Bao Trung Le Nguyen
IT Architecture · DevOps · Consulting
München · +49 171 7540049 · baotrung.lenguyen@btln.de
btln.de · linkedin.com/in/bao-trung-le-nguyen
Profile
IT architect focused on endpoint management, DevOps and self-hosted infrastructure. Connects legacy and new systems into dependable solutions, automates their operation and translates between engineering and decision-making. Experience from the Siemens corporate environment and from single-handedly building a communication platform for more than 2,000 active users.
Languages
German Native
English C2 – Near-native
Core competencies
Advisory & Methods Agile MethodsIT ConsultingEvent ManagementTechnical SupportProject ManagementSQL & DatabasesTechnical Documentation
Architecture Distributed SystemsHigh AvailabilityIT ArchitectureMicroservices & Cloud-nativeService DesignSystem Integration
Infrastructure & DevOps App ManagementAutomationCI/CDData BackupDevOps & AutomationIT InfrastructureIoTConfiguration ManagementLoad BalancingMobile Device ManagementMultimediaSelf-HostingTelephony & Communication InfrastructureVirtualisation
Security & Networking CybersecurityData ProtectionDNSIAM & Identity ManagementCryptography & EncryptionNetworking & SecurityVPN
Experience
- I design, build and operate infrastructure and architecture solutions independently, from requirements through to ongoing operations, mostly for associations and nonprofit organisations.
- Application integration into existing infrastructure, cross-platform MDM with AirWatch and Intune, multi-region high-availability operations, and internal process tooling built on the Microsoft Power Platform.
- Primary IT contact for board members and senior executives, responsible for all their IT requirements under the highest security and confidentiality standards.
Education
- Part-time Computer Science degree completed alongside full-time work at Siemens, graduating with a final grade of 1.7. Bachelor's thesis graded 1.0, covering a distributed, encrypted P2P filesystem with deduplication built in Go.
- Three-year apprenticeship in system integration covering networking, server operations, databases, and IT security.
Selected projects
- Setup and sole operation of the internal Matrix chat system for Mensa in Deutschland e.V., with over 2,000 members on board since the official launch in March 2024.
- Concept, development, and operation of this bilingual website, which presents my work to prospective clients and hiring managers at the same time. It is self-hosted, runs without any third-party services, and is built so that the technology itself already shows how I work.
- Custom-built digital signage system for check-in at the Mensa annual meeting, built on Raspberry Pi Zero 2W and LED matrix displays with wireless live control through a custom-developed interface.
- Concept paper for implementing an end-to-end encrypted password manager in REI3, designed to keep credentials secure even if the server is compromised, while still supporting password sharing and auditing across teams.
- From requirements gathering through solution evaluation to build and operation of a Docusaurus documentation platform for the International Volunteering Network (IVN) of Mensa International.
- Built and operating a reverse proxy in front of the member database (db.mensa.de) of Mensa in Deutschland e.V., with a controlled migration to the target solution, shorter load times, and noticeably reduced backend load.
- Infrastructure and DevOps work for Biber, the camp supervisors register for the children's and youth camps of Mensa in Deutschland e.V., covering CI/CD pipeline setup, server provisioning, and ongoing operations as the technical foundation for the application's development.
- Building and operating a self-hosted video conferencing platform based on Jitsi for the members of Mensa in Deutschland e.V., with an integrated whiteboard and an access model where only members can start conferences but may invite anyone they like, including non-members. Several hundred members use it each week, and it is provided free of charge.
- Submission portal for company-wide app distribution, built with Microsoft Power Automate and SharePoint as a virtual database in place of a SQL solution. Supports both initial submissions and incremental updates where only changed items need to be re-entered.
- Ownership of the worldwide approved device catalogue for all Siemens employees, covering direct vendor and manufacturer engagements (Apple, Google, Samsung), strategic budget and demand balancing, and a custom-built tool for bi-monthly portfolio updates.
- Tool for automated validation and re-signing of iOS and Android app packages, developed and operated as central app manager at Siemens and independently used and extended by several team members until 2025.
- Bachelor's thesis (Grade 1.0) at FOM University on a Go-implemented prototype of a distributed, encrypted P2P storage system with content-based replication and deduplication.
