← Back to site Open in browser → Ctrl+P → Save as PDF · Recommended: A4, No margins, Background graphics ON
Long Ho
DevSecOps & CI/CD Platform Engineer
longhn0710@gmail.com +84 332 792 848 Ho Chi Minh City, Vietnam linkedin.com/in/longhn0710 github.com/devsecopslonghn drgdevlab.com
Summary

DevSecOps / CI-CD Platform Engineer with 4 years of experience across banking, insurance, and enterprise environments. Specializes in reusable delivery platforms, secure software supply chains, OpenShift/Kubernetes, release engineering, and infrastructure automation. One of a 4-person team supporting CI/CD for ~400 source repositories at Sacombank, with direct contribution to the first successful Temenos T24 R25 core banking upgrade in Vietnam and active maintenance of the Jenkins Ansible Tower plugin in the Jenkins open-source ecosystem.

Experience
DevOps Engineer  ·  Sacombank
Nov 2024 – Present · Ho Chi Minh City
Core Banking · Open Banking · Payment Systems
  • Contributed to Sacombank's successful Temenos T24 R25 production upgrade — the first successful T24 R25 core banking upgrade in Vietnam — through CI/CD automation, Helm-based modular deployment, release standardization, and production go-live support (upgrade window reduced from 2 weeks in R17/2017 to 3 days in R25/2026).
  • Built the T24 R25 Transact umbrella Helm architecture on OpenShift with reusable templates and 18 component/workload charts, supporting environment-specific delivery across Develop, SIT, UAT, Staging, DR, and Production.
  • Designed high-availability release patterns across OpenShift and traditional middleware using rolling, canary, blue-green, and controlled node-by-node deployment strategies; redesigned JBoss AML server groups and load-balancer flow to remove avoidable deployment downtime.
  • Architected branch-based CI/CD strategy with ITSM-gated production deployments and Microsoft Teams real-time notifications: develop → DEV; release/x.y → SIT; Git tag → QA email with one-click approval; master → ITSM change ticket → Jenkins → Ansible.
  • Owned CI/CD pipeline onboarding for new projects: structured intake (repo, namespace, language, build version) → standard templates for OCP/WebSphere/JBoss, or researched and built from scratch — e.g. independently implemented full CI/CD and Ansible deployment logic for WSO2 API Manager.
  • One of 4 engineers supporting CI/CD for ~400 source repositories across OpenShift microservices, WebSphere, JBoss, and other enterprise application platforms; integrated Coverity, SonarQube, Black Duck, Aqua, OWASP ZAP, Zimperium, Katalon, and approval gates into delivery workflows.
  • Improved operational reliability through Jenkins workspace cleanup automation, monitoring-driven capacity management, release health checks, rollback design, and observability with Grafana, Prometheus, Kibana, Datadog, and Zabbix.
  • Participated in the 2026 ISO 27001:2022 internal audit for the DevOps/CI-CD scope, supporting reviews of pipeline controls, release governance, security processes, and audit evidence.
Monitoring DevOps Engineer  ·  Accenture
Jul 2024 – Oct 2024 · Ho Chi Minh City
Clients: LVMH Louis Vuitton · OVH Cloud
  • Monitored enterprise infrastructure for global clients including LVMH Louis Vuitton and OVH Cloud using Datadog and Zabbix.
  • Built and maintained alert logic pipeline: aggregated incidents from monitoring stack and auto-created structured tickets for partner response teams.
DevOps Engineer  ·  DXC Technology Vietnam
Sep 2022 – Jul 2024 · Ho Chi Minh City
Clients: Allianz Philippines · AIA · PSMBFI
  • Functioned as primary DevOps implementer for enterprise insurance clients on AWS — effectively sole technical executor for end-to-end CI/CD pipeline delivery across Allianz Philippines, AIA, and PSMBFI.
  • Completed critical platform delivery for Allianz Philippines within 100 days, receiving formal recognition for delivery quality and timeliness.
  • Reduced AWS non-production environment costs by 40% through resource monitoring, instance rightsizing, auto-scaling policies, and spot instance adoption across dev, FT, UAT, and staging environments.
  • Provisioned full AWS stack using Terraform: ECS clusters, API Gateway, Cognito (auth), IAM roles/policies, EC2, S3, RDS — end-to-end infrastructure for regulated financial services clients; automated configuration management with Ansible and Groovy-based Jenkins pipeline scripts.
  • Built artifact management workflows with Nexus and JFrog Artifactory; implemented CI/CD compliance gates for regulated financial services clients.
Technical Skills
CI/CD Jenkins, Jenkins Pipeline, Groovy Shared Pipeline/Stage, GitLab CI, GitHub Actions, Git, MR governance, GitOps Container & Orchestration OpenShift OCP, Kubernetes, Docker, Helm, Argo CD, OpenTelemetry annotations Automation & IaC Ansible, Terraform, Bash, Python, PowerShell, Groovy Cloud (AWS) EC2, S3, RDS, ECS, Auto Scaling, Spot Instances Database CI/CD Flyway, Custom Migration & Backup Scripts Monitoring & Logging Grafana, Prometheus, Datadog, Zabbix, Kibana Security Coverity, SonarQube, Black Duck, Aqua, OWASP ZAP, Zimperium Artifact Management Nexus, JFrog Artifactory App Servers WebSphere, JBoss, WebLogic, IIS, WSO2, Apache Tomcat Banking Systems Temenos T24 R25, Core Banking, Open Banking, Payment Systems, ppc64le/QEMU builds
Education
B.Sc. Information Technology
University of Information Technology (UIT) — Ho Chi Minh City
2022
Certifications
AWS Partner: Accreditation (Technical) — Amazon Web Services, May 2024
Projects
T24 R25 Transact Delivery Platform — Umbrella Helm architecture with reusable templates, 18 workloads, 6 environments, resource controls, image promotion, and CI/CD integration for Core Banking delivery
Jenkins Ansible Tower Plugin — Maintainer in the Jenkins open-source ecosystem; recent work spans AAP/AWX polling resilience, Jenkins compatibility, diagnostics/logging, Job DSL compatibility, security scanning, and regression coverage · github.com/jenkinsci/ansible-tower-plugin
Secure Delivery Lab — Reusable GitHub Actions for Java/Node/Python and Helm validation, with immutable image practices, SBOM/provenance design, Trivy/Gitleaks scanning, and GitOps-oriented delivery contracts