Professional Summary
Forward-thinking IT Systems Supervisor specializing in infrastructure operations management and structured AI-assisted software delivery. I offer robust hands-on hardware expertise alongside team supervision and process governance. Rejecting unguided "vibe coding", I operate a rigorous delivery methodology where I act as the System Architect, Technical Designer, and QA Governor while employing AI agents as development tools to write, refactor, and deploy code. This operational framework offloads manual development to AI while ensuring robust, high-performance, and secure software. Skilled in bridging traditional infrastructure (Windows Server, SQL, Networks) with AI-assisted workflows to build reliable enterprise-grade systems.
Technical Skills
Management & Governance:
Team Guidance & Training, ITIL Framework, AI-Assisted Development with Human Oversight.
AI & DevOps:
Software Delivery, PromptOps, Multi-Agent Workflows, System Architecture, Automated QA & Verification.
Systems & Infra:
Windows Server, Active Directory, Linux (Ubuntu), NAS Storage, CCTV Systems.
IT Support & Ops:
L1/L2 Troubleshooting, Diagnostics, Asset Lifecycle, OS Deployment, ERP/WMS systems.
Network Admin:
LAN/WAN, VPN/P2P, Firewalls, CCTV infrastructure.
Databases & Scripting:
C++, Database Administration & SQL, Scripting & Automation, In-House Software Development, Web Development (HTML/CSS/JS), Structured AI-Assisted Development.
Orchestration Tools:
Git/GitHub.
Languages:
English (IELTS 6.5 — Professional Working Proficiency).
Personal Projects
* All personal projects are hosted on GitHub via the links in the contact header.
High-performance Native Rust 2024 Edition MCP server & Autonomous Orchestrator supervising AI coding agents (Antigravity, Claude, Cursor, OpenCode). Features an embedded 279-skill catalog with local ML vector search, universal in-engine token compression, 300 LOC upfront decomposition enforcement, persistent architecture memory, multi-session isolation with 30-day GC, and a 7-stage deterministic workflow gate. Achieves <1ms startup with ~35MB RAM footprint over Stdio transport.
- 279-Skill Catalog with Local ML Vector Search: Embedded catalog with Hugging Face Candle BERT embeddings (
intfloat/multilingual-e5-small) + Cross-Encoder reranking for sub-millisecond semantic skill discovery. Automatically indexes workspace-local skills from .agents/skills/.
- Universal In-Engine Token Compression & 300 LOC Cap: Automatic response compression interceptor (strips HTML comments, badge URLs, blank lines), symbol-targeted extraction (
target_symbol), and physical 300 LOC reading limit with upfront sub-module decomposition warnings — cutting 40–80% token overhead.
- Autonomous Single-Entrypoint Orchestrator: Governs agent lifecycle through
task_pipeline without manual tool mapping. Manages 7 stages (Context → Plan → Ask_Revise → Build → Test_Recheck → Fix → Proposal) with persistent architecture locking (.agent-context/architecture.json) and a 3-attempt circuit breaker.
- Multi-Session Isolation & 30-Day GC: Assigns process-isolated Session IDs (
session_{PID}_{ClientName}) preventing state collisions across concurrent IDEs and terminals. Built-in background GC automatically purges stale session files older than 30 days.
- Built-in Usage Dashboard & Analytics: SQLite (
usage.db) analytics logging exact token savings and durations on every invocation. Native web dashboard (--dashboard) for real-time monitoring and analytics visualization.
- Single-Command Install & CI/CD Release: Cross-platform automated bootstrap via curl/PowerShell auto-configuring IDE clients. Automated GitHub Actions CI/CD matrix compiling release binaries for Linux, Windows, and macOS (x86_64 & Apple Silicon).
An offline-first Android health ecosystem that aggregates Google Health Connect biometrics, manages tasks and habits, and delivers AI health guidance via RAG pipeline + on-device LLM — built as a 4-tier system and successfully defended as a UIT graduation thesis.
- 4-Tier Architecture: Decoupled system across Frontend Android (Jetpack Compose, 35 Compose destinations, 8 locales, edge-to-edge UI), Backend Android (Room DB source-of-truth, WorkManager sync, Health Connect 20+ metrics, on-device LiteRT-LM AI), Backend Server (FastAPI, 10 routers / 50+ endpoints, MySQL, Delta Sync Gen 2, rate-limited), and Master GUI (PySide6 admin panel, 33 script tasks, AI Guard hot-reload, disease pipeline, automation center).
- Delta Sync Gen 2: Cursor-based bidirectional sync with mutation idempotency (mutation_id + device_id), tombstone conflict resolution, and dirty-row protection — enabling full offline capability across tasks, habits, health snapshots, biometrics, and chat history.
- AI Multi-Mode with Medical RAG: Backend RAG pipeline over ChromaDB (1,400+ disease embeddings via multilingual-e5-small), on-device AI via user-provided .litertlm models (Gemma/Phi/TinyLlama), and external API gateway with 8 provider presets (OpenAI, Gemini, Anthropic, DeepSeek, Ollama...). Dynamic conversational language detection and AI Guard off-topic policy.
