$ hi, my name is
Vinh Pham
Senior Software Engineer • Cloud & Full-Stack
I build distributed systems
Backend-focused engineer who ships the platform and the product on top of it. Two decades of building reliable, observable systems that hold up in production.
- 18+Years shipping code
- 99.99%Uptime sustained
- $10M+Savings unlocked
- $3.7MEquipment tracked
About Me
Senior software engineer with 18+ years building backend services and the full-stack applications that sit on top of them, most recently in Node.js and TypeScript. I've built event-driven platform services, GraphQL APIs, and the React UIs that use them, and I use Claude and Cursor daily, including an internal tool I built that helps my team triage on-call alerts.
Known for delivering reliable, observable, and scalable systems in production environments. Skilled at owning features end-to-end, collaborating cross-functionally, and improving system performance and developer experience.
Most of my last six years has been spent in the space where product and platform meet — shipping the React surface a customer clicks, the backend API and Postgres schema behind it, and the AWS foundation all of it runs on.
Owns the whole stack
Database schema, PostgreSQL, backend API, and React UI — delivered as one coherent feature rather than a handoff chain.
Builds for production
Observability, SLO-aligned alerting, and zero-static-credential infrastructure, so the systems stay diagnosable long after launch day.
Leaves things simpler
Ran a database consolidation onto shared infrastructure, retiring a full database fleet along with its cost, patching, and backups.
Skills & Technologies
Backend & Languages
- Node.js
- TypeScript
- JavaScript
- Python
- Go
- C#
- SQL
Frontend
- React.js
- Redux
- Angular
Cloud & Infrastructure
- AWS
- Fargate
- EC2
- Lambda
- IAM
- ECR
- KMS
- S3
- Secrets Manager
- API Gateway
- WAF
- GovCloud
- AMI
- Azure
- Terraform
- Packer
- Docker
- Kubernetes
- Helm
- Pulumi
- VPC
Data
- PostgreSQL
- DynamoDB
- MongoDB
- MSSQL
- GraphQL
- NATS
Security & Identity
- SAML
- SCIM
- OAuth
- Cognito
- Keycloak
- FIPS
- Chainguard
- CSP
- CSRF
- HSTS
Observability & DevOps
- Grafana
- Prometheus
- Thanos
- Loki
- Alert Manager
- PagerDuty
- Jenkins
- GitHub Actions
GenAI Tools
- Claude
- Cursor
Experience
Senior Software Engineer
- Contributed to the customer-fleet observability platform on Terraform and AWS with Prometheus, Thanos, Grafana, and S3 for long-term storage. It's still the stack SRE and on-call use today.
- Shipped entitlement views, admin tools, and onboarding flows in React and TypeScript for the Cloud Management Portal, backed by an API Gateway and WAF.
- Delivered a self-serve module trial with license gating and dependency validation in a single quarter — database schema, GraphQL API, React UI, and the event-driven lifecycle email.
- Built the identity stack for self-service SAML SSO and SCIM provisioning on Cognito, letting customers onboard identity providers without opening a support ticket.
- Led the FedRAMP and GovCloud work for federal deals, covering FIPS crypto, Chainguard images, gov IAM across every environment, and USG email delivery.
- Ran a database consolidation onto shared infrastructure, retiring a full database fleet along with its cost, patching, and backups.
- Built and own the customer notification platform — a Node.js/TypeScript service integrated with the NATS event bus — delivering timely updates on module installation scheduling and completion, including tracing a silent outage back to an upstream parser regression.
- Use Claude and Cursor daily for coding and tests, and built an internal Claude skill that triages on-call alerts by correlating CloudWatch and Loki logs.
- Mentored a summer intern via weekly 1:1s, unblocking him and steering him in the right direction — he shipped a Go feature adding IdP config support for a GovCloud customer.
Software Engineer
Intel Corporation — Santa Clara, CA
- Built backend services and web applications in .NET Core, Angular, and Aurelia, improving supplier data accuracy by 20%.
- Designed the data models and reporting behind automated supplier price comparisons, which surfaced over $10M in cost savings.
- Rebuilt a legacy risk-assessment system with a cleaner architecture — better performance, easier to extend.
- Built REST APIs and automated tracking that gave global operations real-time visibility into $3.7M worth of equipment.
- Integrated DocuSign for multi-year, multi-million-dollar contracts, covering signatures and automated archival.
Software Engineer
AccountNow — San Ramon, CA
- Built backend services and high-traffic web features for onboarding, identity verification, and transaction disputes.
- Integrated LexisNexis Bureau checks over SOAP in C#, improving fraud detection and account approval accuracy.
- Built SQL-backed verification and dispute tools so customers could resolve incorrect transactions faster.
Projects
Customer Identity Stack
Self-service SAML/SSO with domain auto-provisioning, metadata and certificate validation, plus SCIM provisioning with concurrency safeguards on Cognito.
ImpactTurned SSO onboarding from support-driven into fully self-service across 156+ identity providers.
- Cognito
- SAML
- SCIM
- TypeScript
Fleet Observability Platform
Prometheus, Thanos, and Grafana on Terraform/AWS with S3 long-term storage, consolidated into reusable shared modules.
ImpactStill the production monitoring stack for SRE and on-call; removed ~5.7K lines of duplicated infrastructure.
- Prometheus
- Thanos
- Grafana
- Terraform
Self-Service Cloud Portal
React + TypeScript entitlement and environment-status views over a GraphQL API, on a platform layer of API Gateway, CloudFront, Lambda authorizer, and WAF.
ImpactIn the critical path of every customer login and onboarding since launch.
- React
- GraphQL
- API Gateway
- CloudFront
Notification Platform
Event-driven lifecycle email over NATS with idempotent handlers, an unsubscribe API, and dynamic links.
ImpactDiagnosed and resolved a silent, total email outage from an upstream parser regression, restoring 100% of delivery.
- NATS
- TypeScript
- Lambda
FedRAMP / GovCloud Enablement
Management-plane hardening with FIPS crypto, Chainguard images, gov IAM across every environment, and USG email delivery.
ImpactThe technical prerequisite that unblocked federal deals.
- GovCloud
- FIPS
- Chainguard
- IAM
Zero-Credential Database Consolidation
Staged migration of a database fleet onto shared infrastructure with no static credentials anywhere — Secrets Manager rotation, TLS, and pgAudit throughout.
ImpactPermanently retired a database fleet's cost, patching, and backup burden.
- PostgreSQL
- Secrets Manager
- TypeScript
- pgAudit
Education
B.S. Computer Science
San Jose State University