DevOps Engineer ( AWS, IAMCloudFormation, English), based in Da Nang
Department:
Job Summary
- Work directly with global clients and onshore SRE / Platform teams to investigate AWS environments and propose DevOps / cloud security solutions.
- Analyze and remediate AWS security findings including misconfigurations exposed credentials overly permissive IAM policies and related vulnerabilities.
- Design implement and review AWS IAM policies roles SCPs and permission boundaries following least-privilege principles.
- Drive structured remediation workflows across multiple AWS accounts and environments.
- Contribute to or review Infrastructure as Code especially CloudFormation for repeatable and auditable remediation.
- Maintain and improve secure scalable AWS infrastructure in multi-account / multi-environment setups.
- Join architecture discussions and provide recommendations on AWS security reliability and best practices.
- Support automation or AI-assisted workflows to improve remediation efficiency.
- Perform other tasks assigned by the Leader / Manager.
Qualifications :
General requirements:
- Upper-Intermediate English communication with ability to work directly with international clients and onshore teams.
- Bachelors degree in Computer Science Information Technology or a related field.
- Likely having 2 years of DevOps / SRE / Cloud Infrastructure experience
- Ability to independently investigate complex client environments with minimum guidance.
- Strong ownership troubleshooting problem-solving self-learning and security-first mindset.
Technical requirements:
- Strong hands-on experience with AWS in DevOps SRE Cloud Infrastructure or Cloud Security roles.
- Strong knowledge of AWS IAM including roles policies SCPs permission boundaries and least-privilege design.
- Experience with Wiz or similar CSPM tools such as Prisma Cloud AWS Security Hub etc.
- Strong Infrastructure as Code (IaC) experience with CloudFormation strongly preferred; Terraform / CDK is a plus.
- Solid AWS networking knowledge including VPC Security Groups VPN Transit Gateway.
- Experience with multi-account / multi-environment AWS setups.
- Experience maintaining secure scalable AWS infrastructure and CI/CD workflows.
- Proficiency in scripting languages such as Python Bash or PowerShell.
- Familiarity with containers microservices and cloud deployment practices is a plus.
Nice to have:
- AWS certifications such as AWS Security Specialty Solutions Architect or DevOps Engineer Professional
- Experience with PHP applications on AWS especially during infrastructure migration or remediation is a big plus
- Familiarity with enterprise compliance security governance or regulated environments
- Experience using AI chat tools (ChatGPT Claude Gemini etc.) for research debugging and learning
- Familiarity with at least one AI coding assistant (GitHub Copilot Cursor Claude Code or similar)
- Ability to write clear contextual prompts to generate code snippets unit tests or documentation
- Awareness of AI output limitations and responsible AI use (data privacy handling of sensitive client data)
Additional Information :
Perks Youll Enjoy
- Working in one of the Best Places to Work in Vietnam
- Building large-scale & global software products
- Working & growing with Passionate & Talented Team
- Diverse careers opportunities with Software Outsourcing Software Product Development IT Solutions & Consulting
- Attractive Salary and Benefits
- Performance appraisals every year and performance bonus
- Onsite opportunities: short-term and long-term assignments in North American (U.S Canada) Europe Asia.
- Flexible working time
- Various training on hot-trend technologies best practices and soft skills
- Premium healthcare insurance for you and your loved ones
- Company trip big annual year-end party every year team building etc.
- Fitness & sport activities: football tennis table-tennis badminton yoga swimming
- Joining community development activities: 1% Pledge charity every quarter blood donation public seminars career orientation talks
- Free in-house entertainment facilities (foosball ping pong gym) coffee and snack (instant noodles cookies candies)
And much more join us and let yourself explore other fantastic things!
Remote Work :
No
Employment Type :
Full-time
About Company
KMS Technology was established in 2009 as a U.S.-based software services company. With development centers in Vietnam and Mexico, we have been trusted globally for the superlative quality of our software consulting & development services, technology solutions, and engineers' expertise ... View more