Smartlog

Tóm tắt công việc

We are looking for an experienced and versatile Senior DevSecOps Engineer to design,implement, and secure our cloud infrastructure and deployment pipelines across logistics technology platforms (WMS, TMS, OMS, and eCommerce integrations).

This role combines expertise in DevOps practices, cloud architecture, and application security (DevSecOps). You will ensure reliability, scalability, and compliance of production systems while maintaining security best practices across CI/CD, infrastructure, and application layers.

The ideal candidate has a strong AWS background, a solid understanding of container orchestration, and a security-first mindset.

Key Responsibilities

1. Infrastructure Management

● Architect, deploy, and maintain highly available, scalable, and secure AWS environments for logistics SaaS applications.

● Implement Infrastructure as Code (IaC) using tools like AWS CloudFormation,Terraform, or CDK.

● Manage and optimize VPCs, subnets, security groups, EC2, S3, RDS (PostgreSQL),and ElasticSearch clusters.

● Design multi-environment infrastructure (dev, staging, prod) with proper isolation,monitoring, and cost optimization.
 

2. CI/CD and Automation

● Build and maintain CI/CD pipelines for application and infrastructure deployments using tools like Jenkins, GitHub Actions, CircleCI, or AWS CodePipeline.

● Standardize deployment processes across backend, frontend, and microservices.

● Integrate testing and security validation into pipelines (static code analysis, dependency scanning, secret detection).

● Ensure zero-downtime deployments and support frequent release cycles in agile development environments.
 

3. Containerization and Orchestration

● Design and manage containerized applications using Docker, Kubernetes, AWS ECS, and EKS.

● Set up autoscaling policies, resource quotas, and health checks for high availability.

● Manage container image scanning and secure image registries.
 

4. Monitoring, Logging & Observability

● Implement and maintain monitoring systems (Prometheus, Grafana, CloudWatch, Telegraf, InfluxDB).

● Configure centralized logging (Elastic Stack/EFK, Graylog, Loki) and APM tools (New Relic, Datadog, or Sentry).

● Establish alerting rules for system health, latency, and security events.

● Provide actionable visibility into production performance and reliability metrics.

5. Security

● Integrate security practices into DevOps pipelines.

● Conduct regular vulnerability assessments and patch management across environments.

● Implement identity and access management (IAM) best practices — least privilege, role-based access, MFA enforcement.

● Ensure compliance with security frameworks (OWASP, ISO 27001, SOC 2).

● Protect data integrity and privacy for sensitive logistics and customer data.

● Support incident response and post-mortem analysis.

6. Cost Management & Optimization

● Continuously monitor and analyze AWS usage, identifying opportunities for cost reduction and efficiency gains.

● Implement autoscaling, rightsizing, and lifecycle policies for EC2, RDS, S3, and Kubernetes clusters.

● Use AWS Cost Explorer, Budgets, and CloudWatch Metrics to track and forecast spend.

● Define and enforce tagging strategies for cost visibility by environment, team, or project.

● Optimize data storage and retention across logs, snapshots, and backups to reduce overhead.

● Collaborate with engineering and product teams to balance cost vs performance trade-offs.

● Produce monthly cost reports and recommendations for leadership on optimization Initiatives.

7. Database and Application Performance

● Maintain and tune PostgreSQL, Redis, Elasticsearch, or NoSQL databases for optimal performance.

● Perform query optimization, index tuning, and replication configuration for scalability and resilience.

● Support developers in analyzing query performance and troubleshooting production Bottlenecks.

8. Collaboration and Mentorship

● Work closely with Developers, QA/QC teams, and Product Managers to improve system reliability.

● Mentor junior DevOps engineers on AWS, Kubernetes, and CI/CD best practices.

● Participate in sprint planning, release readiness reviews, and production deployment planning.

• Salary: Based on competency

• Meal allowance: 20,000 VND/day according to actual working days; free parking

• 13th-month salary and performance bonus (depending on the company’s business results)

• Career advancement opportunities to expand personal capabilities

• Comprehensive training programs in logistics, supply chain, digital skills, systems thinking, project management, consulting skills, problem-solving, logical thinking, etc., conducted weekly and monthly

• Sports support: Running club, badminton, football

• Annual leave and public holidays in accordance with labor laws

• Full employee benefits as regulated by Vietnamese labor law (Social Insurance, Health Insurance, Unemployment Insurance, etc.)

• Participation in various company activities: Birthday celebrations, teambuilding, International Women’s Day (8/3), Vietnamese Women’s Day (20/10), Mid-Autumn Festival, Christmas, etc.

• Opportunity to experience digital transformation in logistics with top-tier enterprises in Vietnam in sectors such as retail, FMCG, F&B, etc.
 

Requirements

Education

● Bachelor’s degree in Computer Science, Information Systems, or equivalent technical field.

Experience

● 5–6 years of hands-on DevOps or Cloud Engineering experience, preferably in SaaS, logistics, or eCommerce systems.

● At least 4+ years of experience working with AWS cloud services.

● Proven experience with infrastructure automation, CI/CD pipelines, and container orchestration.

● Hands-on experience in .NET, NodeJS, or Python environments and microservices architectures.

Technical Skills

● Deep knowledge of AWS (EC2, RDS, Lambda, ECS/EKS, S3, VPC, CloudFormation,IAM).

● Proficiency in Docker, Kubernetes, and related orchestration technologies.

● Strong understanding of networking, load balancing, and DNS routing.

● Skilled in Git, Gitflow, and branching strategies.

● Monitoring and logging experience with Prometheus, Grafana, CloudWatch, ELK/EFK,or Datadog.

● Experience securing infrastructure and applications using OWASP, CIS benchmarks,and IAM best practices.

● Knowledge of SQL/NoSQL databases, database performance tuning, and security hardening.

● Familiarity with Agile, Scrum, and continuous delivery principles.

Soft Skills

● Strong analytical and troubleshooting abilities.

● Calm and collaborative approach under pressure.

● Excellent communication skills, both technical and non-technical.

● Strong problem-solving attitude with ownership mindset.

Preferred Certifications

● AWS Certified Solutions Architect (Associate or Professional)

● CKA / CKAD (Certified Kubernetes Administrator / Developer)

● Security+ or AWS Security Specialty