5 hours ago
Hanoi, VietnamSenior
Responsibilities
- Own AWS infrastructure for development, staging, production, and disaster-recovery environments through Terraform and reviewed infrastructure changes.
- Operate and upgrade Amazon EKS clusters, including node pools, Gateway API routing, add-ons, and capacity limits.
- Maintain Bitbucket Pipelines, Helm, and GitOps workflows for building images and promoting releases across environments.
- Run and test disaster recovery using cross-region RDS, S3, and ECR replication, Step Functions failover, and fail-back procedures.
- Maintain documented and verified RPO/RTO targets and conduct disaster-recovery drills.
- Maintain AWS security baselines, investigate findings, and remediate high- and critical-severity issues.
- Operate observability and alerting with Prometheus, Grafana, Loki, and CloudWatch, routing alerts to on-call channels.
- Onboard white-label tenants by configuring networks, buckets, DNS, certificates, and partner IP allowlists.
- Handle incidents and changes according to the client change process and write post-incident reports.
- Optimize AWS costs through workload right-sizing, sandbox scaling, and monthly spend reporting.
- Maintain runbooks, architecture documentation, and handover materials in Confluence.
- Join client meetings, explain technical trade-offs, respond to client requests, and manage multiple projects.
- Use AI-assisted engineering tools responsibly with human review of every infrastructure and pipeline change.
Requirements
- 5+ years of experience in DevOps, SRE, or platform engineering, including at least 3 years running production workloads on AWS.
- Hands-on production experience with Amazon EKS, including upgrades, node scaling, ingress or Gateway API, IRSA or Pod Identity, and troubleshooting.
- Strong Terraform experience with multi-environment layouts, reusable modules, remote state and locking, and safe CI-based plan and apply workflows.
- Experience with CI/CD using Bitbucket Pipelines or GitHub Actions, plus Helm and GitOps workflows such as ArgoCD, Flux, or a Helm deployment repository.
- Experience with AWS networking and security, including VPC design, NAT, VPC endpoints, peering, WAF, IAM, KMS, Secrets Manager, and OIDC federation.
- Experience implementing AWS disaster recovery, including cross-region RDS and S3 replication, failover runbooks, and DR drills.
- Experience with observability using Prometheus, Grafana, Loki or ELK/EFK, and alerting design.
- Linux administration and scripting experience with Bash and Python.
- Experience in a regulated or security-sensitive domain with ISO 27001 or SOC 2-style controls.
- Ability to own client environments end to end, communicate clearly in written English, and participate confidently in client calls.
- Ability to manage two or more projects simultaneously and prioritize without close supervision.
- Preferred AWS certifications include Solutions Architect Professional, DevOps Engineer Professional, or Security Specialty; CKA or CKS are also preferred.
- Preferred experience includes Amazon Managed Prometheus/Grafana, ADOT, Grafana Alloy, Velero, Trivy, tflint, SonarQube, Snyk, Golang, Amazon Bedrock, AI-assisted engineering workflows, and Azure AKS.
Benefits
- International working environment with AI-driven strategic direction.
- 20 days of annual leave and hybrid working.
- Premium healthcare package with BIC and comprehensive annual health check-ups.
- Competitive salary and a 13th salary bonus.
- Lunch allowance.
- Company activities and global collaboration with Vietnamese and international colleagues.
Categories
