Senior Cloud, DevOps & Hybrid Infrastructure Engineer

Trách nhiệm chính

• Design, deploy and maintain separate Development, QA/UAT and Production environments with appropriate configuration, access controls, deployment processes and operational safeguards.
• Design and support region-based cloud deployments, considering availability, latency, data residency, regulatory requirements, disaster recovery and regional service constraints.
• Implement and maintain infrastructure security controls, including IAM/role-based access, secrets and key management, firewall/security-group rules, TLS/certificates, network segmentation, vulnerability hardening, logging and audit controls.
• Design secure public and private cloud networks, including VPCs, subnets, routing, NAT, load balancers and DNS.
• Maintain Linux servers, Docker hosts and containerised application environments.
• Develop and maintain CI/CD pipelines and deployment automation.
• Configure and maintain Nginx/reverse-proxy services, HTTPS/TLS and certificate management.
• Design and support secure connectivity between cloud and on-premises environments, including Site-to-Site VPN/IPSec and private network connectivity.
• Support on-premises servers, network devices and local application infrastructure.
• Support network requirements for REST APIs, WebSocket/WSS and WebRTC-based applications.
• Monitor infrastructure and application availability, performance and capacity.
• Support operational aspects of MySQL, MongoDB and Redis, including access, monitoring, backup and recovery.
• Review infrastructure security regularly and support remediation of configuration weaknesses, excessive privileges, exposed services and other security risks across cloud and on-premises environments.
• Troubleshoot production issues across cloud, operating-system, container and network layers.
• Maintain infrastructure documentation, network diagrams, runbooks and recovery procedures.
• Improve infrastructure reliability and reduce manual operational work through practical automation.
• Research, evaluate and learn new cloud, DevOps, security, networking and infrastructure technologies; build practical proofs of concept where appropriate and recommend improvements that can be adopted safely by the engineering team.

Yêu cầu công việc

• 5+ years of infrastructure, systems engineering, DevOps, SRE or cloud-engineering experience.
• Strong hands‑on experience with AWS or another major public‑cloud platform.
• Strong Linux administration skills.
• Strong experience with Docker and containerised applications.
• Good practical networking knowledge, including TCP/IP, subnetting, routing, DNS, NAT, firewalls and VPNs.
• Experience with load balancers and reverse proxies such as Nginx.
• Experience implementing or supporting CI/CD pipelines.
• Experience troubleshooting production infrastructure and connectivity issues.
• Good hands‑on understanding of infrastructure security, including least‑privilege access, IAM/RBAC, secrets management, firewall/security‑group policies, TLS/certificate management, network segmentation and secure configuration practices.
• Experience designing or operating isolated Development, QA/UAT and Production environments with controlled promotion and deployment between environments.
• Understanding of region‑based cloud architecture, including availability zones/regions, data residency, latency, resilience and disaster‑recovery considerations.
• Experience using Git‑based engineering workflows.
• Bachelor’s degree in Computer Science, Information Technology, Network Engineering or a related discipline, or equivalent practical industry experience.

Yêu cầu ưu tiên

• Alibaba Cloud services such as ECS, VPC, SLB/ALB, RDS, RAM, CloudMonitor, NAT Gateway and VPN Gateway.
• AWS services such as VPC, EC2, ECS/EKS, ALB/NLB, RDS, IAM, CloudWatch, Route 53 and Site‑to‑Site VPN.
• Terraform, Ansible or other infrastructure‑as‑code/configuration‑management tools.
• Kubernetes and Helm.
• GitHub Actions, Jenkins, GitLab CI or similar CI/CD tooling.
• Direct Connect, Alibaba Express Connect or comparable private connectivity.
• Prometheus, Grafana, ELK/OpenSearch or similar monitoring/observability tools.
• WebSocket/WSS networking and WebRTC concepts such as STUN, TURN, UDP and NAT traversal.
• Hybrid/on‑premises infrastructure involving physical servers, switches, firewalls or specialised equipment.

Mức lương

• Thỏa thuận

Thông tin khác

• Location: 3 Nguyen Co Thach Street, An Khanh, Ho Chi Minh, Vietnam.
• Company: VISION Advisory & Analytics.
• Only shortlisted candidates will be contacted for the next stage of the recruitment process.