DEVSECOPS • FULL STACK • INFRASTRUCTURE

Building Resilient Infrastructure & Full-Stack Systems.

I am Bunmeng Te — a DevSecOps Engineer, Full Stack Developer, and Infrastructure Engineer working across cloud infrastructure, CI/CD automation, and modern software development. From enterprise platform infrastructure to custom ERPNext applications, offline AI systems, and mobile architectures.

DevSecOps & CI/CD Linux & Proxmox Next.js & Frappe / ERPNext Local AI / RAG Systems
View Projects Get in Touch
0
+ Production Apps Deployed
Zero-downtime blue/green rollouts
0
% RAG Retrieval Hit Rate@5
Hybrid dense + BM25 vector search
0
Automated Test Cases
Jest & React Native Testing Library
0
% Offline Local AI
Private LLM serving via llama.cpp
ENGINEERING PROFILE

Full-Lifecycle Ownership: Code, Containers & Pipelines

I am a Freelance DevSecOps Engineer & Full-Stack Developer based in Melbourne VIC, specializing in cloud infrastructure, CI/CD automation, and custom enterprise software. Previously, I served as Technical Lead at Prompcorp Facilities Management delivering custom ERPNext solutions on Azure, built offline Khmer legal RAG systems for the Insurance Regulator of Cambodia, and co-managed production servers for the enterprise platform suite roluos.com at LUMA System across 28+ applications.

DevSecOps & Infrastructure

Linux administration (Ubuntu), Proxmox VE virtualization, Azure VMs, Docker & Swarm container orchestration, GoCD CI/CD pipelines, and zero-downtime blue/green deployment scripting for 28+ applications.

  • Traefik & Nginx reverse proxying, dynamic routing, Certbot TLS
  • Prometheus, Grafana, Netdata, Uptime Kuma & Telegram alerting
  • FortiGate firewall, Cisco VLANs, Tailscale VPN, and pgBackWeb NAS backups

Full-Stack & Intelligent Software

Custom ERPNext v15 / Frappe app development, Next.js (App Router) & React 19 web applications, offline-first React Native / Expo mobile development, and local RAG AI architectures.

  • Custom Frappe DocTypes, REST APIs, document events & RBAC
  • Offline Khmer RAG assistant with hybrid BGE-M3 + BM25 & llama.cpp
  • React Native sensor integrations with SQLite offline queue sync
ZERO-DOWNTIME DELIVERY

Deterministic Deployments

Blue-green deployment scripts and isolated container configurations ensure continuous availability across upgrades.

END-TO-END OWNERSHIP

From Code to Bare Metal

Owning systems the whole way down — code, containers, pipelines, servers, networking, and comprehensive runbooks.

MEASURED VERIFICATION

Observability & Testing

Relying on gold-set benchmarks, automated testing suites, and real-time telemetry to validate performance.

TECHNICAL MATRIX

Core Stack & Capabilities

Practical, hands-on technologies and frameworks used to architect, deploy, and operate production-grade systems.

DevSecOps & Infra

Servers & CI/CD
CORE
Linux (Ubuntu) & Proxmox VE 95%
Docker, Compose & Docker Swarm 96%
GoCD CI/CD & Blue-Green Deployment 92%
Traefik, Nginx & Let's Encrypt TLS 94%
Prometheus, Grafana & Uptime Kuma 90%
Azure VM Wazuh Tailscale FortiGate pgBackWeb

Software & Web

Frameworks & APIs
CORE
Frappe Framework / ERPNext v15 94%
Next.js (App Router), React 19 & TypeScript 95%
Python, PHP (Laravel) & Bash 92%
PostgreSQL, MariaDB & MongoDB 90%
Tailwind CSS & Framer Motion 95%
C++17 CMake Supabase Redis REST APIs Git & GitHub

AI, Algorithms & Mobile

Specialized Systems
CORE
RAG Systems & Vector Search (FAISS) 94%
Local LLM Serving (llama.cpp, GGUF) 92%
MQL5 Algo Engines & Risk Logic 90%
React Native & Expo (SDK 54) 90%
Offline SQLite & Background Sync 91%
BGE-M3 BM25 / RRF MQL5 / Pine BVH / AABB Streamlit Cloudflare
REAL-WORLD PORTFOLIO

Flagship Projects

End-to-end production systems, enterprise infrastructure, AI assistants, full-stack platforms, 3D graphics, and algorithmic trading engines.

