DevSecOps Engineer (AWS, IAMCloudFormation, English)

• Work directly with global clients and onshore SRE / Platform teams to investigate AWS environments and propose DevOps / cloud security solutions.
• Analyze and remediate AWS security findings including misconfigurations exposed credentials overly permissive IAM policies and related vulnerabilities.
• Design implement and review AWS IAM policies roles SCPs and permission boundaries following least-privilege principles.
• Drive structured remediation workflows across multiple AWS accounts and environments.
• Contribute to or review Infrastructure as Code especially CloudFormation for repeatable and auditable remediation.
• Maintain and improve secure scalable AWS infrastructure in multi-account / multi-environment setups.
• Join architecture discussions and provide recommendations on AWS security reliability and best practices.
• Support automation or AI-assisted workflows to improve remediation efficiency.
• Perform other tasks assigned by the Leader / Manager.

Qualifications :

General requirements:

• Upper-Intermediate English communication with ability to work directly with international clients and onshore teams.
• Bachelors degree in Computer Science Information Technology or a related field.
• Likely having 3 years of DevOps / DevSecOps / SRE / Cloud Infrastructure experience
• Ability to independently investigate complex client environments with minimum guidance.
• Strong ownership troubleshooting problem-solving self-learning and security-first mindset.

Technical requirements:

• Strong hands-on experience with AWS in DevOps SRE Cloud Infrastructure or Cloud Security roles.
• Strong knowledge of AWS IAM including roles policies SCPs permission boundaries and least-privilege design.
• Experience with Wiz or similar CSPM tools such as Prisma Cloud AWS Security Hub etc.
• Strong Infrastructure as Code (IaC) experience with CloudFormation strongly preferred; Terraform / CDK is a plus.
• Solid AWS networking knowledge including VPC Security Groups VPN Transit Gateway.
• Experience with multi-account / multi-environment AWS setups.
• Experience maintaining secure scalable AWS infrastructure and CI/CD workflows.
• Proficiency in scripting languages such as Python Bash or PowerShell.
• Familiarity with containers microservices and cloud deployment practices is a plus.

Nice to have:

• AWS certifications such as AWS Security Specialty Solutions Architect or DevOps Engineer Professional
• Experience with PHP applications on AWS especially during infrastructure migration or remediation is a big plus
• Familiarity with enterprise compliance security governance or regulated environments
• Experience using AI chat tools (ChatGPT Claude Gemini etc.) for research debugging and learning
• Familiarity with at least one AI coding assistant (GitHub Copilot Cursor Claude Code or similar)
• Ability to write clear contextual prompts to generate code snippets unit tests or documentation
• Awareness of AI output limitations and responsible AI use (data privacy handling of sensitive client data)

Additional Information :

Perks Youll Enjoy

• Working in one of the Best Places to Work in Vietnam
• Building large-scale & global software products
• Working & growing with Passionate & Talented Team
• Diverse careers opportunities with Software Outsourcing Software Product Development IT Solutions & Consulting
• Attractive Salary and Benefits
• Performance appraisals every year and performance bonus
• Onsite opportunities: short-term and long-term assignments in North American (U.S Canada) Europe Asia.
• Flexible working time
• Various training on hot-trend technologies best practices and soft skills
• Premium healthcare insurance for you and your loved ones
• Company trip big annual year-end party every year team building etc.
• Fitness & sport activities: football tennis table-tennis badminton yoga swimming
• Joining community development activities: 1% Pledge charity every quarter blood donation public seminars career orientation talks
• Free in-house entertainment facilities (foosball ping pong gym) coffee and snack (instant noodles cookies candies)

And much more join us and let yourself explore other fantastic things!

Remote Work :

No

Employment Type :

Full-time

Department / Functional Area: Engineering
Experience: years
Vacancy: 1