CVCC Vận hành hệ thống CNTT (Cloud) - TA165

• Landing Zone & AWS Account Management
  • Operate and maintain VPBank’s AWS Landing Zone.
  • Manage and provision AWS accounts through Account Factory for Terraform (AFT).
  • Enforce governance policies, including SCP, RCP, and AWS Organization features.
• Infrastructure & Networking
  • Build and manage Golden AMIs, supporting projects with custom AMI development.
  • Oversee core cloud networking, including VPCs, routing, F5-LB-WAF, Direct Connect (DX), and Next-Generation Firewalls (NGFWs).
  • Establish and maintain partner connections via AWS PrivateLink and site-to-site VPNs.
  • Manage VPC endpoints and centralized Route 53 DNS resolution.
  • Administer internet-facing services to ensure secure and compliant public access.
• Security, Identity & Compliance
  • Manage SSL certificates to ensure secure encrypted communications.
  • Control access through Just-in-Time (JIT) permissions and AWS Role Anywhere.
  • Govern exceptional resource requests, including NAT Gateway, S3 replication, and special deletion processes.
  • Implement centralized tagging policies for resource tracking and cost management.
• Backup, Disaster Recovery & Monitoring
  • Oversee cloud backup services, ensuring data integrity and disaster recovery readiness.
  • Manage Disaster Recovery Services (DRS) for high-availability applications.
  • Deploy and maintain centralized monitoring dashboards to support cloud operations.
• Project Support & Automation
  • Assist in cloud migration and digital transformation projects.
  • Evaluate cloud solutions and collaborate with stakeholders for efficient cloud deployments.
  • Support cost estimation and cloud cost optimization initiatives.
  • Maintain and enhance CI/CD pipelines for cloud operations.
  • Develop scripts and Terraform modules to automate operational tasks.

• Change Management
  • All changes must be carefully tested in a non-production environment before deployment to production.
  • Follow VPbank’s CR process to implement on production environment.
  • Coordinate with DevOps, Security, and Application teams to assess risks, dependencies, and rollback plans.
  • Ensure all changes are documented, tested, and implemented following VPBank’s governance policies.

• Human Resource Management
  • Actively allocate resources to balance daily operations and project workloads.
  • Organize regular sharing sessions within the team and across IT departments.
  • Provide mentorship and guidance to junior or other engineers, ensuring they develop the necessary skills for cloud operations.
  • Develop and maintain processes, guides, and workshops to improve operational efficiency.

1.Trình độ đào tạo (Educational Qualifications)

• A bachelor's or master's degree in Computer Science, Engineering, or other computer-related fields.

2. Kiến thức/ Chuyên môn cần có( Relevant Knowledge/ Expertise)

• 3+ years of experience in cloud operations, infrastructure automation, security governance, and multi-cloud/hybrid cloud environments.
• Strong understanding of AWS (Landingzone, Multi-account, EC2, RDS, S3, Lambda, IAM, VPC, CloudWatch, AMIs, AWS Backup etc.). Familiarity with Azure, GCP (optional but beneficial for multi-cloud environments)
• Expertise in Terraform/Terragrunt, Ansible, CloudFormation for automating infrastructure deployment
• Strong scripting skills in Python, Bash, or PowerShell for automation tasks
• Experience with CI/CD pipelines using tools like Jenkins, GitLab CI/CD, or AWS CodePipeline
• Hands-on experience with cloud monitoring tools (AWS CloudWatch)
• Experience with Grafana for data visualization and building operational dashboards
• Log analysis and troubleshooting of system performance, networking, and security to resolve incidents quickly to minimize downtime
• Familiarity with incident management & response processes
• Knowledge of IAM policies, Service Control Policies (SCPs), AWS Organizations for governance
• Understanding of cloud security best practices, encryption, and network security
• Strong knowledge of VPC, Subnetting, Endpoint, Privatelinks, VPN, Direct Connect, Load Balancers, Firewalls, F5, Paloalto. Troubleshooting connectivity between on-premises and cloud environments
• Ability to investigate and analyze information, and to draw conclusions.
• Flexibility, adaptability and desire to learn new technologies.

3. Các kỹ năng ( Skills )

• Strong collaboration skills, with a demonstrated ability to work well as part of the team.
• Be able to catch up and manage works quickly and effectively
• Be able to work independently with high pressure, good in teamwork
• Detailed-orientation, careful, responsible, and secure in protecting information/data belong to Bank
• Clear documentation of cloud operations and best practices
• Good knowledge of risk management principles, methodology and practice        
• Mentor and coach other devops engineers. Assigned as a buddy to support new employees according to the new recruitment needs of each period in the center
• Able to use English at moderate level