PROD_ID: #01 INDUSTRY PROJECT
Prompcorp Facilities Management

ERPNext BidTracker

Custom Pre-Contract Tender Profitability & P&L System

Architecture Highlights: Technical Lead for custom ERPNext v15 / Frappe app tracking tender cost-to-bid vs contract value. Integrated with Timesheets and CRM via document events. Hardened on Azure Ubuntu VM with Nginx, Certbot TLS, and Supervisor stack.
P&L Recalculation 100% Automated
Security RBAC 4 Tiered Roles
ERPNext v15 Frappe Python MariaDB Azure VM
PROD_ID: #02 AI / ML SYSTEM
Insurance Regulator of Cambodia

Khmer RAG Assistant

End-to-End Offline Legal RAG System & Local Inference

Architecture Highlights: Designed and built the entire production RAG system end-to-end: corpus OCR/chunking pipeline, custom Khmer BM25 tokenization, hybrid FAISS vector retrieval (0.9825 Hit Rate@5), and offline local inference via llama.cpp.
Retrieval Hit Rate@5 0.9825 MRR 0.895
Data Privacy 100% Offline
Python FAISS BGE-M3 llama.cpp Streamlit
PROD_ID: #03 MOBILE & SENSORS
Mobile & Sensor Science Platform

STEMMLab Science App

Sensor-Driven Science Experiments with Offline SQLite Sync

Architecture Highlights: Cross-platform React Native / Expo (SDK 54) app turning device sensors (accelerometer, audio metering, GPS, camera) into 6 STEMM experiments. Features on-device SQLite with forward migrations and background Firebase sync.
Automated Tests 244 Jest Tests
Data Architecture Offline-First SQLite
React Native Expo SDK 54 TypeScript SQLite Firebase
PROD_ID: #04 ENTERPRISE INFRASTRUCTURE
LUMA System • roluos.com

Roluos Platform

Enterprise Platform Infrastructure & Blue/Green CI/CD

Architecture Highlights: Co-managed production infrastructure (1 of 2 engineers with server access) for LUMA System's enterprise platform suite (roluos.com). Authored zero-downtime blue/green deployment scripts, GoCD CI/CD pipelines, and end-to-end Prometheus/Grafana observability for 28+ apps.
Zero Downtime 28+ Apps Blue/Green
Server Access 1 of 2 Co-Managers
GoCD CI/CD Docker Swarm Traefik Nginx Prometheus Grafana
PROD_ID: #05 E-COMMERCE STORE
Ventinio.com

Ventinio E-Commerce

Full-Stack Modern E-Commerce Platform & Dynamic Checkout

Architecture Highlights: Full-stack modern e-commerce web platform engineered with Next.js, dynamic QR checkout flow, responsive catalog, and optimized edge server rendering on Vercel.
Checkout Flow Dynamic QR / Webhook
Frontend Stack Next.js & Tailwind
Next.js React TypeScript Tailwind CSS REST APIs
PROD_ID: #06 LEARNING PLATFORM
gabriel-bible-center.com

Gabriel Bible Center

Educational Platform with Multilingual Learning Modules

Architecture Highlights: Full-featured learning platform featuring structured curriculum management, dictionary-typed multi-language content (English/Khmer), media player integration, and smooth interactive animations.
Content System Multilingual i18n
Deployment Vercel • Custom Domain
React TypeScript Tailwind CSS Framer Motion i18n
PROD_ID: #07 COMPUTER GRAPHICS & SYSTEMS
Graphics & Physics Engine

Ray Tracer Engine

BVH Spatial Acceleration, Optics & Multi-Material Physics

Architecture Highlights: High-performance 3D rendering engine built in modern C++17 with CMake. Features Bounding Volume Hierarchy (BVH) with Axis-Aligned Bounding Boxes (AABB), recursive ray bouncing, reflective metal, Lambertian diffuse, and luminous materials.
Acceleration Tree BVH / AABB Trees
Optics & Math C++17 & CMake
C++17 CMake Ray Tracing BVH / AABB Optics ImageMagick
PROD_ID: #08 Market Technical Analysis
TradingView Technical Analysis

Trading Intelligence Indicator

Liquidity Pools, FVGs, Session Opens, VWAP & Fib Zones

Architecture Highlights: Custom TradingView indicator engineered in Pine Script v5. Automatically maps liquidity pools, FVGs, daily/weekly opens, session VWAP, swing Fibonacci levels, and Premium vs Discount zones.
Key Levels & FVG Liquidity • FVG • VWAP
Structure & Fibs Premium / Discount
Pine Script v5 TradingView Liquidity Pools Fair Value Gaps Fibonacci & VWAP Premium / Discount
PROD_ID: #09 ALGORITHMIC TRADING & MQL5
MetaTrader 5 Algo Engine

Gold EA Trading Bot

Automated Multi-Timeframe MQL5 Algo Execution Engine

Architecture Highlights: Automated MetaTrader 5 Expert Advisor trading Gold (XAUUSDc). Uses a multi-timeframe smart-money model (M15 bias, M5 structure, M1 StochRSI trigger) scored 0-100 by a Market IQ engine with SMT divergence and killzone filters.
Decision Engine Market IQ (0-100)
Risk Model Structural SL • 0.5% DD
MQL5 MetaTrader 5 Pine Script Algo Trading SMT Divergence Risk Management
CAREER TRAJECTORY

Professional Experience

Hands-on engineering across DevSecOps, enterprise cloud infrastructure, technical leadership, and intelligent software development.

