Middle DevOps Engineer AWS, IAM/CloudFormation

Top 3 Reasons To Join Us Inspired Leadership Team and Talented Colleagues Attractive Salary and Benefits Hybrid mode available and flexible working time The Job

• Work directly with global clients and onshore SRE / Platform teams to investigate AWS environments and propose DevOps / cloud security solutions.
• Analyze and remediate AWS security findings, including misconfigurations, exposed credentials, overly permissive IAM policies, and related vulnerabilities.
• Design, implement, and review AWS IAM policies, roles, SCPs, and permission boundaries following least-privilege principles.
• Drive structured remediation workflows across multiple AWS accounts and environments.
• Contribute to or review Infrastructure as Code, especially CloudFormation, for repeatable and auditable remediation.
• Maintain and improve secure, scalable AWS infrastructure in multi-account / multi-environment setups.
• Join architecture discussions and provide recommendations on AWS security, reliability, and best practices.
• Support automation or AI-assisted workflows to improve remediation efficiency.
• Perform other tasks assigned by the Leader / Manager.

Your Skills and Experience

General requirements:

• Intermediate English communication, with ability to work directly with international clients and onshore teams.
• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Likely having 3 - 4 years of DevOps / SRE / Cloud Infrastructure experience
• Ability to independently investigate complex client environments with minimum guidance.
• Strong ownership, troubleshooting, problem-solving, self-learning, and security-first mindset.

Technical requirements:

• Strong hands-on experience with AWS in DevOps, SRE, Cloud Infrastructure, or Cloud Security roles.
• Strong knowledge of AWS IAM, including roles, policies, SCPs, permission boundaries, and least-privilege design.
• Experience with Wiz or similar CSPM tools such as Prisma Cloud, AWS Security Hub, etc.
• Strong Infrastructure as Code (IaC) experience, with CloudFormation strongly preferred; Terraform / CDK is a plus.
• Solid AWS networking knowledge, including VPC, Security Groups, VPN, Transit Gateway.
• Experience with multi-account / multi-environment AWS setups.
• Experience maintaining secure, scalable AWS infrastructure and CI/CD workflows.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Familiarity with containers, microservices, and cloud deployment practices is a plus.

Nice to have:

• AWS certifications such as AWS Security Specialty, Solutions Architect, or DevOps Engineer Professional
• Experience with PHP applications on AWS, especially during infrastructure migration or remediation is a big plus
• Familiarity with enterprise compliance, security governance, or regulated environments
• Experience using AI chat tools (ChatGPT, Claude, Gemini, etc.) for research, debugging, and learning
• Familiarity with at least one AI coding assistant (GitHub Copilot, Cursor, Claude Code, or similar)
• Ability to write clear, contextual prompts to generate code snippets, unit tests, or documentation
• Awareness of AI output limitations and responsible AI use (data privacy, handling of sensitive client data)

Why You'll Love Working Here

Want to be the Best? Join KMS!
It’s positive to claim we’re one of the top IT companies in Vietnam:

• From Vietnam, we have crafted brilliant products for millions of global users
• We build awesome global products to conquer the world from Vietnam: QASymphony, Kobiton, Katalon, Grove HR, Visily and many more to come
• We’re committed to investing in our people and building a workplace you’ll love coming to every day.

Perks You'll Enjoy 

• Working in one of the Best Places to Work in Vietnam
• Building large-scale & global software products
• Working & growing with Passionate & Talented Team
• Diverse careers opportunities with Software Outsourcing, Software Product Development, IT Solutions & Consulting
• Attractive Salary and Benefits
• Performance appraisals every year and performance bonus
• Remote work available and flexible working time
• Onsite opportunities: short-term and long-term assignments in North American (U.S, Canada), Europe, Asia.
• Various training on hot-trend technologies, best practices and soft skills
• Premium healthcare insurance for you and your loved ones
• Company trip, big annual year-end party every year, team building, etc.
• Fitness & sport activities: football, tennis, table-tennis, badminton, yoga, swimming…
• Joining community development activities: 1% Pledge, charity every quarter, blood donation, public seminars, career orientation talks,…
• Free in-house entertainment facilities (foosball, ping pong, gym…), coffee, and snack (instant noodles, cookies, candies…)

And much more, join us and let yourself explore other fantastic things!