Bao Trung Le Nguyen
IT Infrastructure · DevOps · Consulting
München · +49 171 7540049 · baotrung.lenguyen@btln.de
btln.de · linkedin.com/in/bao-trung-le-nguyen
Profile
IT infrastructure specialist focused on endpoint management, DevOps and self-hosted infrastructure. Connects legacy and new systems into dependable solutions, automates their operation and translates between engineering and decision-making. Experience from the Siemens corporate environment and from single-handedly building a communication platform for more than 2,000 active users.
Languages
GermanNative
EnglishC2 - business fluent
Core competencies
Advisory & MethodsAgile MethodsIT ConsultingEvent ManagementTechnical SupportProject ManagementSQL & DatabasesTechnical Documentation
ArchitectureDistributed SystemsHigh AvailabilityIT ArchitectureMicroservices & Cloud-nativeService DesignSystem Integration
Infrastructure & DevOpsApp ManagementAutomationCI/CDData BackupDevOps & AutomationIT InfrastructureIoTConfiguration ManagementLoad BalancingMobile Device ManagementMultimediaSelf-HostingTelephony & Communication InfrastructureVirtualisation
Security & NetworkingCybersecurityData ProtectionDNSIAM & Identity ManagementCryptography & EncryptionNetworking & SecurityVPN
Experience
- Volunteer work on IT architecture, DevOps and self-hosted infrastructure for Mensa in Deutschland e.V. and Mensa International, from requirements through build to ongoing operation.
- Application integration into existing infrastructure, cross-platform MDM with AirWatch and Intune, multi-region high-availability operations, and internal process tooling built on the Microsoft Power Platform.
- Primary IT contact for board members and senior executives, responsible for all their IT requirements under the highest security and confidentiality standards.
Education
- Part-time Computer Science degree completed alongside full-time work at Siemens, graduating with a final grade of 1.7. Bachelor's thesis graded 1.0, covering a distributed, encrypted P2P filesystem with deduplication built in Go.
- Three-year apprenticeship in system integration covering networking, server operations, databases, and IT security.
Selected projects
- Setup and sole operation of the internal Matrix chat system for Mensa in Deutschland e.V., with over 2,000 members on board since the official launch in March 2024.
- Concept, development, and operation of this bilingual website, which presents my work to prospective clients and hiring managers at the same time. It is self-hosted, runs without any third-party services, and is built so that both HR and the technical reviewers can quickly form a clear picture of how I work.
- Custom-built digital signage system for check-in at the Mensa annual meeting, built on Raspberry Pi Zero 2W and LED matrix displays with wireless live control through a custom-developed interface.
- Concept paper for implementing an end-to-end encrypted password manager in REI3, designed to keep credentials secure even if the server is compromised, while still supporting password sharing and auditing across teams.
- From requirements gathering through solution evaluation to build and operation of a Docusaurus documentation platform for the International Volunteering Network (IVN) of Mensa International.
- Built and operating a reverse proxy in front of the member database (db.mensa.de) of Mensa in Deutschland e.V., with a controlled migration to the target solution. The average response time dropped from around 2 s to 0.2 s, and eleven of every twelve requests are rejected at the proxy.
- Infrastructure and DevOps work for Biber, the camp supervisors register for the Mensa Kids & Juniors Feriencamps, covering CI/CD pipeline setup, server provisioning, and ongoing operations as the technical foundation for the application's development.
- Building and operating a self-hosted video conferencing platform based on Jitsi for the members of Mensa in Deutschland e.V. with an integrated whiteboard and an access model where only members can start conferences but may invite anyone they like, including non-members. Several hundred members use it each week, and it is provided free of charge.
- Submission portal for company-wide app distribution, built with Microsoft Power Automate and SharePoint as a virtual database in place of a SQL solution. Supports both initial submissions and incremental updates where only changed items need to be re-entered.
- Ownership of the worldwide approved device catalogue for all Siemens employees, covering direct vendor and manufacturer engagements (Apple, Google, Samsung), strategic budget and demand balancing, and a custom-built tool for bi-monthly portfolio updates.
- Tool for automated validation and re-signing of iOS and Android app packages, developed and operated as central app manager at Siemens and independently used and extended by several team members until 2025.
- Bachelor's thesis (Grade 1.0) at FOM University on a Go-implemented prototype of a distributed, encrypted P2P storage system with content-based replication and deduplication.
