Building production software from business requirements to deployment and operations.
I am a software engineer focused on backend systems, production infrastructure, automation and cross-platform applications. My strongest work is software that has to survive real operational constraints: permissions, auditability, spreadsheet-heavy business workflows, deployment, monitoring, device integration and support for real users.
I am comfortable owning a feature end to end — clarifying the workflow, designing the data model and API, implementing the client, testing it, deploying it and troubleshooting it in production. I use AI-assisted engineering tools for review, refactoring, documentation and architecture exploration, while keeping implementation and technical decisions verifiable in the repository.
Current engineering focus: secure-by-default backend systems · RBAC and auditability · enterprise software · self-hosted infrastructure · CI/CD · mobile and event technology.
| Area | Technologies |
|---|---|
| Backend | TypeScript / Node.js, Express, NestJS, Java / Spring Boot, C# / ASP.NET Core, Python / FastAPI |
| Data | PostgreSQL, Prisma, Redis, PostGIS, SQL Server, EF Core, Flyway |
| Web & Mobile | React, Vite, Next.js, Flutter / Dart, React Native, Swift integration |
| Infrastructure | Docker / Compose, Linux, Caddy, Nginx, Cloudflare Tunnel / Workers, Coolify, systemd, Proxmox |
| Quality & Ops | GitHub Actions, Vitest / Jest, Playwright, k6, Maestro, health checks, structured logging, runbooks |
Quản Lý Báo Giá — production enterprise platform
Internal quotation, HR and project-management software used every working day by two companies. The platform uses TypeScript / Express, PostgreSQL / Prisma and Redis, with five-role server-side RBAC, SSE realtime updates, background workers, automated tests and Docker-based deployment.
The document engine works directly with OOXML inside real company .xlsx templates so exported quotations preserve exact formatting, merged ranges and print layout instead of approximating the workbook from scratch.
358 commits · ~22k LOC TypeScript · 28 Prisma models · 141 HTTP endpoints · 30 test files
Hôm Nay Ăn Gì? — solo full-stack/mobile project
Flutter + NestJS application backed by 14,319 real restaurant records collected from OpenStreetMap and queried with PostgreSQL/PostGIS. I built the mobile app, backend, data-ingestion pipeline, infrastructure and CI/CD.
The deployment pipeline targets both a Linux server and a macOS build machine for signed iOS builds; public traffic is routed through Cloudflare Tunnel instead of exposing the origin directly.
Flutter · NestJS · PostGIS · Redis · Mapbox · GitHub Actions
LUMA Event Platform — Java / Flutter / React capstone
Event ticketing and management platform with Spring Boot 3 / Java 21, a Flutter attendee app and React organiser/admin consoles. Features include interactive seat maps, ticket transfer, Stripe payments and payouts, WebSocket chat, FCM notifications and Flyway migrations.
University capstone, team of 3 — I authored 106 of 140 commits across backend, Flutter and React.
~452 REST endpoints · 94 JPA entities · 75 controllers · 42 Flutter screens
LifeOS AI — AI-assisted personal life OS
Bare React Native + NestJS/Prisma monorepo with Smart Capture, planner, finance, health/mood logging and assistant memory. Security work includes AES-256-GCM encryption for user-supplied AI keys, Argon2 credentials, rotating refresh tokens and production health checks.
127 automated tests · Redis / BullMQ · Docker · Maestro · CI
SK Check-in — .NET event check-in system
ASP.NET Core 8 / EF Core system for event and guest management, HMAC-signed QR check-in, Excel/CSV import, realtime SignalR dashboards and role-based access. The repository includes deployment, operations, security and secret-rotation documentation.
RealmForge VN — Java server engineering & operations
Vietnamese-history RPG Minecraft project with custom Java/Paper plugins, PostgreSQL, Redis, cross-play, systemd services, monitoring and CI/CD. Useful as a public example of combining Java development with Linux operations and observability.
- Backend & architecture: modular service boundaries, validation, authorization, idempotency, realtime delivery and maintainable data models.
- Security: least privilege, server-side authorization, secret hygiene, session/token lifecycle, auditability and secure deployment defaults.
- Automation: document generation, OOXML/Excel workflows, release/update pipelines and operational tooling.
- Infrastructure: self-hosting, private networking, containers, reverse proxies, tunnels, monitoring, backup and recovery.
- Event technology: mobile-to-PC workflows, local discovery, printing, computer vision and systems that must work reliably on-site.
- Advanced Diploma in Software Engineering — Aptech Computer Education, ACE-THUDUC-1-FPT — Distinction, completed March 2026.
- Techwiz 6 — Certificate of Participation, Aptech global tech-based competition, 2025.
- GitHub: @ndh0408
- Email: huy04082000@gmail.com
Repository claims above are intentionally tied to public source code and project documentation so they can be inspected rather than treated as résumé-only statements.


