DevOps Engineer (3+ YOE, AWS)

Job Description

• Analyze and remediate AWS security findings, including misconfigurations, exposed credentials, overly permissive IAM policies, and related vulnerabilities.
• Design, implement, and review AWS IAM policies, roles, SCPs, and permission boundaries following least-privilege principles.
• Drive structured remediation workflows across multiple AWS accounts and environments.
• Contribute to or review Infrastructure as Code, especially CloudFormation, for repeatable and auditable remediation.
• Maintain and improve secure, scalable AWS infrastructure in multi-account / multi-environment setups.
• Join architecture discussions and provide recommendations on AWS security, reliability, and best practices.
• Support automation or AI-assisted workflows to improve remediation efficiency.
• Perform other tasks assigned by the Leader / Manager.

Qualifications

General requirements:

• Likely having 3+ years of DevOps / SRE / Cloud Infrastructure experience
• Intermediate English communication, with ability to work directly with international clients and onshore teams.
• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Ability to independently investigate complex client environments with minimum guidance.
• Strong ownership, troubleshooting, problem-solving, self-learning, and security-first mindset.

Technical requirements:

• Strong hands-on experience with AWS in DevOps, SRE, Cloud Infrastructure, or Cloud Security roles.
• Strong knowledge of AWS IAM, including roles, policies, SCPs, permission boundaries, and least-privilege design.
• Experience with Wiz or similar CSPM tools such as Prisma Cloud, AWS Security Hub, etc.
• Strong Infrastructure as Code (IaC) experience, with CloudFormation strongly preferred; Terraform / CDK is a plus.
• Solid AWS networking knowledge, including VPC, Security Groups, VPN, Transit Gateway.
• Experience with multi-account / multi-environment AWS setups.
• Experience maintaining secure, scalable AWS infrastructure and CI/CD workflows.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Familiarity with containers, microservices, and cloud deployment practices is a plus.

Nice to have:

• AWS certifications such as AWS Security Specialty, Solutions Architect, or DevOps Engineer Professional
• Experience with PHP applications on AWS, especially during infrastructure migration or remediation is a big plus
• Familiarity with enterprise compliance, security governance, or regulated environments
• Experience using AI chat tools (ChatGPT, Claude, Gemini, etc.) for research, debugging, and learning
• Familiarity with at least one AI coding assistant (GitHub Copilot, Cursor, Claude Code, or similar)
• Ability to write clear, contextual prompts to generate code snippets, unit tests, or documentation
• Awareness of AI output limitations and responsible AI use (data privacy, handling of sensitive client data)

For more information, contact: 0389 910 169 (Nguyen Hieu Ngan).