- Custom PHP/MySQL membership management system for a diving club, with Excel import and export, club-specific business logic, and GDPR-compliant data handling, developed and operated end-to-end for six years.
Engagement and interests
Skiing Advanced recreational skier on alpine slopes, going out from time to time.
Scuba Diving CMAS** Silver
Build a profile
Select the relevant experience and skills, or start from a role template.
Quick select
Skills
Languages
Personal
Advisory & Methods
Architecture
Infrastructure & DevOps
Security & Networking
Projects
MinD-Chat Project Lead
Setup and sole operation of the internal Matrix chat system for Mensa in Deutschland e.V., with over 2,000 members on board since the official launch in March 2024.
This Website
Concept, development, and operation of this bilingual website, which presents my work to prospective clients and hiring managers at the same time. It is self-hosted, runs without any third-party services, and is built so that the technology itself already shows how I work.
Annual Gathering Digital Signage System
Custom-built digital signage system for check-in at the Mensa annual meeting, built on Raspberry Pi Zero 2W and LED matrix displays with wireless live control through a custom-developed interface.
E2EE Concept for REI3 Password Management
Concept paper for implementing an end-to-end encrypted password manager in REI3, designed to keep credentials secure even if the server is compromised, while still supporting password sharing and auditing across teams.
Documentation Platform für das Mensa International Volunteering Network
From requirements gathering through solution evaluation to build and operation of a Docusaurus documentation platform for the International Volunteering Network (IVN) of Mensa International.
Reverse Proxy for db.mensa.de
Built and operating a reverse proxy in front of the member database (db.mensa.de) of Mensa in Deutschland e.V., with a controlled migration to the target solution, shorter load times, and noticeably reduced backend load.
Biber - Camp Supervisor Register
Infrastructure and DevOps work for Biber, the camp supervisors register for the children's and youth camps of Mensa in Deutschland e.V., covering CI/CD pipeline setup, server provisioning, and ongoing operations as the technical foundation for the application's development.
Self-hosted Video Conferencing System
Building and operating a self-hosted video conferencing platform based on Jitsi for the members of Mensa in Deutschland e.V., with an integrated whiteboard and an access model where only members can start conferences but may invite anyone they like, including non-members. Several hundred members use it each week, and it is provided free of charge.
App Distribution Portal
Submission portal for company-wide app distribution, built with Microsoft Power Automate and SharePoint as a virtual database in place of a SQL solution. Supports both initial submissions and incremental updates where only changed items need to be re-entered.
Global Siemens Device Portfolio Management
Ownership of the worldwide approved device catalogue for all Siemens employees, covering direct vendor and manufacturer engagements (Apple, Google, Samsung), strategic budget and demand balancing, and a custom-built tool for bi-monthly portfolio updates.
Automated App Signing
Tool for automated validation and re-signing of iOS and Android app packages, developed and operated as central app manager at Siemens and independently used and extended by several team members until 2025.
Distributed Encrypted P2P Storage System with Deduplication
Bachelor's thesis (Grade 1.0) at FOM University on a Go-implemented prototype of a distributed, encrypted P2P storage system with content-based replication and deduplication.
Member Database for Diving Club
Custom PHP/MySQL membership management system for a diving club, with Excel import and export, club-specific business logic, and GDPR-compliant data handling, developed and operated end-to-end for six years.
Career
Independent IT Architecture & Infrastructure
I design, build and operate infrastructure and architecture solutions independently, from requirements through to ongoing operations, mostly for associations and nonprofit organisations.
Information Technology Architect
Application integration into existing infrastructure, cross-platform MDM with AirWatch and Intune, multi-region high-availability operations, and internal process tooling built on the Microsoft Power Platform.
Bachelor of Science, Computer Science
Part-time Computer Science degree completed alongside full-time work at Siemens, graduating with a final grade of 1.7. Bachelor's thesis graded 1.0, covering a distributed, encrypted P2P filesystem with deduplication built in Go.
P&I Consultant
Primary IT contact for board members and senior executives, responsible for all their IT requirements under the highest security and confidentiality standards.
Apprenticeship as IT Specialist for System Integration
Three-year apprenticeship in system integration covering networking, server operations, databases, and IT security.