Infrastructure Engineer AWS, Cloud, CI/CD

Who We Are

Arches is a global knowledge platform connecting 160,000+ experts to Fortune 500s and top investors. Founded in 2019, we have 250+ staff across 8 cities - with HCMC as our largest hub - and we are scaling to 400+ by becoming an AI-native organization. We are backed by $6M+ and certified as a Great Place to Work® Japan 2026.

ROLE OVERVIEW

Designs, builds, and operates the AWS infrastructure that supports our product, continuously improving its reliability, security, cost efficiency, and governance.

Why This Role

You'll be a founding member of a new engineering team-building culture, process, and tech stack from the ground up. This isn't a cog-in-the-machine role; it's your chance to define how a team works, what tools we adopt, and how we ship.

What's in it for you:

• Global exposure - collaborate across 15+ nationalities, with our largest hub in HCMC
• Fast-track growth - doubling in size means real leadership opportunities (Tech Lead → CTO track)
• AI-first innovation - build at the frontier, not just maintain legacy systems
• GRIT culture - Guts, Resilience, Initiative, Tenacity. We empower ownership, not titles
• Shape the future - your decisions today become the team's DNA tomorrow

Location: Ho Chi Minh City, Vietnam

RESPONSIBILITIES

• Build and operate cloud infrastructure using Infrastructure as Code (using Terraform, with changes applied through code review and CI/CD)
• Oversee multi-account governance - landing zone design and improvement via AWS Organizations / Control Tower, OU and SCP management, centralized logging and auditing
• Strengthen security and identity management - least-privilege IAM, SSO/federation, secrets management, encryption, threat detection
• Improve reliability and fault tolerance - eliminating single points of failure, high-availability and disaster-recovery design, backup/restore setup
• Optimize costs - right-sizing resources, leveraging autoscaling, cost visibility
• Build observability - metrics, alarms, dashboards, log management
• Raise engineering standards - writing design docs, runbooks, and standard rules; decision-making based on the Well-Architected Framework; incident response; mentoring team members

REQUIREMENTS

Required Qualifications

• 3+ years of experience building and operating production cloud infrastructure on AWS
• Hands-on knowledge of core AWS services across compute, data, networking, and delivery (e.g., ECS/Fargate, RDS, ElastiCache, OpenSearch, CloudFront/S3, Route 53, CloudWatch, VPC)
• Solid foundational knowledge of AWS security (IAM roles/policies/least privilege/federation/SSO, logging and auditing via CloudTrail, KMS, secure VPC network design)
• Practical cost optimization experience , having translated technical improvements into concrete cost savings
• Deep hands-on experience with Terraform or an equivalent IaC tool (including modules, state management, multi-environment/multi-account configurations, and CI/CD-based delivery)
• A careful, disciplined approach to safely changing live production systems (including change management, observability, rollback planning)

Preferred Qualifications

• Experience with AWS Organizations and multi-account strategy (including Control Tower or equivalent landing zones, OUs, and SCPs)
• AWS certifications (e.g., Solutions Architect, DevOps Engineer, Security Specialty)
• Experience migrating/isolating workloads across AWS accounts (including data migration, DNS/certificate cutover, and minimal-downtime migration strategies)
• CI/CD experience using GitHub Actions + OIDC, along with Policy as Code (e.g., OPA/Sentinel) and IaC testing
• Understanding of compliance/audit frameworks such as SOC 2 and ISO 27001
• Production experience running containerized application workloads
• English communication skills (reading, writing, and speaking)

BENEFITS

Compensation & Benefits

• Competitive base salary
• Annual Bonus - 1-month gross salary
• Paid Leave - 12 days of annual leave, plus additional paid leave for significant life events and 8 days of sick leave
• Private Medical Insurance
• Self-learning Budget - Up to $1000 per year

Career Growth

• Rapid Career Advancement - ​​Tackle challenging problems for top startups and gain skills for the global stage, with opportunities for swift promotions.
• Build a High-Caliber Network - Collaborate with and learn from top industry leaders and decision-makers, expanding valuable connections for career growth.

Engagement

• Enjoy a vibrant work environment with team activities, quarterly dinners, company trips, social gatherings, and office snacks and drinks. Support for employee well-being also includes sports clubs (badminton, golf, football, etc.)
• Flexible Work Arrangements