- Google Health Connect Integration: 20 read + 5 write permissions across cardio, body composition, sleep, and biometrics. Smart sleep processing with wake-up day aggregation and overlap resolution. Selected-date data protection — current-day local-only, past dates use backend snapshots as fallback.
- Defense-in-Depth Security: Argon2id password hashing, JWT HS256 with refresh token rotation (device-bound), Fernet encrypted chat storage, AES-256-GCM V3 backup encryption, SQLAlchemy parameterized queries, encrypted SharedPreferences for API keys, and OWASP-oriented mitigation across all tiers.
- Smart Notification System: 13 contextual rules (AQI, HR, SpO2, sleep, steps goal, weather...) with swipe-to-dismiss (250ms animation delay + undo dialog), AI-generated smart notifications via WorkManager, and privacy-local design (no notification state on backend).
Work Projects
- Deployed enterprise NAS storage for centralized data management. Configured Windows Server Domain Controller with Active Directory, DNS, and DHCP. Designed relational databases for localized factory operations based on HQ specifications.
- Designed and implemented secure Site-to-Site VPN connections between factory sites for private encrypted data synchronization with routing policies and failover for 99.9% uptime.
- Planned and executed factory-wide CCTV deployment: site layout survey, camera positioning, structural cabling (network and power), NVR configuration, and network integration for centralized remote monitoring.
- Guided departmental teams in designing and developing custom software applications that streamlined workflows across multiple company departments, employing AI agents to accelerate delivery. Analyzed requirements, architected database schemas, and managed the full development cycle through specification, code review, and quality verification phases.
Work Experience
Sharp Manufacturing Vietnam Co., Ltd
- Software Development & Process Automation: Built in-house software to support the company and its employees in production and daily tasks, automating repetitive workflows with purpose-built tools. Employed AI agents as supporting tools to accelerate development, testing, and feature ideation, while keeping human oversight — all final decisions were reviewed and approved by end users.
- IT Asset Management & Team Guidance: Coordinated and guided team members in managing IT assets, equipment, servers, and NAS systems; provided hardware and software troubleshooting guidance, trained employees on business software usage, and directed L1/L2 incidents, PC assembly, hardware staging, OS deployment, and peripheral setup — primarily through coordination and guidance rather than hands-on execution.
- Infrastructure Management: Oversaw enterprise Windows Server environments, centralized NAS storage systems, and multi-channel CCTV surveillance, maintaining 99.9% operations uptime.
- Network Engineering: Designed and optimized LAN/WAN topologies to ensure secure, high-bandwidth communication across corporate and factory sites.
Danu Vina Co., Ltd
- Software Development & Automation: Built complete in-house applications to automate repetitive workflows and streamline daily operations across the company. Architected structured specifications and directed AI agents to accelerate delivery, reviewing and verifying all outputs for quality and correctness before deployment.
- Infrastructure & Server Administration: Administered internal IT systems (PCs, printers, network devices) and directly managed local servers (Windows Server, NAS), ensuring stable daily operations, accurate technical logging, and continuous production workflows.
- Network Administration: Deployed and managed LAN/Wi-Fi networks and CCTV systems, including IP allocation, routing, and physical cabling.
- Secure Connectivity: Established VPN Site-to-Site and P2P connections to facilitate encrypted, secure data synchronization across multiple factory branches.
YCH — Protrade Company Limited
- System Operations & Monitoring: Monitored data flow and ensured data integrity across enterprise Warehouse Management Systems (WMS — Wx3, Tx3), promptly detecting and resolving operational anomalies.
- Data Reconciliation & Analysis: Queried and analyzed database transaction logs using SQL to detect and resolve discrepancies between physical stock and digital records, improving inventory data accuracy.
- Workflow Automation & Reporting: Architected lightweight local web utilities (HTML/JS), leveraging personal expertise and community code references to streamline monthly report formatting — with all outputs reviewed and verified before use.
The Gioi Di Dong JSC
- Team Guidance & ERP Training: Guided new employees in operating the company's ERP system, covering inventory management and sales management modules.
- Operations Reporting: Extracted and compiled reports from the ERP system, presenting operational results directly to management.
- Sales Support & Coordination: Supported and coordinated staff in daily sales activities and customer service, ensuring smooth store operations.
- Warehouse Management: Utilized the ERP system to manage inventory — both system records and physical stock — ensuring accuracy across the warehouse.
- Customer Device Setup & Support: Installed, configured, and guided customers in using personal and home electronic devices.
Education
Major: Information Technology
- Core Studies: Software Development, Project Management, Database Systems, Infrastructure, Networking, System Architecture.
- Academic Focus: Broad, well-rounded understanding of the IT field, from application coding and project management to enterprise infrastructure.
Major: Software Engineering
- Core Studies: Systems Analysis & Design, Database Management (SQL), Software Architecture, Web & Mobile Development, plus fundamentals of application coding and basic software development.