Middle DevOps Engineer
SmartDev
- Hanoi, Vietnam
- On-site
- Director/Executive
- 5+ years
- Posted
Skills
Required
- DevOps / SRE / platform engineering
- AI
- AWS
- Karpenter / Auto
- ingress / Gateway API / IRSA / Pod Identity / troubleshooting
- Bitbucket
- Pipelines / GitHub Actions
- Helm
- WAF
- Prometheus / Grafana
- Bash
- Python
- Kubernetes
- Golang
Preferred
- Loki / ELK/EFK
- Azure AKS
- multi-cloud projects
- GitOps
- disaster recovery
- S3
- RDS
- Confluence
- flow
Own the AWS infrastructure for all platform environments (dev, staging, production and DR) through Terraform, with every change going through PR review and a pipeline plan.
About SmartDev
- SmartDev is an AI-powered software development company headquartered in Vietnam, part of the Verysell Group.
- We help global businesses deliver faster and build smarter — combining AI-driven development practices with deep expertise across fintech, healthcare, retail, and enterprise technology .
- Our team of engineers, architects, and AI specialists works across the full stack: from custom software and cloud solutions to generative AI, MLOps, and intelligent automation.
- The company is at a pivotal point in our journey: transitioning from a pure IT outsourcing provider to an AI-enabled solutions partner .
Responsibilities
- Operate and upgrade the EKS clusters, including Auto Mode node pools for CPU and GPU sandboxes, Gateway API routing, add-ons and capacity limits.
- Maintain the Bitbucket Pipelines and Helm GitOps flow that builds application images and promotes releases across environments.
- Run and test the disaster recovery setup: cross-region RDS replication, S3 and ECR replication, Step Functions failover, and fail-back.
- Keep RPO/RTO targets documented and verified.
- WAF rules, Security Hub (FSBP, CIS), GuardDuty, Inspector and IAM least privilege.
- Triage findings and remediate HIGH and CRITICAL ones.
- Run observability and alerting with Prometheus (AMP), Grafana, Loki and CloudWatch.
- Route alerts to the team's on-call channels, not a single mailbox.
- network, buckets, DNS, certificates and partner IP allowlists.
- Handle incidents and changes using the client's change process, and write short post-incident reports.
- right-size workloads, scale sandbox pools to zero when idle, and report monthly spend trends to the client.
- Keep runbooks, architecture pages and handover docs current in Confluence.
- Join client meetings, explain technical trade-offs in plain English, and respond to client request.
- Use AI-assisted engineering tools (e.g. Claude Code) responsibly to speed up IaC and pipeline work, with human review on every change.
- cross-region replication for RDS and S3, failover runbooks and DR drills
Requirements
- 5+ years in DevOps, SRE or platform engineering, with at least 3 years running production workloads on AWS Hands-on Amazon EKS in production: upgrades, node scaling (Karpenter or Auto Mode), ingress or Gateway API, IRSA or Pod Identity, troubleshooting
- multi-environment layout, reusable modules, remote state and locking, safe plan and apply in CI CI/CD with Bitbucket Pipelines or GitHub Actions, plus Helm and a GitOps workflow (ArgoCD, Flux or a Helm deploy repo) AWS networking and security: VPC design, NAT, VPC endpoints, peering, WAF, IAM, KMS, Secrets Manager, OIDC federation
- Linux and scripting in Bash and Python Has worked in a regulated or security-sensitive domain (fintech, banking, payments) with ISO 27001 or SOC 2 style controls
- Can own a client environment end to end: clear written
English and confident in client calls
- Can handle 2 or more projects at once and prioritise without close supervision NICE TO HAVE AWS certifications: Solutions Architect Professional, DevOps Engineer Professional or Security Specialty; CKA or CKS Amazon Managed Prometheus/Grafana, ADOT and Grafana Alloy Velero backup and restore for Kubernetes Security tooling in pipelines: Trivy, tflint, SonarQube, Snyk Golang basics, enough to read services and debug builds
- Generative AI on AWS (Amazon Bedrock) or running AI-assisted engineering workflows
Preferred
- Prometheus, Grafana, Loki or ELK/EFK, and alerting design
- Azure (AKS) experience for multi-cloud projects
Benefits
- Benefits International working environment with AI-driven strategic direction. 20 days of annual leave – Hybrid working mode. Premium healthcare package with BIC and comprehensive annual health check-ups Competitive salary & 13th salary bonus Lunch allowance to fuel your productivity. Engaging company culture with fun activities Global collaboration – Work with both Vietnamese and international colleagues.
- At SmartDev, we believe that great architecture and AI-first thinking are a competitive advantage — and we build our teams accordingly.
We have over 200 talented employees working both on-site and remote/hybrid at locations: Danang: 81 Quang Trung, Hai Chau 1 ward, Hai Chau District, Danang Hanoi: Zodiac building, 19 Duy Tan Street, Dich Vong Hau ward, Cau Giay District, Hanoi
jobapplier