Middle DevOps Engineer (AWS, IAM/CloudFormation)

Top 3 reasons to join us

• Inspired Leadership Team and Talented Colleagues
• Attractive Salary and Benefits
• Hybrid mode available and flexible working time

Job description

• Work directly with global clients and onshore SRE / Platform teams to investigate AWS environments and propose DevOps / cloud security solutions.
• Analyze and remediate AWS security findings, including misconfigurations, exposed credentials, overly permissive IAM policies, and related vulnerabilities.
• Design, implement, and review AWS IAM policies, roles, SCPs, and permission boundaries following least-privilege principles.
• Drive structured remediation workflows across multiple AWS accounts and environments.
• Contribute to or review Infrastructure as Code, especially CloudFormation, for repeatable and auditable remediation.
• Maintain and improve secure, scalable AWS infrastructure in multi-account / multi-environment setups.
• Join architecture discussions and provide recommendations on AWS security, reliability, and best practices.
• Support automation or AI-assisted workflows to improve remediation efficiency.
• Perform other tasks assigned by the Leader / Manager.

Your skills and experience

General requirements:

• Intermediate English communication, with ability to work directly with international clients and onshore teams.
• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Likely having 3+ years of DevOps / SRE / Cloud Infrastructure experience
• Ability to independently investigate complex client environments with minimum guidance.
• Strong ownership, troubleshooting, problem-solving, self-learning, and security-first mindset.

Technical requirements:

• Strong hands-on experience with AWS in DevOps, SRE, Cloud Infrastructure, or Cloud Security roles.
• Strong knowledge of AWS IAM, including roles, policies, SCPs, permission boundaries, and least-privilege design.
• Experience with Wiz or similar CSPM tools such as Prisma Cloud, AWS Security Hub, etc.
• Strong Infrastructure as Code (IaC) experience, with CloudFormation strongly preferred; Terraform / CDK is a plus.
• Solid AWS networking knowledge, including VPC, Security Groups, VPN, Transit Gateway.
• Experience with multi-account / multi-environment AWS setups.
• Experience maintaining secure, scalable AWS infrastructure and CI/CD workflows.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Familiarity with containers, microservices, and cloud deployment practices is a plus.

Nice to have:

• AWS certifications such as AWS Security Specialty, Solutions Architect, or DevOps Engineer Professional
• Experience with PHP applications on AWS, especially during infrastructure migration or remediation is a big plus
• Familiarity with enterprise compliance, security governance, or regulated environments
• Experience using AI chat tools (ChatGPT, Claude, Gemini, etc.) for research, debugging, and learning
• Familiarity with at least one AI coding assistant (GitHub Copilot, Cursor, Claude Code, or similar)
• Ability to write clear, contextual prompts to generate code snippets, unit tests, or documentation
• Awareness of AI output limitations and responsible AI use (data privacy, handling of sensitive client data)

Why you'll love working here

Perks You'll Enjoy 

• Working in one of the Best Places to Work in Vietnam
• Building large-scale & global software products
• Working & growing with Passionate & Talented Team
• Diverse careers opportunities with Software Outsourcing, Software Product Development, IT Solutions & Consulting
• Attractive Salary and Benefits
• Performance appraisals every year and performance bonus
• Remote work available and flexible working time
• Onsite opportunities: short-term and long-term assignments in North American (U.S, Canada), Europe, Asia.
• Various training on hot-trend technologies, best practices and soft skills
• Premium healthcare insurance for you and your loved ones
• Company trip, big annual year-end party every year, team building, etc.
• Fitness & sport activities: football, tennis, table-tennis, badminton, yoga, swimming…
• Joining community development activities: 1% Pledge, charity every quarter, blood donation, public seminars, career orientation talks,…
• Free in-house entertainment facilities (foosball, ping pong, gym…), coffee, and snack (instant noodles, cookies, candies…)

And much more, join us and let yourself explore other fantastic things!