DevOps Engineer (AWS / SRE, English)

Company Description
KMS Technology is a strategic engineering company helping businesses turn bold ideas into high-impact solutions-faster. Founded in 2009 as a U.S.-based services company, we've grown into a global organization with locations in the US, Vietnam, Mexico and Poland. KMS is trusted globally for the quality of our engineering and consulting services. We bring deep expertise in product development and quality assurance, Data & AI-native engineering, and delivery excellence to every engagement. Our mission is to help customers build what's next-accelerating innovation, crafting brilliant solutions, and creating real-world impact. At KMS, we believe sustainable growth is built on the success of our clients and employees, and in making a lasting contribution to our communities.
More about KMS Technology:
Website: [protected info]
LinkedIn: [protected info]
Job Description
Work directly with global clients and onshore SRE / Platform teams to investigate AWS environments and propose DevOps / cloud security solutions.
Analyze and remediate AWS security findings, including misconfigurations, exposed credentials, overly permissive IAM policies, and related vulnerabilities.
Design, implement, and review AWS IAM policies, roles, SCPs, and permission boundaries following least-privilege principles.
Drive structured remediation workflows across multiple AWS accounts and environments.
Contribute to or review Infrastructure as Code, for repeatable and auditable remediation.
Maintain and improve secure, scalable AWS infrastructure in multi-account / multi-environment setups.
Join architecture discussions and provide recommendations on AWS security, reliability, and best practices.
Support automation or AI-assisted workflows to improve remediation efficiency.
Perform other tasks assigned by the Leader / Manager.
Qualifications
General requirements:
At least Intermediate English communication, with ability to work directly with international clients and onshore teams.
Bachelor's degree in Computer Science, Information Technology, or a related field.
Likely having 2+ years of DevOps / DevSecOps / SRE experience
Ability to independently investigate complex client environments with minimum guidance.
Strong ownership, troubleshooting, problem-solving, self-learning, and security-first mindset.
Technical requirements:
Strong hands-on experience with AWS in DevOps, SRE, Cloud Infrastructure, or Cloud Security roles.
Knowledge of AWS IAM, including roles, policies, SCPs, permission boundaries, and least-privilege design.
Experience with Wiz or similar CSPM tools such as Prisma Cloud, AWS Security Hub, etc.
Strong Infrastructure as Code (IaC) experience, with Terraform / CloudFormation / CDK.
Solid AWS networking knowledge, including VPC, Security Groups, VPN, Transit Gateway.
Experience with multi-account / multi-environment AWS setups.
Experience maintaining secure, scalable AWS infrastructure and CI/CD workflows.
Proficiency in scripting languages such as Python, Bash, or PowerShell.
Familiarity with containers, microservices, and cloud deployment practices is a plus.
Nice to have:
AWS certifications such as AWS Security Specialty, Solutions Architect, or DevOps Engineer Professional
Familiarity with enterprise compliance, security governance, or regulated environments
Experience using AI chat tools (ChatGPT, Claude, Gemini, etc.) for research, debugging, and learning
Familiarity with at least one AI coding assistant (GitHub Copilot, Cursor, Claude Code, or similar)
Ability to write clear, contextual prompts to generate code snippets, unit tests, or documentation
Awareness of AI output limitations and responsible AI use (data privacy, handling of sensitive client data)
Additional Information
Perks You'll Enjoy
Working in one of the Best Places to Work in Vietnam
Building large-scale & global software products
Working & growing with Passionate & Talented Team
Diverse careers opportunities with Software Outsourcing, Software Product Development, IT Solutions & Consulting
Attractive Salary and Benefits
Performance appraisals every year and performance bonus
Onsite opportunities: short-term and long-term assignments in North American (U.S, Canada), Europe, Asia.
Flexible working time
Various training on hot-trend technologies, best practices and soft skills
Premium healthcare insurance for you and your loved ones
Company trip, big annual year-end party every year, team building, etc.
Fitness & sport activities: football, tennis, table-tennis, badminton, yoga, swimming...
Joining community development activities: 1% Pledge, charity every quarter, blood donation, public seminars, career orientation talks,...
Free in-house entertainment facilities (foosball, ping pong, gym...), coffee, and snack (instant noodles, cookies, candies...)
And much more, join us and let yourself explore other fantastic things!