IT Infrastructure & Cybersecurity Engineer (DevSecOps)

Top 3 reasons to join us

• Enterprise platforms for business operations
• AI, cloud, cybersecurity, and digital services
• Industry solutions for complex environments

Job description

This position is responsible for deploying, operating, and securing enterprise IT infrastructure, including firewalls, Linux/Windows systems, monitoring platforms, and security compliance frameworks.

The ideal candidate has strong hands-on experience with firewall systems, Linux servers, identity services, monitoring tools, and basic database administration, with a solid understanding of IT security standards.

KEY RESPONSIBILITIES

• Bachelor’s degree in IT, Computer Science, Network Security, Telecommunications, or related fields.
• Deploy, operate, and maintain enterprise IT infrastructure across Linux and Windows environments.
• Install, configure, patch, upgrade, monitor, and troubleshoot production servers and infrastructure services.
• Deploy, configure, and maintain enterprise firewall and network security solutions.
• Manage network connectivity, routing, VPN (Site-to-Site & Remote Access), NAT, IPS/IDS, Web Filtering, and security policies.
• Monitor infrastructure health, system availability, network performance, and capacity to ensure high service reliability.
• Investigate system and network incidents, perform root cause analysis, and implement corrective and preventive actions.
• Participate in infrastructure hardening, vulnerability remediation, and security improvement initiatives.
• Participate in IT governance, security architecture review, and infrastructure security planning.
• Support security risk assessments, compliance reviews, and remediation planning.
• Participate in security incident response, investigation, containment, recovery, and post-incident analysis.
• Collect and analyze system, firewall, and security logs to support incident investigation and root cause analysis.
• Automate infrastructure operations using scripting and modern automation tools.
• Leverage AI-assisted engineering tools and AI agent platforms to improve infrastructure operations, troubleshooting, documentation, and operational efficiency.
• Support and maintain compliance with ISO 9001:2015, ISO/IEC 27001:2022, PCI-DSS, and other applicable security standards.
• Perform routine operational tasks for enterprise databases, including backup support, monitoring, basic troubleshooting, and maintenance.
• Create and maintain technical documentation, system architecture diagrams, operational procedures (SOPs), and implementation documents.
• Collaborate with internal teams, vendors, auditors, and project stakeholders to deliver infrastructure and security projects.
• Participate in change management, incident response, disaster recovery, and continuous service improvement activities.

Your skills and experience

REQUIREMENTS

• Operating Systems
  • Strong knowledge of Linux system administration (Ubuntu, CentOS, RHEL, Rocky Linux…).
  • Experience administering Windows Server environments, including Active Directory, DNS, DHCP, Group Policy, and File Services.
• Network & Security
  • Strong experience with at least one enterprise firewall platform:
    • Sophos Firewall XG
    • pfSense & OPNsense
    • FortiGate
  • Good understanding of TCP/IP, VLAN, Routing, Switching, VPN, NAT, IPS/IDS, Web Filtering, DNS, and network troubleshooting.
  • Experience implementing firewall policies, VPN connectivity, security hardening, and network segmentation.
  • Knowledge of enterprise security principles, access control, identity management, and security best practices.
• Monitoring & Operations
  • Hands-on experience with infrastructure monitoring platforms such as PRTG, WhatsUp Gold, Zabbix, Grafana, or equivalent solutions.
  • Experience monitoring system availability, capacity, performance, and service health.
  • Basic understanding of SIEM platforms such as Wazuh, Microsoft Sentinel, Splunk, QRadar, or equivalent solutions.
  • Basic understanding of Security Operations Center (SOC),security monitoring, threat detection, and log analysis.
• Database
  • Basic knowledge of Oracle/MySQL Database administration, including user management, backup support, monitoring, troubleshooting, and maintenance.
• Virtualization & Infrastructure (Preferred)
  • Experience with VMware vSphere, Hyper-V, Proxmox VE, or equivalent virtualization platforms.
  • Basic understanding of SAN/NAS storage, backup, disaster recovery, and high availability solutions.
• Automation & Scripting (Preferred)
  • Basic scripting skills using Bash, PowerShell, or Python for system automation and operational tasks.
  • Experience with infrastructure automation tools (Ansible or equivalent) is an advantage.
• Identity & Access Security
  • Knowledge of Active Directory, LDAP, RBAC, Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Identity & Access Management (IAM).
  • Understanding of Zero Trust architecture and least privilege access control principles.
• Container Security (Preferred)
  • Familiarity with Docker, Kubernetes, and container security best practices.
• Security & Compliance
  • Strong understanding of IT security principles, defense-in-depth, and enterprise security best practices.
  • Familiarity with ISO 9001:2015, ISO/IEC 27001:2022, PCI-DSS, vulnerability management, security auditing, and governance processes.
  • Basic understanding of security architecture, risk assessment, vulnerability remediation, and security hardening.
  • Knowledge of incident response lifecycle, digital forensic fundamentals, and security monitoring is an advantage.
  • Awareness of AI governance and secure adoption of AI technologies is a plus.
• AI & Modern Engineering Tools (Preferred)
  • Familiarity with AI-assisted engineering tools such as ChatGPT, Claude, Cursor, or equivalent platforms.
  • Experience using AI agent platforms such as Hermes, OpenClaw, Claude Code, or similar autonomous agent frameworks.
  • Ability to leverage AI tools for infrastructure automation, scripting, troubleshooting, documentation, and operational efficiency.
• Certifications (Preferred)
  • CCNA or equivalent networking certification.
  • MCSA / Microsoft Certified or equivalent Windows Server certification.
  • LPI Level 1 (LPIC-1) or RHCSA
  • Security+, CEH, ISO/IEC 27001, or equivalent security certifications.
  • Oracle certification (nice to have).
• Language
  • Good English communication skills
  • Ability to read technical documentation, prepare technical reports, and communicate effectively with international teams.
• Personal Skills
  • Strong troubleshooting and analytical skills.
  • Responsible, proactive, and detail oriented.
  • Ability to work independently and in a team.
  • Learn new technologies and security standards. 

Why you'll love working here

• Competitive salary and benefits package, including a guaranteed 13th-month salary.
• Company trip annually.
• Dynamic and innovative working environment with professional colleagues.
• Opportunities for professional growth and exposure to enterprise technology platforms and global business practices.
• Comfortable workplace with free parking, coffee, snacks.
• Company-sponsored training programs and professional certifications.
• Onsite working environment at the company office in District 7, Ho Chi Minh City