload.
• Ensured consistent enforcement of network security policies while accelerating rule deployment.
• Provided training and knowledge transfer to operations teams for long-term maintenance.

Stack: Python, Palo Alto, Jira, Jenkins

• Migrated infrastructure and a monolithic application from on-premises systems to AWS, delivering a scalable, secure and highly available environment.
• Used AWS Database Migration Service (DMS) to migrate databases and modernize application components.
• Configured AWS networking and security: VPCs, VPNs, subnets, route tables, peering, NAT gateways, network ACLs and security groups.
• Implemented monitoring, logging and alerting with CloudWatch, SNS, Grafana and the ELK stack.
• Developed reusable Terraform modules and GitLab CI, Ansible and Packer pipelines for service provisioning.

Stack: AWS, Terraform, GitLab CI, Ansible, Packer, AWS DMS, CloudWatch, Grafana, ELK

• Contributed to the architecture and deployment of a highly scalable AWS microservices infrastructure for a high-traffic grocery chain.
• Built a resilient network setup with subnets, route tables, internet/NAT gateways, network ACLs and peering connections.
• Secured access to private instances via bastion hosts, following AWS security best practices.
• Implemented a Jenkins CI/CD pipeline for ECS Fargate deployments integrated with Amazon RDS, with all infrastructure automated in Terraform.

Stack: AWS, Terraform, Jenkins, ECS Fargate, RDS, Docker

• Designed and implemented the AWS network architecture: VPCs, subnets, route tables, internet/NAT gateways, network ACLs and peering connections.
• Established secure access to private instances via bastion hosts.
• Deployed and configured a Jenkins server to streamline CI/CD.
• Ran workloads on ECS Fargate with Amazon RDS, with the entire infrastructure provisioned in Terraform.

Stack: AWS, Terraform, Jenkins, ECS Fargate, RDS, Docker