Le Tran Minh Dat

LLM Gateway Engineer

Owned: architecture and the large majority of the custom layer, including its test suite and technical documentation.

• ▸Architected a bank-wide LLM gateway on LiteLLM as the single control point between every internal application and major LLM providers; isolated all bank-specific code in a separate 95-file extension layer with a single unlock hook into the core, so upstream releases merge cleanly.
• ▸Delivered enterprise access control: per-user, per-team and per-project budgets, SSO with the bank's identity provider, role-based permissions and an immutable audit log, plus bidirectional guardrails that mask or block phone numbers, national IDs, account numbers and cloud credentials.
• ▸Engineered cost governance: per-call spend reconciled against actual AWS invoices and tagged for department-level allocation; automatic model failover, budget-aware downgrade to cheaper models, and OAuth-based access to developer AI subscriptions.

AI Agent Consultant Engineer

Owned: everything — backend, frontend, prompt pipeline, data model, infrastructure and deployment.

• ▸Built a 24/7 RAG enrollment advisor for a 19-branch academy (100,000+ learner base), handling 202 leads and ~1,800 messages to date, with an advisor cockpit for human-in-the-loop review.
• ▸Hybrid retrieval fuses local ONNX embeddings (CPU, zero API cost) with Vietnamese full-text search; a CRM-sourced allow-list and topic pinning prevent hallucinated courses.
• ▸Instrumented every LLM call (tokens, cost, latency, errors) and migrated providers on measured A/B evidence.
• ▸Deployed on-prem inside the client's VPN-only LAN under systemd, integrated with the internal CRM, hardened with auto-restart and a 9-suite E2E test gate.

Accounting Application Developer

Owned: full backend, frontend and database design, delivered jointly with one other engineer.

• ▸Built a VAS-compliant ERP (.NET 10, PostgreSQL, React) in daily production use by 20 accountants; authored the SRS and 164 regulatory test cases it is audited against (audit passed, in trial period).
• ▸Shipped double-entry ledger logic and a full audit trail through Docker + AWS EC2 + GitHub Actions CI/CD, ahead of the 1 Jan 2026 regulatory deadline.

AI Team Lead, Computer Vision

Owned: all AI work (detection models, inference pipeline, LLM reporting) and technical documentation; advised the backend, frontend and mobile engineers.

• ▸Led all AI development on IPBMS, a real-time fall/seizure detector on live RTSP streams (YOLO pose estimation plus LLM incident reports); designed a 5-frame temporal validation strategy to suppress single-frame false alarms.
• ▸Deployed and operated on-premise, live on 2 production cameras.

AI Agent Engineer

Owned: everything, from agent logic to the self-hosted server it still runs on.

• ▸Built a real-time voice ordering agent (LiveKit, TTS) in daily production use, with hand-built multi-LLM failover and a self-learning RAG loop.
• ▸Rolled out in phases (text → voice → real-time voice); self-hosted and still operates the stack.

Freelance Software Engineer, Team Lead

Owned: AI trading logic, AI chatbot and trading-automation backend; one backend and one frontend engineer on the rest.

• ▸Led a 3-engineer team from zero to a production AI trading platform in 20 days, setting the architecture and delivery plan and owning AWS deployment (PostgreSQL) through go-live.

Platform Engineer (personal infrastructure)

Owned: design and operation of a multi-site Kubernetes cluster that hosts my public sites, including this one.

• ▸k3s across cloud VPS nodes and an ARM64 Orange Pi at home, joined over a Tailscale mesh with ACLs separating personal and client machines.
• ▸Fully GitOps: an ArgoCD app-of-apps syncs every workload from a Git repo; in-cluster container registry backed by MinIO; NFS StorageClass on a Synology NAS.
• ▸Observability with Grafana, Mimir, Loki and Alloy (node, Docker, GPU and NAS/SNMP metrics) and alert rules managed as code.
• ▸Public traffic enters through Cloudflare Tunnel — no inbound ports opened on the nodes.

IT Support Technician

Supported university-wide IT operations across Academic Affairs, Examinations, HR, Accounting and Administration for cohorts K15–K20: hardware, networks, classroom and exam systems, user accounts, and onboarding new student IT support members.