- Custom PHP/MySQL membership management system for a diving club, with Excel import and export, club-specific business logic, and GDPR-compliant data handling which has been developed and operated end-to-end for six years.
Engagement and interests
SkiingAdvanced recreational skier on alpine slopes, going out from time to time.
Scuba DivingCMAS** Silver
Build a CV
Select the relevant experience and skills, or start from a role template.
Open to new challenges
Combine roles
Skills
Languages
Personal
Advisory & Methods
Architecture
Infrastructure & DevOps
Security & Networking
Projects
MinD-Chat Project Lead
Setup and sole operation of the internal Matrix chat system for Mensa in Deutschland e.V., with over 2,000 members on board since the official launch in March 2024.
This Website
Concept, development, and operation of this bilingual website, which presents my work to prospective clients and hiring managers at the same time. It is self-hosted, runs without any third-party services, and is built so that both HR and the technical reviewers can quickly form a clear picture of how I work.
Annual Gathering Digital Signage System
Custom-built digital signage system for check-in at the Mensa annual meeting, built on Raspberry Pi Zero 2W and LED matrix displays with wireless live control through a custom-developed interface.
E2EE Concept for REI3 Password Management
Concept paper for implementing an end-to-end encrypted password manager in REI3, designed to keep credentials secure even if the server is compromised, while still supporting password sharing and auditing across teams.
Documentation platform for the Mensa International Volunteering Network
From requirements gathering through solution evaluation to build and operation of a Docusaurus documentation platform for the International Volunteering Network (IVN) of Mensa International.
Reverse Proxy for db.mensa.de
Built and operating a reverse proxy in front of the member database (db.mensa.de) of Mensa in Deutschland e.V., with a controlled migration to the target solution. The average response time dropped from around 2 s to 0.2 s, and eleven of every twelve requests are rejected at the proxy.
Biber - Camp Supervisor Register
Infrastructure and DevOps work for Biber, the camp supervisors register for the Mensa Kids & Juniors Feriencamps, covering CI/CD pipeline setup, server provisioning, and ongoing operations as the technical foundation for the application's development.
Self-hosted Video Conferencing System
Building and operating a self-hosted video conferencing platform based on Jitsi for the members of Mensa in Deutschland e.V. with an integrated whiteboard and an access model where only members can start conferences but may invite anyone they like, including non-members. Several hundred members use it each week, and it is provided free of charge.
App Distribution Portal
Submission portal for company-wide app distribution, built with Microsoft Power Automate and SharePoint as a virtual database in place of a SQL solution. Supports both initial submissions and incremental updates where only changed items need to be re-entered.
Global Siemens-Device-Portfolio-Management
Ownership of the worldwide approved device catalogue for all Siemens employees, covering direct vendor and manufacturer engagements (Apple, Google, Samsung), strategic budget and demand balancing, and a custom-built tool for bi-monthly portfolio updates.
Automated App-Signing
Tool for automated validation and re-signing of iOS and Android app packages, developed and operated as central app manager at Siemens and independently used and extended by several team members until 2025.
Distributed Encrypted P2P Storage System with Deduplication
Bachelor's thesis (Grade 1.0) at FOM University on a Go-implemented prototype of a distributed, encrypted P2P storage system with content-based replication and deduplication.
Member Database for Diving Club
Custom PHP/MySQL membership management system for a diving club, with Excel import and export, club-specific business logic, and GDPR-compliant data handling which has been developed and operated end-to-end for six years.
Career
Volunteer IT Architecture and Infrastructure
Volunteer work on IT architecture, DevOps and self-hosted infrastructure for Mensa in Deutschland e.V. and Mensa International, from requirements through build to ongoing operation.
Information Technology Architect
Application integration into existing infrastructure, cross-platform MDM with AirWatch and Intune, multi-region high-availability operations, and internal process tooling built on the Microsoft Power Platform.
Bachelor of Science, Computer Science
Part-time Computer Science degree completed alongside full-time work at Siemens, graduating with a final grade of 1.7. Bachelor's thesis graded 1.0, covering a distributed, encrypted P2P filesystem with deduplication built in Go.
P&I Consultant
Primary IT contact for board members and senior executives, responsible for all their IT requirements under the highest security and confidentiality standards.
Apprenticeship as IT Specialist for System Integration
Three-year apprenticeship in system integration covering networking, server operations, databases, and IT security.