Senior/Lead DevOps Engineer ( Good ENG)

About Trustify Technology
Trustify Technology is a fast-growing software engineering and digital transformation company providing AI-driven software development, verification & validation, and automation solutions for global clients across the US, UK/EU, Japan, and Singapore.
Trustify aims to be the top-tier technology outsourcing partner from Vietnam, combining human expertise with AI power to deliver high-quality, cost-effective solutions.
About the DevOps Lead Position
We are building a new product from the ground up using a modern AWS Serverless-first architecture, and we are looking for a DevOps Lead to establish and grow our DevOps function. This is a leadership role: you will build and lead the DevOps team, define the infrastructure vision, standards and roadmap, and own the reliability, security and cost-efficiency of the platform end to end.
The stack is built around CloudFront + S3 (Frontend), AppSync + Lambda (Backend API), Aurora PostgreSQL + MongoDB (Databases), with multi-tenant authentication managed at the DB layer. As the founding DevOps Lead, you will set technical direction while partnering closely with Engineering and Product leadership and reporting to the Engineering Manager / CTO.
Responsibilities
1. Team Leadership & DevOps Function Building
Build, lead and grow the DevOps team - hiring, onboarding, mentoring and performance management.
Define the DevOps vision, standards, runbooks and operational playbooks.
Establish a strong DevOps culture, shift-left security and engineering best practices across teams.
Own the infrastructure roadmap and report status, risks and roadmap to the Engineering Manager / CTO.
Plan capacity, resourcing and workload distribution; set OKRs and drive delivery for the team.
2. Infrastructure Strategy & Architecture
Own the end-to-end infrastructure architecture for the AWS Serverless-first platform.
Drive architecture decisions and maintain Architecture Decision Records (ADRs).
Set Infrastructure-as-Code standards (Terraform), CI/CD strategy and environment promotion workflows.
Oversee multi-tenant architecture patterns at the database and API layer.
3. AWS Serverless & Cloud Platform (technical direction)
Direct serverless infrastructure across AppSync, Lambda, CloudFront, S3, EventBridge/SQS/SNS and Step Functions.
Oversee database infrastructure: Aurora PostgreSQL Serverless v2, AWS DocumentDB and ElastiCache (Redis).
Guide authentication & multi-tenancy - Cognito / JWT / Lambda Authorizer, tenant isolation at network, IAM and data layers.
4. CI/CD, Reliability & Observability
Set CI/CD pipeline strategy (GitHub Actions / GitLab CI) and deployment strategies (blue/green, canary, rollback gates).
Establish monitoring and observability standards (CloudWatch, X-Ray, Logs Insights, alerting).
Own reliability, incident response and on-call processes for the platform.
5. Security, Compliance & FinOps
Define security standards - IAM least-privilege, WAF, GuardDuty, KMS, Secrets Manager, AWS Config / Security Hub.
Integrate security scanning into CI/CD (e.g. Checkov, Trivy) and drive continuous compliance.
Lead serverless cost optimization (FinOps) and platform improvement initiatives.
6. Collaboration & Stakeholder Management
Partner with development, product and security teams to embed DevOps culture and shift-left practices.
Communicate infrastructure status, risks and roadmap clearly to engineering and business leadership.
Requirements
Must-Have
5+ years of DevOps / Cloud Engineering experience, with at least 1 year in a Lead / team-leadership role (managing or mentoring a team).
Proven experience owning infrastructure end-to-end and building or leading a DevOps team/function.
Strong hands-on AWS experience - Lambda, AppSync and serverless architecture.
Proficient with Terraform for infrastructure provisioning.
Experience with Aurora PostgreSQL (Serverless v2) and MongoDB / DynamoDB in production.
CI/CD experience for serverless - GitHub Actions, GitLab CI or CodePipeline.
Strong understanding of multi-tenant architecture patterns at DB and API level.
Experience with CloudFront + S3 static hosting and CDN optimization.
Proficient with AWS IAM, Secrets Manager and KMS for security and secrets management.
Scripting skills in Python and/or Bash.
People-leadership skills - mentoring, hiring, process definition and roadmap ownership.
Good English communication skills - technical and stakeholder communication.
Nice-to-Have
AWS Certified DevOps Engineer - Professional or AWS Solutions Architect - Professional.
Knowledge of Lambda@Edge / CloudFront Functions.
Familiarity with AWS Step Functions and EventBridge for event-driven architecture.
Experience with serverless frameworks - AWS SAM, Serverless Framework.
Knowledge of row-level security (RLS) in PostgreSQL for multi-tenancy.
Experience with AWS Cognito for authentication and user pool management.
FinOps experience - serverless cost optimization, Lambda power tuning.
Previous experience building or leading a DevOps team in a greenfield project.
Your Benefits
Sponsorship for professional certification exams (AWS certifications preferred)
Flexible working hours (core time: 9:00 AM - 6:00 PM, Monday to Friday) and work-from-home policy
Healthcare: Annual health check-up, Premium Health Insurance
12 annual leaves + public holidays
13th-month salary
Bonus for excellent project performance
Year End Party (YEP), company trip, team building activities, happy hour
Snacks, coffee, tea and soft drinks available in the office
Marriage gift, sick leave support, funeral/maternity support
Lunar New Year gifts
Free parking, provided devices
Contact Us to Apply
Company: Trustify Technology JSC.
Email: [protected info]
Head Office: 307/20-21 Nguyen Van Troi, Tan Son Hoa Ward, HCMC
Website: [protected info]
Working hours: 9:00 AM - 6:00 PM, Monday - Friday