Andrew Nguyen — Software Engineer

What I do

Embedded hardware to security tooling.

My work spans embedded real-time systems — porting RTEMS as a hypervisor guest onto NXP PowerPC hardware for a naval shipbuilding program, writing original BSP patches, and scaling multi-partition deployments through GitLab CI/CD — and Linux infrastructure, administering RHEL identity-management and compliance environments end to end.

On the security side I build full-stack tooling in Python: SIEM proof-of-concepts, intrusion-simulation probes, and LLM-powered log analysis — including the Proxmox lab hardware they run on. U.S. Citizen; open to relocation to Alexandria, VA.

Experience

Where I've worked

Convergent Data LLC Current

Dec 2025 – present · Dec 2023 – Dec 2024

Software Engineer, Contract

Subcontractor — clients: Taurus Telesys, HII Newport News

Embedded (Dec 2025 – 2026): Ported RTEMS 6.2 as a hypervisor guest on the NXP QorIQ T4240 in support of a naval shipbuilding program (HII Newport News); wrote 68+ original BSP patches including a cache-coherency fix that unblocked guest boot after 40+ failed attempts, and scaled to 12+ simultaneous RTEMS partitions under the NXP Topaz hypervisor using an 8-stage GitLab CI/CD pipeline.
Security (2026): Designed and demonstrated a full-stack SIEM proof-of-concept (Wazuh + OpenSearch on Proxmox/LXC) for stakeholders evaluating a prospective TSA screening engagement — live intrusion simulation, a custom OpenSearch Dashboards plugin with signature-based and local-LLM log analysis, and a RAG pipeline (k-NN vector index) powering a natural-language "ask the logs" interface.
Security (2026): Built a Python web-probe tool (http.client) simulating SQL-injection, path-traversal, and sensitive-file access attempts to validate the SIEM's intrusion-detection rules; rebuilt three Mac Pro (2013) units into a 3-node Proxmox VE cluster (hardware teardown, ECC RAM and Xeon CPU upgrades) to host the lab.
Infrastructure (Dec 2023 – Dec 2024), client Taurus Telesys: Administered RHEL 8/9 Red Hat Identity Management, Sonatype Nexus, Apache Guacamole, GitLab, and Docker; configured LDAP and Keycloak SSO across Proxmox, GitLab, and Portainer; wrote Python IDM compliance scripts; upgraded RHEL 8.8 → 8.10 and configured iptables and Nginx reverse-proxy for cross-system access.

Analytica

July 2022 – September 2022

CI/CD Engineer Intern

Bethesda, MD

Built a GitLab CI/CD pipeline using GitLab Runner to automate deployment of scripts that launched Amazon EC2 instances.
Provisioned and managed Proxmox virtual machines running CentOS and Ubuntu; used SSH for remote access and wrote Bash scripts for automated package installation.
Worked with Python, Docker, Git, and Linux tooling across PowerShell, macOS Terminal, and VS Code environments.

Projects

Things I've built

Cync Smart Plug Remote Control

A zero-dependency Python HTTP server that authenticates to the GE Cync cloud API (email/password + 2FA) and controls smart plugs via the reverse-engineered binary TCP protocol (SSL, port 23779). Repurposed as a lab-automation tool to remotely power-cycle a T4240RDB embedded development board without physical access.

PythonTCP/SSLReverse Engineering

ISAC Voice Cloning

Curated a 345-sample audio dataset (22050 Hz WAV, pipe-delimited metadata) and fine-tuned the Coqui XTTS v2 text-to-speech model on an RTX 3070 (8 GB VRAM, CUDA 12.1) — 410 training epochs with TensorBoard monitoring to a final text loss of 0.0154. Resolved dependency conflicts across the Coqui TTS stack and built a Dockerized inference server for voice synthesis.

PythonPyTorchCoqui XTTS v2CUDADocker

Skills