Duy Hai Doan

- Co-design an MCP Server and MCP Client using Spring AI framework to expose REST API endpoint to end-user - Design Powershell scripts to automate/configure the creation of GitHub repositories with pre-validated rules - Design and configure GitHub Actions workflows to enforce Pull Request requirements for the development team - Create PowerShell scripts to configure and export PowerBI reports to the Cloud PowerBI service - Automate Terraform plan and apply for existing production workload with GitHub Actions and Powershell scripts based on specific change detection - Develop Data Cockpit Web application using VueJS 3, Vuetify 3, Okta authentication and Microsoft MSAL Js - Implement double OIDC authentication with Okta and ForgeRock in the backend using Spring Securities - Develop Data Self-Service backend using Java 21, Spring Boot and Azure Java SDK - Create Data Plane tests for Azure EventHub, Data Explorer, EventGrid, Stream Analytics, CosmosDB, Postgresql Flexible Server, SQL Database and Storage Account services - Enhance existing Terraform module for AKS to use Azure CNI Overlay network option - Create Terraform module for Azure EventGrid, Azure EventHub and Azure Data Explorer (Kusto cluster) - Create Terraform templates to deploy DATA stacks using GitHub Actions workflows and Powershell scripts - Automate DAILY Terraform module non regression testing using GitHub Actions workflows and Powershell scripts - Bootstrap Data Analytics platform V2 in Azure using Terraform, GitHub Actions workflows and Powershell scripts

helped me get this job

Short term expertise job - set up Cassandra cluster - write installation and maintenance procedures - analyse data model and preform some benchmarks to tune the server - give recommendations on data model to improve performance

·       Bootstrap a secured Azure Landing Zone from scratch with the Hub & Spoke architecture using Terraform, GitHub Actions workflows and Powershell scripts ·       Configure the IP address network plan ·       Configure the VPN Gateway with Point-to-Site connectivity to the landing zone ·       Configure the Azure Firewall to filter any incoming and outgoing network traffic ·       Deploy and automate the configuration of an Azure Application Gateway with SSL support to expose internal application on the Internet ·       Configure the Application Gateway WAF policy ·       Deploy and configure an AKS cluster in the hub subscription to support Github Actions self-hosted runners ·       Deploy CoreDNS pod in the AKS cluster to act as DNS resolver for private endpoints in the landing zone ·       Deploy Databricks workspace and configure its connectivity in the Spoke subscription ·       Deploy Azure Web App in the Spoke subscription Deploy Azure AI Services (Cognitive Services and AI Foundry) in the Spoke subscription

Cloud DevSecOps Architect. Help Eramet to perform their Move-to-Cloud strategy - Test the VEEAM Kasten solution for AKS backup - Develop Terraform Modules to automate AKS cluster Backup using Azure Backup Vault - Automate unit tests of Terraform modules using Azure DevOps and Powershell script - Implement multi-tenant AKS clusters - Upgrade AKS AAD Pod Identity to Azure Workload Identity - Implement North/South routing in Azure with Azure Firewall and Route tables - leverage Azure Batch for machine learning scripts execution - automation new projects creation on Azure DevOps using REST APIs and Powershell modules - develop a Terraform module to manage private network access for Azure PurView - develop a Terraform module to manage Azure Firewall Policies - test Harbor as a central Docker image management tool for Eramet, integrated with Azure Container Registry - create release process for custom Terraform modules on Azure DevOps - create terraform Templates for Landing Zones in Azure - develop custom Azure Managed Application to provide a self-service VDI creation experience - secure AKS cluster deployment with Terraform and Azure DevOps - configure AAD Pod Identity and KeyVault secret store CSI driver for AKS cluster - configure Velero charts to perform backup/restore of container and Azure disks - setup Azure policies to secure resources and audit discrepancies - create and maintain deployment pipelines using Azure DevOps - develop Terraform modules for AKS and other Azure services - Azure network and security architecture proposal for new project - secure Azure App Service using VNet integration

FrontEnd development to expose cloud features as self-services: - ReactJS - Recoil - React Boopstrap 4 Enforce security on backend application with applicative RBAC model based on Azure AD groupes Automated deployment of AKS using: - Azure queue - Terraform - AKS - Azure SDK Design and implement a Datalake migration from OnPrem Hadoop (HortonWorks stack) to Azure HDInsight: - automation of Azure resources creation using ARM Template and Java SDK - creation and handling of access control using Azure Data lake Storage Gen2 API - co-develop a Java SDK to expose Azure Data Lake Storage Gen2 API - Azure resources management using Tags - creating a workflow to orchestrate resources deployment using Azure Storage Queue API and a distributed state machine - deployment of application in Azure Kubernetes Service Previously I have tested the migration of all the Big Data Hadoop workload (HortonWorks stack) from on premise to AWS cloud using HortonWorks CloudBreak - automate installation of CloudBreak - automate installation of Datalake central cluster in AWS - automate installation of client cluster in AWS - manage access control and authorizations using IAM policies and S3 bucket policies - manage applicative authorizations using Apache Ranger

Advisor for Paylead on their Cassandra/Spark/Solr stack: - run and maintain the DSE cluster - architecture study for an HA Postgresql cluster