Freelance DevSecOps & Full-Stack Engineer

@ Independent Consultant (Melbourne, Australia / Remote)
May 2025 – Present (Current)

Designing, deploying, and maintaining production cloud infrastructure, custom ERPNext/Frappe enterprise systems, offline AI/RAG architectures, and modern web applications for diverse client projects.

Delivered custom ERPNext v15 solutions, whitelisted REST APIs, and automated P&L business logic deployed on hardened Azure Virtual Machines.
Engineered offline-first architectures including legal RAG assistants with hybrid FAISS retrieval and sensor-based mobile applications.
Implemented automated zero-downtime blue/green CI/CD pipelines, reverse proxy routing (Traefik/Nginx), and disaster recovery backup systems.
DevSecOps ERPNext v15 / Frappe Next.js 19 Python & RAG Azure VM Docker

Technical Lead & Infrastructure Engineer

@ Prompcorp Facilities Management (Industry Project, Australia)
Mar 2026 – Jun 2026

Technical Lead for a team of 5 delivering ERPNext BidTracker — a custom Frappe v15 solution providing pre-contract tender profitability visibility, automatic timesheet labor costing, and multi-tier role-based approval workflows.

Architected pre-contract P&L engine, custom DocTypes, and document event hooks with zero modifications to core ERPNext code.
Deployed and hardened on Azure Ubuntu VM with Nginx reverse proxy, Certbot TLS, Cloudflare DNS, and Supervisor multi-worker stack.
Authored comprehensive technical documentation, RBAC matrix across 4 business roles, and production release runbooks.
ERPNext v15 Frappe Framework Python 3.11 Azure VM Nginx & Supervisor

AI Systems Engineer

@ Insurance Regulator of Cambodia (IRC Project)
Jun 2026 – Aug 2026

Architected and built the entire production Khmer legal RAG system from the ground up — designing the end-to-end data pipelines, custom tokenization algorithms, hybrid retrieval mechanisms, evaluation benchmark suite, and local offline inference stack.

Engineered custom Khmer BM25 tokenization fused with BGE-M3 in FAISS via Reciprocal Rank Fusion (achieving 0.9825 Hit Rate@5 and 0.8952 MRR).
Authored 400-question gold-set benchmark across 3 embedding & 4 quantized models; deployed SeaLLM v3 7B via llama.cpp for 100% offline local execution.
Built end-to-end interactive Streamlit interface with live retrieval scoring telemetry and exact PDF citation links.
AI Systems Architecture RAG / FAISS Custom BM25 & BGE-M3 llama.cpp / GGUF Python & Streamlit

DevSecOps & Infrastructure Engineer Intern

@ LUMA System Co., Ltd. (Phnom Penh, Cambodia)
Jan 2025 – Apr 2025

Co-managed production infrastructure with the Technical Lead (1 of only 2 people with server access) supporting the company's enterprise platform suite (roluos.com) alongside its utilities, waste-management, real-estate, and document-management products.

Built and operated full observability stack (Prometheus, Grafana, Netdata, Uptime Kuma) with Telegram bot alerting for outages and backup events.
Authored reusable zero-downtime blue/green deployment scripts and configured GoCD CI/CD pipelines across 28+ production applications.
Executed full Proxmox host server migration, configured Traefik/Nginx reverse proxying, FortiGate firewalls, Cisco VLANs, and automated NAS backups (pgBackWeb).
GoCD CI/CD Docker Swarm Traefik / Nginx Prometheus & Grafana Proxmox VE FortiGate
DEVELOPER CONSOLE

Interactive Shell Console

Interact with Bunmeng's portfolio environment directly. Type help to see available commands.

bunmeng@infra-node: ~ (zsh)
[SYSTEM_INIT] Bunmeng Te Portfolio Environment
DevSecOps • Full Stack Developer • Infrastructure Engineer (Melbourne VIC)
Type 'help' for available commands, or explore 'projects', 'skills', 'experience'.
bunmeng@infra:~$
GET IN TOUCH

Let's Build & Collaborate

Open to DevSecOps, Infrastructure Engineering, and Full-Stack opportunities. Drop a message or reach out directly.

STATUS: AVAILABLE FOR ROLES • Response within few hours
DIRECT EMAIL tebunmeng2004@gmail.com
LINKEDIN linkedin.com/in/bunmeng-te
GITHUB github.com/Bunmeng-Te
LOCATION Melbourne VIC 3000, Australia
SEND A MESSAGE DIRECT INBOX ROUTING