Senior Cloud Operation Engineer – Hà Nội – GPBank

Overview of GPBank

On January 17, 2025, GPBank will transition its operating model to become a wholly-owned limited liability bank under VPBank. This marks a significant turning point, ushering in a new phase of development built on a strong financial foundation, modern technology, and a customer-centric approach. GPBank is currently fostering a professional and transparent work environment – one where each individual can maximize their capabilities and jointly create sustainable value.

Purpose of the Job: Responsible for ensuring the stability, performance, security, and cost-efficiency of cloud infrastructure. This role requires expertise in managing hybrid/multi-cloud environments using Infrastructure as Code (IaC)/Configuration as Code (CaC) to automate deployment, configuration, and operations, ensuring consistency, flexibility, and efficiency. The position requires collaboration with cross-functional teams to enhance cloud operations, improve efficiency, cost estimation/optimization and ensure alignment with business objectives.

Main Duties:

* Landing Zone & AWS Account Management

- Operate and maintain GPbank’s AWS Landing Zone.

- Manage and provision AWS accounts through Account Factory for Terraform (AFT).

- Enforce governance policies, including SCP, RCP, and AWS Organization features.

* Infrastructure & Networking

- Build and manage Golden AMIs, supporting projects with custom AMI development.

- Oversee core cloud networking, including VPCs, routing, F5-LB-WAF, Direct Connect (DX), and Next-Generation Firewalls (NGFWs).

- Establish and maintain partner connections via AWS PrivateLink and site-to-site VPNs.

- Manage VPC endpoints and centralized Route 53 DNS resolution.

- Administer internet-facing services to ensure secure and compliant public access.

* Security, Identity & Compliance

- Manage SSL certificates to ensure secure encrypted communications.

- Control access through Just-in-Time (JIT) permissions and AWS Role Anywhere.

- Govern exceptional resource requests, including NAT Gateway, S3 replication, and special deletion processes.

- Implement centralized tagging policies for resource tracking and cost management.

* Backup, Disaster Recovery & Monitoring

- Oversee cloud backup services, ensuring data integrity and disaster recovery readiness.

- Manage Disaster Recovery Services (DRS) for high-availability applications.

- Deploy and maintain centralized monitoring dashboards to support cloud operations.

* Project Support & Automation

- Assist in cloud migration and digital transformation projects.

- Evaluate cloud solutions and collaborate with stakeholders for efficient cloud deployments.

- Support cost estimation and cloud cost optimization initiatives.

- Maintain and enhance CI/CD pipelines for cloud operations.

* Change Management

- All changes must be carefully tested in a non-production environment before deployment to production.

- Follow GPbank’s CR process to implement on production environment.

- Coordinate with DevOps, Security, and Application teams to assess risks, dependencies, and rollback plans.

- Ensure all changes are documented, tested, and implemented following GPbank’s governance policies.

* Human Resource Management

- Actively allocate resources to balance daily operations and project workloads.

- Organize regular sharing sessions within the team and across IT departments.

- Provide mentorship and guidance to junior or other engineers, ensuring they develop the necessary skills for cloud operations.

- Develop and maintain processes, guides, and workshops to improve operational efficiency.

1. Education Level: A bachelor's or master's degree in Computer Science, Engineering, or other computer-related fields.

2. Knowledge/Expertise:

- 3+ years of experience in cloud operations, infrastructure automation, security governance, and multi-cloud/hybrid cloud environments.

- Strong understanding of AWS (Landingzone, Multi-account, EC2, RDS, S3, Lambda, IAM, VPC, CloudWatch, AMIs, AWS Backup etc.). Familiarity with Azure, GCP (optional but beneficial for multi-cloud environments)

- Expertise in Terraform/Terragrunt, Ansible, CloudFormation for automating infrastructure deployment

- Experience with CI/CD pipelines using tools like Jenkins, GitLab CI/CD, or AWS CodePipeline

- Hands-on experience with cloud monitoring tools (AWS CloudWatch)

- Experience with Grafana for data visualization and building operational dashboards

- Log analysis and troubleshooting of system performance, networking, and security to resolve incidents quickly to minimize downtime

- Familiarity with incident management & response processes

- Knowledge of IAM policies, Service Control Policies (SCPs), AWS Organizations for governance

- Understanding of cloud security best practices, encryption, and network security

- Strong knowledge of VPC, Subnetting, Endpoint, Privatelinks, VPN, Direct Connect, Load Balancers, Firewalls, F5, Paloalto. Troubleshooting connectivity between on-premises and cloud environments

- Ability to investigate and analyze information, and to draw conclusions.

- Flexibility, adaptability and desire to learn new technologies.

3. Skills:

- Strong collaboration skills, with a demonstrated ability to work well as part of the team.

- Be able to catch up and manage works quickly and effectively

- Be able to work independently with high pressure, good in teamwork

- Detailed-orientation, careful, responsible, and secure in protecting information/data belong to Bank

- Clear documentation of cloud operations and best practices

- Good knowledge of risk management principles, methodology and practice    

- Mentor and coach other devops engineers. Assigned as a buddy to support new employees according to the new recruitment needs of each period in the center

- Can use English at a moderate level.

4. Relevant Experience: 

- Risk Management / Quản lý rủi ro

- Customer Focus / Tư duy tốt về việc lấy khách hàng làm trung tâm.

5. Other relevant competencies:

- Strong Logical Thinker and Planner

- Implementation and Deliver ability / Năng lực thực hiện và chuyển giao.

BENEFITS

- Attractive income, competitive salary and bonuses based on performance.

- Bonuses for holidays and Tet (Lunar New Year) as per the bank's policies at different periods.

- Access to preferential loan programs according to the bank's policies at different periods.

- Generous annual leave based on job level, with eligibility for summer vacation benefits.

- Insurance benefits as required by law.

- Opportunity to participate in training courses based on the training framework for each position.

- Working hours: Monday to Friday.

- Dynamic and friendly work environment with ample opportunities for training, learning, and development; participation in various exciting cultural activities (sports competitions, talent shows, teambuilding activities, etc.).