Working on all Big Data and cloud-based projects. My skills: Programming language: - Java (expert) - Scala (medium) - Javascript ES6 (medium) - Python (medium) Technologies - Apache Cassandra (expert) - Datastax Enterprise (expert) - Apache Zeppelin (advanced) - Apache Hadoop (medium) - Vue.JS 2 (medium) - AWS cloud (medium) AWS stack: - VPC/Ec2 - S3 - DynamoDB - API Gateway - Lambda - AppSync - RDS - System Manager - CloudFront - Route 53 - IAM Azure: - VNet - VM

As a technical advocate and solution engineer/solution architect, I spend my time between : - technical presentations/meetups on Cassandra - delivering proofs of concepts for prospects and customers - coding on open source projects to support the community - on-site troubleshooting for customers - domain expertise on Solr and Apache Tinkerpop **Recurrent tasks** - public conferences (Devoxx, Apache Big Data Con ...) - Pre-sales proof of concept - Cassandra Data modeling & performance tuning consulting - Cassandra use stories performance benchmarking - Blog posting about Apache Cassandra - Open-source development on www.achilles.io - Contribution to Apache Zeppelin

Freelance Cassandra Expert for Libon project at Orange - pair programming to develop the back end service for Libon - stress tess with Gatling (Scala) - design function test scenarios with Cucumber (Ruby) - frontend admin web-app with AngularJS - contribute to analytics Hadoop platform evolution **** Cassandra topic **** - design Cassandra data model to optimize performance - Cassandra data migration from Thrift to CQL3 - server parameters tuning - develop Achilles, an persistence manager for Cassandra (https://github.com/doanduyhai/achilles) Planet Cassandra interview: http://planetcassandra.org/blog/post/oranges-mobile-communication-app-says-goodbye-oracle-hello-to-apache-cassandra NoSQL (Cassandra), TDD, Scrum, Ruby, Cucumber, AngularJS, Hadoop

Architecture: tâche transverse, étude et évolution de l’architecture technique de l’application • Ajout d’une fonctionnalité d’auto-login pour le server CAS du SSO • Ajout d’un Signe Sign Out applicatif • POC d’une Long Session pour Hibernate avec Spring • Génération des certificats pour serveurs, installation et configuration de mécanisme d’authentification mutuelle sous Tomcat • POC ElasticSearch & MongoDB pour accélérer un écran de recherche Production Monitoring: développer une page web HTML 5 pour surveiller l’état des instances Tomcat de prod • Utilisation de Twitter Bootstrap + LESS CSS pour la vue • jQuery pour faire des appels AJAX Cross Domain Request Search Enhancement : améliorer le temps de réponse de la fonctionnalité « Request Search » • Analyse du plan d’exécution Oracle • Création de vues matérialisées • Création d’index composites pour les colonnes nullables. SWORD: Découpage de l’application en 3 applications indépendantes : LSO, CWF & Portal • Re-factoring du code Java couche par couche (persistence, business, présentation) • Nettoyage et découpage des fichiers de configuration Spring pour découpler les dépendances binaires • Création de nouveaux Web Services avec authentification mutuelle par certificats pour les communications synchrones inter-application • Découpage de la base de données en 3 schémas distincts avec des rôles pour gérer les droits d’accès sur les tables • Ajout d’une queue JMS pour les notifications asynchrones • Modification du mapping Hibernate des entités existantes • Réorganisation des projets Maven pour une dépendances binaires et non plus de code Lien LSO-IC: Faire communiquer deux applications pour la réconciliation des deals • Mise en place d’un lien applicatif basé sur JMS (Tibco EMS) • Création d’un mini moteur de règle avec design pattern Visitor modifé • Réduction logique d’une matrice de règle bidimensionnelle • Gestion de contrainte transactionnelle relaxée pour le couple JDBC/JMS (non JTA)

• Support applicatif de niveau 3 • Optimisation applicative pour la performance et la haute disponibilité • Installation et paramétrage de l’application sur environnements de test et de production • Rédaction de spécifications techniques et de documents de maintenance applicative • Réalisation de maquettes (Proof of Concepts) pour l’avant-vente • Reverse-engineering de code et développement de patchs • Formation technique des clients finaux sur le produit Businesss Bridge • Développement de tableaux de bord avec le framework JSF (Java Server Faces) & Spring • Développement applicatif avec le langage propriétaire Business Bridge • Expériences à l’international : Portugal (2 semaines cumulées)

• Intégration de logiciels sur différentes plateformes (Linux, Unix, Windows) utilisant les Web Services (SOAP-RPC) • Développement, compilation et tests sur Java/Visual Basic avec Eclipse. Reverse Engineering à partir du code source vers les diagrammes fonctionnels. Patch logiciel en Java • Rédaction de cahiers de tests. Tests d’usine et tests sur site • Support technique 24h/24 de second niveau pour les opérateurs télécoms • Requêtes Oracle SQL avancées pour créer des tableaux de reporting • Tests d’intégration en usine et sur site • Formation des utilisateurs finaux à l’utilisation et à l’administration des plateformes logicielles • Expériences internationales : Espagne (1 semaine), Nigéria (4 semaines), Kenya (2 semaines), Egypte (3 semaines)