Cloud Engineer

Job Vacancy:
Position: Cloud Engineer
Level: Middle - Senior
Working model: Fulltime
Location: District 3, Ho Chi Minh City
Job Description:
As a Cloud Engineer, you will work with cross-functional teams to design, build, test, integrate, monitor, manage, and continuously improve hybrid IT infrastructure, with strong emphasis on Linux platform administration, AWS cloud infrastructure, and infrastructure automation across on-premises data centre environments and public cloud platforms.
The role ensures infrastructure, networking, security controls, and services are compliant with the Client's Hybrid Infrastructure and Landing Zone standards from the perspectives of policy, security, governance, regulatory requirements, and operational best practices, with a focus on operational reliability, automation-first operations, lifecycle management, and secure cloud operations.
General / Hybrid Infrastructure
Provide technical guidance and mentoring to less experienced peers in hybrid, Linux-based, and AWS infrastructure operations.
Act as a consultant to business users, engineering teams, and vendors on best practices for deploying and operating workloads across on-premises and cloud platforms.
Work closely with infrastructure, application, security, and architecture teams to provide operational and supportability inputs into solution and platform design.
Support the standardisation of hybrid infrastructure patterns, including compute, storage, networking, identity, security, monitoring, and Linux OS baselines.
AWS Cloud Infrastructure Management
Deploy, manage, and maintain AWS infrastructure services including EC2, VPC, S3, EBS, RDS, Route 53, Elastic Load Balancing, Auto Scaling Groups, CloudFront, Lambda, IAM, KMS, and CloudWatch.
Design and support scalable, secure, and reliable AWS environments for application, infrastructure, and platform workloads.
Configure and troubleshoot AWS networking components including VPCs, subnets, route tables, security groups, network ACLs, NAT gateways, VPN connectivity, and hybrid connectivity patterns.
Support AWS account/resource governance, tagging standards, inventory management, cost awareness, capacity planning, and operational reporting.
Assist in cloud migration, workload onboarding, and post-deployment operational handover activities.
Automation & Engineering
Develop and maintain automation scripts and job workflows to improve consistency, efficiency, and manageability of hybrid and AWS environments.
Automate infrastructure and operating system tasks using Ansible and AWX.
Implement declarative Infrastructure as Code with Terraform and/or AWS CloudFormation across on-premises and cloud environments.
Create reusable, enterprise-level automation and IaC templates for Linux virtual machines, AWS services, network and security configurations, platform services, and monitoring/logging setups.
Integrate Ansible/AWX and Terraform workflows into CI/CD pipelines to support controlled and auditable infrastructure changes.
Use scripting and cloud CLI tools to automate recurring operational tasks, validation checks, and remediation activities.
Governance, Security & Compliance
Partner with Enterprise Architects to conduct architecture and compliance assessments and endorse deployments for target environments.
Work with Security & Governance teams to ensure infrastructure workloads align with security baselines, identity and access control requirements, and regulatory or internal standards.
Implement policy-as-code and automated compliance validation mechanisms across hybrid and AWS environments.
Create and maintain automated checks for security controls, IAM permissions, access management, configuration drift, encryption, logging, and governance adherence.
Support AWS security services and practices such as IAM least privilege, KMS encryption, CloudTrail auditing, AWS Config rules, Security Hub, GuardDuty, WAF, and vulnerability remediation where applicable.
CI/CD, Monitoring & Operations
Collaborate with change management teams to support auditable and monitored CI/CD pipelines with gated approvals and release traceability.
Design, deploy, and maintain monitoring, logging, and alerting solutions aligned to Linux, hybrid, and AWS workloads.
Perform operational monitoring, diagnostics, and root cause analysis using metrics, logs, and events from tools such as CloudWatch, CloudTrail, AWS Config, OS logs, and enterprise monitoring platforms.
Respond to and troubleshoot production incidents, outages, and performance issues across hybrid and AWS environments.
Support Business Continuity and Disaster Recovery (BCP/DR) planning, automation, testing, and validation for critical infrastructure services.
Key Deliverables
Standardised hybrid infrastructure, AWS cloud, and Linux OS baselines.
Infrastructure as Code implementations using Terraform and/or AWS CloudFormation.
Configuration management and job automation using Ansible/AWX.
Policy-as-Code guardrails supporting security, compliance, and risk mitigation.
CI/CD pipeline integration for infrastructure automation.
Centralised monitoring, logging, alerting, and reporting dashboards.
Documented operational procedures, automation playbooks, AWS administration runbooks, and DR plans.
Reusable AWS infrastructure templates for compute, storage, networking, IAM, monitoring, and security controls.
Job Requirements:
Must have
3 to 5 years of hands-on experience in AWS administration, cloud engineering, or hybrid infrastructure operations.
Strong experience in hybrid infrastructure environments across on-premises and cloud platforms.
Hands-on AWS infrastructure experience across EC2, VPC, S3, EBS, RDS, Route 53, ELB/ALB, Auto Scaling, CloudFront, Lambda, IAM, KMS, CloudWatch, CloudTrail, and AWS Config.
Strong Linux system administration skills; Windows administration experience as a secondary skill.
Experience with virtualisation platforms such as VMware and storage/backup concepts.
Solid understanding of networking fundamentals including DNS, TCP/IP, HTTP/S, firewalls, subnetting, routing, VPN, load balancing, and network segmentation.
Hands-on experience with Ansible and AWX for infrastructure and OS automation.
Working experience with Terraform for Infrastructure as Code.
Experience with CI/CD tools such as Azure DevOps, Jenkins, GitHub Actions, GitLab CI/CD, and Git.
Scripting skills using Bash, Python, PowerShell, AWS CLI, and other cloud CLI tools.
Familiarity with identity management, IAM, security controls, governance, audit, and compliance in regulated environments.
Understanding of cloud monitoring, logging, performance analysis, cost optimisation, and operational dashboarding.
Strong technical documentation, stakeholder engagement, troubleshooting, and collaboration skills.
Soft skills
Strong troubleshooting, analytical thinking, and root cause analysis capability.
Ability to communicate technical risks, operational impact, and remediation plans clearly.
Good documentation discipline for runbooks, SOPs, diagrams, and audit evidence.
Ability to work with cross-functional teams including application, security, architecture, vendors, and business stakeholders.
Able to prioritise incidents, service requests, compliance tasks, and project deliverables in a production environment.
Continuous learning mindset with willingness to improve cloud, automation, security, and operations practices.
Nice to have
Experience with AWS CloudFormation.
Experience with AWS Organizations, Control Tower, Landing Zone, multi-account governance, or similar enterprise cloud governance models.
Experience with container platforms and cloud-native services such as Docker, ECS, EKS, or Kubernetes.
Knowledge of AWS Security Hub, GuardDuty, WAF, Inspector, Backup, Systems Manager, and Secrets Manager.
FinOps or AWS cost optimisation exposure, including tagging, budget monitoring, and rightsizing.
Experience supporting hybrid cloud connectivity between AWS, Azure, VMware, and on-premises environments.
Exposure to backup, high availability, disaster recovery, and resilience testing for cloud workloads.
Certifications (preferred)
AWS Certified SysOps Administrator - Associate (Recommended)
DevOps-related certifications (Recommended)
ITIL Foundation (Recommended)
Linux or automation-related certifications (Recommended)
AWS Certified Solutions Architect - Associate (Good to have)
AZ-104 - Azure Administrator (Good to have)
Compensation & Benefits:
A competitive compensation and benefits package will be offered and discussed during the interview process.
Send us your CV to email: [protected info]
Job Type: Full-time
Pay: Up to 50,000,000₫ per month
Work Location: In person