Mô tả công việc
Tóm tắt công việc
Work directly with global clients and onshore SRE / Platform teams to investigate AWS environments and propose DevOps / cloud security solutions.
Analyze and remediate AWS security findings, including misconfigurations, exposed credentials, overly permissive IAM policies, and related vulnerabilities.
Design, implement, and review AWS IAM policies, roles, SCPs, and permission boundaries following least-privilege principles.
Drive structured remediation workflows across multiple AWS accounts and environments.
Contribute to or review Infrastructure as Code, especially CloudFormation, for repeatable and auditable remediation.
Maintain and improve secure, scalable AWS infrastructure in multi-account / multi-environment setups.
Join architecture discussions and provide recommendations on AWS security, reliability, and best practices.
Support automation or AI-assisted workflows to improve remediation efficiency.
Perform other tasks assigned by the Leader / Manager.
Want to be the Best? Join KMS!
It's positive to claim we're one of the top IT companies in Vietnam:
From Vietnam, we have crafted brilliant products for millions of global users
We build awesome global products to conquer the world from Vietnam: QASymphony, Kobiton, Katalon, Grove HR, Visily and many more to come
We're committed to investing in our people and building a workplace you'll love coming to every day.
Perks You'll Enjoy
Working in one of the Best Places to Work in Vietnam
Building large-scale & global software products
Working & growing with Passionate & Talented Team
Diverse careers opportunities with Software Outsourcing, Software Product Development, IT Solutions & Consulting
Attractive Salary and Benefits
Performance appraisals every year and performance bonus
Remote work available and flexible working time
Onsite opportunities: short-term and long-term assignments in North American (U.S, Canada), Europe, Asia.
Various training on hot-trend technologies, best practices and soft skills
Premium healthcare insurance for you and your loved ones
Company trip, big annual year-end party every year, team building, etc.
Fitness & sport activities: football, tennis, table-tennis, badminton, yoga, swimming...
Joining community development activities: 1% Pledge, charity every quarter, blood donation, public seminars, career orientation talks,...
Free in-house entertainment facilities (foosball, ping pong, gym...), coffee, and snack (instant noodles, cookies, candies...)
And much more, join us and let yourself explore other fantastic things!
Yêu cầu
General requirements:
Intermediate English communication, with ability to work directly with international clients and onshore teams.
Bachelor's degree in Computer Science, Information Technology, or a related field.
Likely having 3 - 4 years of DevOps / SRE / Cloud Infrastructure experience
Ability to independently investigate complex client environments with minimum guidance.
Strong ownership, troubleshooting, problem-solving, self-learning, and security-first mindset.
Technical requirements:
Strong hands-on experience with AWS in DevOps, SRE, Cloud Infrastructure, or Cloud Security roles.
Strong knowledge of AWS IAM, including roles, policies, SCPs, permission boundaries, and least-privilege design.
Experience with Wiz or similar CSPM tools such as Prisma Cloud, AWS Security Hub, etc.
Strong Infrastructure as Code (IaC) experience, with CloudFormation strongly preferred; Terraform / CDK is a plus.
Solid AWS networking knowledge, including VPC, Security Groups, VPN, Transit Gateway.
Experience with multi-account / multi-environment AWS setups.
Experience maintaining secure, scalable AWS infrastructure and CI/CD workflows.
Proficiency in scripting languages such as Python, Bash, or PowerShell.
Familiarity with containers, microservices, and cloud deployment practices is a plus.
Nice to have:
AWS certifications such as AWS Security Specialty, Solutions Architect, or DevOps Engineer Professional
Experience with PHP applications on AWS, especially during infrastructure migration or remediation is a big plus
Familiarity with enterprise compliance, security governance, or regulated environments
Experience using AI chat tools (ChatGPT, Claude, Gemini, etc.) for research, debugging, and learning
Familiarity with at least one AI coding assistant (GitHub Copilot, Cursor, Claude Code, or similar)
Ability to write clear, contextual prompts to generate code snippets, unit tests, or documentation
Awareness of AI output limitations and responsible AI use (data privacy, handling of sensitive client data)
Thông tin khác
DevOps
AWS
AWS CloudFormation
PHP
VPN
PowerShell
Python
Unit testing
Networking
VPC
Bash
Microservices
Terraform
Cloud Infrastructure
IaC
CI/CD
IAM
ChatGPT
Gemini
Prisma
Claude
GitHub Copilot
Cursor
Thông tin chung