Open to opportunities

Dat Quoc Nguyen

@datquocnguyen

Message

Senior DevOps/SRE engineer securing HIPAA-ready AWS and Azure platforms.

Vietnam

Message

What I'm looking for

I’m looking for a Senior DevOps/SRE role where I can build HIPAA-ready AWS/Azure infrastructure, standardize keyless CI/CD with OIDC, and drive ISO 27001-grade security and cost optimization across remote or hybrid teams.

I’m a Senior DevOps Engineer / SRE with 5+ years building AWS and Azure infrastructure for US healthcare and pharma clients. I specialize in HIPAA technical controls, keyless CI/CD using OIDC, and Infrastructure as Code with OpenTofu/Terraform. I also deliver production-grade automation for deployments, observability, and incident readiness.

Across my roles, I’ve led security and compliance outcomes, including an end-to-end ISO 27001 engagement as ISMS Manager—building the ISMS, risk register, controls, and evidence collection. I’ve strengthened HIPAA posture with defense-in-depth patterns like KMS encryption, AWS Config conformance packs (~260 rules), CloudTrail, WAFv2, least-privilege IAM, and a no-SSH SSM bastion. I’m outcome-driven too: I reduced cloud costs by 20% and accelerated deployments by 30% through practical optimization and automation.

I build and run reliable infrastructure on Kubernetes (Amazon EKS), containerized services, and secure networking on both cloud platforms. From GitHub Actions/Bitbucket Pipelines with OIDC to CloudWatch/Azure Monitor observability, I focus on speed without sacrificing control. I’m also actively applying AI on AWS Bedrock for HIPAA-scoped RAG and operational workflows—turning runbooks, documentation, and incident summaries into repeatable systems.

Experience

Work history, roles, and key accomplishments

Current

Senior DevOps Engineer

Current

H3Tech

Dec 2025 - Present (8 months)

Owns three US healthcare/pharma AWS production platforms built from scratch using modular OpenTofu across multiple environments and AWS accounts. Implemented defense-in-depth HIPAA technical controls, standardized keyless CI/CD via OIDC, and delivered HIPAA-scoped AI features on AWS Bedrock (Claude) for a BAA-covered RAG feature and agent service.

AWS AWS RDS Aurora Lambda S3 Cloudwatch CloudTrail AWS Config KMS Secrets Manager AWS AI Bedrock OpenTofu GitHub Actions Bitbucket Pipelines OIDC Docker AWS SSM Session Manager EC2 RAG Keyless CI CD

Senior DevOps Engineer

FPT Software

Sep 2025 - Dec 2025 (3 months)

Executed zero-downtime application re-platforming from AWS to Azure, covering compute, storage, and networking. Re-architected CI/CD to Azure DevOps with reusable pipeline templates and built a centralized observability stack with Azure Monitor and Log Analytics.

Azure Azure DevOps Terraform Network Monitoring Private Endpoints Route Tables azure monitor Log Analytics Pipeline As Code CI CD

DevOps Engineer

PTN Global Corp

Jan 2024 - Aug 2025 (1 year 7 months)

Owned CI/CD and infrastructure for two parallel AI-driven medical platforms (InjuryEX and Florey), balancing reliability with rapid feature delivery for sensitive claims data. Acted as ISMS Manager, setting up ISO 27001 end-to-end compliance and driving internal and external audits, while reducing AWS operational costs and accelerating release cycles.

Jenkins Terraform Helm AWS S3 EFS RDS EC2 VPC Lambda API Gateway ELB Sagemaker Secrets Manager Route 53 Cloudwatch ECR SES SNS AWS Config BASH Python PowerShell ISO 27001 ISMS Risk Register Vanta CI CD IAM 2FA

DevOps Engineer

Netcompany

Aug 2021 - Dec 2023 (2 years 4 months)

Maintained high availability for 100+ global Adobe Experience Manager websites, including 24/7 on-call support for production incidents. Improved page-load times via Akamai CDN caching and Apache Dispatcher tuning, migrated pipelines from Jenkins to Azure DevOps, and built RESTful APIs using C# and TypeScript.