Le Tran Minh Dat

Enterprise client (Banking) · Outsourced contract · 2-engineer team

Owned: architecture and the large majority of the custom layer, including its test suite and technical documentation.

• Architected a bank-wide LLM gateway on LiteLLM as the single control point between every internal application and major LLM providers; isolated all bank-specific code in a separate 95-file extension layer with a single unlock hook into the core, so upstream releases merge cleanly.
• Delivered enterprise access control: per-user, per-team and per-project budgets, SSO with the bank's identity provider, role-based permissions and an immutable audit log, plus bidirectional guardrails that mask or block phone numbers, national IDs, account numbers and cloud credentials.
• Engineered cost governance: per-call spend reconciled against actual AWS invoices and tagged for department-level allocation; automatic model failover, budget-aware downgrade to cheaper models, and OAuth-based access to developer AI subscriptions.

Hướng Nghiệp Á Âu · Freelance · Solo, end-to-end

Owned: everything — backend, frontend, prompt pipeline, data model, infrastructure and deployment.

• Built a 24/7 RAG enrollment advisor for a 19-branch academy (100,000+ learner base), handling 202 leads and ~1,800 messages to date, with an advisor cockpit for human-in-the-loop review.
• Hybrid retrieval fuses local ONNX embeddings (CPU, zero API cost) with Vietnamese full-text search; a CRM-sourced allow-list and topic pinning prevent hallucinated courses.
• Instrumented every LLM call (tokens, cost, latency, errors) and migrated providers on measured A/B evidence.
• Deployed on-prem inside the client's VPN-only LAN under systemd, integrated with the internal CRM, hardened with auto-restart and a 9-suite E2E test gate.

Enterprise client (Education) · Freelance · 2-engineer team

Owned: full backend, frontend and database design, delivered jointly with one other engineer.

• Built a VAS-compliant ERP (.NET 10, PostgreSQL, React) in daily production use by 20 accountants; authored the SRS and 164 regulatory test cases it is audited against (audit passed, in trial period).
• Shipped double-entry ledger logic and a full audit trail through Docker + AWS EC2 + GitHub Actions CI/CD, ahead of the 1 Jan 2026 regulatory deadline.

Whammy Tech · Contract · Led 4 engineers

Owned: all AI work (detection models, inference pipeline, LLM reporting) and technical documentation; advised the backend, frontend and mobile engineers.

• Led all AI development on IPBMS, a real-time fall/seizure detector on live RTSP streams (YOLO pose estimation plus LLM incident reports); designed a 5-frame temporal validation strategy to suppress single-frame false alarms.
• Deployed and operated on-premise, live on 2 production cameras.

Ăng Ê Coffee · Contract · Solo, self-hosted

Owned: everything, from agent logic to the self-hosted server it still runs on.

• Built a real-time voice ordering agent (LiveKit, TTS) in daily production use, with hand-built multi-LLM failover and a self-learning RAG loop.
• Rolled out in phases (text → voice → real-time voice); self-hosted and still operates the stack.

NEURADAO · Led 3 engineers

Owned: AI trading logic, AI chatbot and trading-automation backend; one backend and one frontend engineer on the rest.

• Led a 3-engineer team from zero to a production AI trading platform in 20 days, setting the architecture and delivery plan and owning AWS deployment (PostgreSQL) through go-live.

Cicca Fleet · Self-hosted k3s homelab

Owned: design and operation of a multi-site Kubernetes cluster that hosts my public sites, including this one.

• k3s across cloud VPS nodes and an ARM64 Orange Pi at home, joined over a Tailscale mesh with ACLs separating personal and client machines.
• Fully GitOps: an ArgoCD app-of-apps syncs every workload from a Git repo; in-cluster container registry backed by MinIO; NFS StorageClass on a Synology NAS.
• Observability with Grafana, Mimir, Loki and Alloy (node, Docker, GPU and NAS/SNMP metrics) and alert rules managed as code.
• Public traffic enters through Cloudflare Tunnel — no inbound ports opened on the nodes.

University IT · Part-time

Supported university-wide IT operations across Academic Affairs, Examinations, HR, Accounting and Administration for cohorts K15–K20: hardware, networks, classroom and exam systems, user accounts, and onboarding new student IT support members.