[IT Product] DevSecOps Engineer/ Site Reliability Engineer (Head of Department / Expert / Senior Specialist)

About Us
+ We are a technology-driven company focused on developing intelligent digital platforms. Our operations are centered around three core pillars: Travel & Hospitality, Transportation Services, and Technology & Data.
+ Through our solutions, we aim to deliver a seamless, modern, and personalized experience in travel, mobility, and accommodation. By leveraging AI, big data, and integrated technologies, we are building a connected and sustainable product ecosystem.
+ Our ultimate goal is to become Vietnam's leading digital services ecosystem, strong enough to compete with international platforms.
*** Role Purpose
The DEV/SEC/Ops function (Development, Security, and Operations) ensures that all product systems and platforms are reliable, secure, scalable, and cost-efficient, enabling smooth product delivery and safeguarding business operations.
This role covers infrastructure management, security compliance, continuous integration & deployment (CI/CD), and operational excellence across multiple product lines.
*** Key Responsibilities
1. Infrastructure & Operations
• Design, implement, and manage cloud infrastructure (AWS, GCP, Azure) and on-premises environments.
• Develop and maintain CI/CD pipelines to streamline development and deployment.
• Implement and manage Infrastructure as Code (IaC) using tools such as Terraform or Ansible.
• Monitor systems for performance, availability, and scalability using Prometheus, Grafana, ELK, or equivalent.
• Manage cost optimization and resource efficiency across infrastructure and services.
• Ensure high availability (HA) and design disaster recovery (DRP) strategies.
2. Security & Compliance
• Implement security best practices for cloud-native and hybrid environments.
• Conduct vulnerability assessments, penetration testing, and security audits.
• Manage access control, encryption, and identity management (IAM).
• Ensure compliance with international standards (e.g., ISO 27001, GDPR, PCI DSS).
• Coordinate incident response and ensure quick recovery from security breaches.
3. Product Enablement
• Collaborate with product and engineering teams to deploy new features securely and efficiently.
• Automate workflows and testing to accelerate product releases.
• Provide technical support for developers and product managers regarding DevSecOps practices.
• Document processes, create operational playbooks, and share knowledge internally.
4. Innovation & Continuous Improvement
• Research and adopt emerging technologies in DevOps, SecOps, and Cloud engineering.
• Drive continuous improvement initiatives for system reliability, security, and performance.
• Proactively recommend and implement process and tool improvements.
---
*** Responsibilities by Job Level
- Department Manager (Head of DEV/SEC/Ops)
• Define the overall DevSecOps strategy aligned with company technology roadmap.
• Lead and mentor a team of DevOps/SecOps engineers and specialists.
• Oversee operational KPIs (uptime, incident response, security posture).
• Manage team resources, hiring, and professional development.
• Report system performance, risks, and improvement plans to senior leadership.
- Expert (Product Development - DEV/SEC/Ops)
• Act as a Subject Matter Expert (SME) for DevOps, security, and operations practices.
• Design and implement advanced CI/CD frameworks, IaC, and cloud-native security solutions.
• Provide technical consultancy and solutions to product teams.
• Mentor junior and mid-level engineers on DevSecOps best practices.
• Serve as escalation point for complex operational or security issues.
- Senior Specialist (Product Development - DEV/SEC/Ops)
• Execute daily DevOps and SecOps tasks: monitoring, deployment, troubleshooting.
• Build and maintain CI/CD pipelines and infrastructure scripts.
• Handle incident response and root cause analysis.
• Ensure product features are deployed safely and in line with security requirements.
• Collaborate closely with developers to integrate secure coding and deployment practices.