KMS Technology

Tóm tắt công việc

• Work directly with global clients and onshore SRE / Platform teams to investigate AWS environments and propose DevOps / cloud security solutions.
• Analyze and remediate AWS security findings, including misconfigurations, exposed credentials, overly permissive IAM policies, and related vulnerabilities.
• Design, implement, and review AWS IAM policies, roles, SCPs, and permission boundaries following least-privilege principles.
• Drive structured remediation workflows across multiple AWS accounts and environments.
• Contribute to or review Infrastructure as Code, especially CloudFormation, for repeatable and auditable remediation.
• Maintain and improve secure, scalable AWS infrastructure in multi-account / multi-environment setups.
• Join architecture discussions and provide recommendations on AWS security, reliability, and best practices.
• Support automation or AI-assisted workflows to improve remediation efficiency.
• Perform other tasks assigned by the Leader / Manager.

Want to be the Best? Join KMS!
It’s positive to claim we’re one of the top IT companies in Vietnam:

• From Vietnam, we have crafted brilliant products for millions of global users
• We build awesome global products to conquer the world from Vietnam: QASymphony, Kobiton, Katalon, Grove HR, Visily and many more to come
• We’re committed to investing in our people and building a workplace you’ll love coming to every day.

Perks You'll Enjoy 

• Working in one of the Best Places to Work in Vietnam
• Building large-scale & global software products
• Working & growing with Passionate & Talented Team
• Diverse careers opportunities with Software Outsourcing, Software Product Development, IT Solutions & Consulting
• Attractive Salary and Benefits
• Performance appraisals every year and performance bonus
• Remote work available and flexible working time
• Onsite opportunities: short-term and long-term assignments in North American (U.S, Canada), Europe, Asia.
• Various training on hot-trend technologies, best practices and soft skills
• Premium healthcare insurance for you and your loved ones
• Company trip, big annual year-end party every year, team building, etc.
• Fitness & sport activities: football, tennis, table-tennis, badminton, yoga, swimming…
• Joining community development activities: 1% Pledge, charity every quarter, blood donation, public seminars, career orientation talks,…
• Free in-house entertainment facilities (foosball, ping pong, gym…), coffee, and snack (instant noodles, cookies, candies…)

And much more, join us and let yourself explore other fantastic things!

General requirements:

• Intermediate English communication, with ability to work directly with international clients and onshore teams.
• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Likely having 3 - 4 years of DevOps / SRE / Cloud Infrastructure experience
• Ability to independently investigate complex client environments with minimum guidance.
• Strong ownership, troubleshooting, problem-solving, self-learning, and security-first mindset.

Technical requirements:

• Strong hands-on experience with AWS in DevOps, SRE, Cloud Infrastructure, or Cloud Security roles.
• Strong knowledge of AWS IAM, including roles, policies, SCPs, permission boundaries, and least-privilege design.
• Experience with Wiz or similar CSPM tools such as Prisma Cloud, AWS Security Hub, etc.
• Strong Infrastructure as Code (IaC) experience, with CloudFormation strongly preferred; Terraform / CDK is a plus.
• Solid AWS networking knowledge, including VPC, Security Groups, VPN, Transit Gateway.
• Experience with multi-account / multi-environment AWS setups.
• Experience maintaining secure, scalable AWS infrastructure and CI/CD workflows.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Familiarity with containers, microservices, and cloud deployment practices is a plus.

Nice to have:

• AWS certifications such as AWS Security Specialty, Solutions Architect, or DevOps Engineer Professional
• Experience with PHP applications on AWS, especially during infrastructure migration or remediation is a big plus
• Familiarity with enterprise compliance, security governance, or regulated environments
• Experience using AI chat tools (ChatGPT, Claude, Gemini, etc.) for research, debugging, and learning
• Familiarity with at least one AI coding assistant (GitHub Copilot, Cursor, Claude Code, or similar)
• Ability to write clear, contextual prompts to generate code snippets, unit tests, or documentation
• Awareness of AI output limitations and responsible AI use (data privacy, handling of sensitive client data)