Báo cáo thành công

1. Cloud Architecture & Design

• Design and maintain scalable, secure, and high-availability cloud architecture on AWS.
• Define cloud standards, governance baselines, tagging strategy, and security controls.
• Review and optimize architecture for microservices and mobile backend platforms.
• Ensure alignment with Regional and Group cloud standards.

2. Microservices Deployment & AWS Operations

• Deploy and manage microservices in AWS environments.
• Ensure system availability, scalability, and performance optimization.
• Implement monitoring, alerting, and observability best practices.

3. Infrastructure as Code (Terraform)

• Design, develop, and maintain Infrastructure as Code using Terraform.
• Ensure reusable modules and standardized infrastructure deployment.
• Maintain version control, peer review, and CI/CD integration for IaC.
• Continuously enhance automation coverage and compliance enforcement.

4. CI/CD & DevOps Automation (Jenkins)

• Design and maintain CI/CD pipelines for microservices and mobile applications.
• Implement automated:
  • Build & deployment
  • Performance testing
  • Security scanning
  • Code quality checks
• Improve deployment reliability and reduce manual processes.
• Support controlled production releases and rollback mechanisms.

5. Cloud Cost Optimization & Reporting

• Monitor and analyze cloud spending across environments and projects.
• Implement cost optimization strategies (rightsizing, reserved instances, storage lifecycle policies, etc.).
• Develop automated cloud cost tracking and reporting dashboards.
• Deliver monthly cloud cost reports with optimization recommendations.
• Ensure cost transparency and alignment with budget targets.

6. Audit Log Review & Reporting (System & Database)

•  Perform regular audit log review for:
  • o Application systems
  • Operating systems
  • Databases
  • Cloud access (IAM activities)
• Ensure audit logs are centrally collected, retained, and protected from tampering.
• Generate periodic audit log reports for compliance and regulatory review.
• Investigate suspicious activities and escalate security findings.
• Support internal and external audit evidence requests.

7. Security, SSL & Compliance

• Manage SSL certificates lifecycle (issuance, renewal, revocation).
• Implement IAM best practices (least privilege, segregation of duties).
• Enforce cloud security controls and vulnerability remediation.
• Act as credential holder with full responsibility and accountability.
• Support regulatory compliance and security assessments.

8. Backup, Disaster Recovery & Business Continuity

•  Design and maintain backup strategies for applications and databases.
•  Define RPO/RTO objectives and ensure DR readiness.
•  Conduct DR drills and maintain updated DR documentation.
•  Ensure compliance with business continuity requirements.

9. Application Support & Log Investigation

•  Support development teams in production troubleshooting.
•  Perform root cause analysis using system, application, and database logs.
• Improve observability (metrics, logs, tracing).
• Automate reporting for performance, audit, and operational insights.

10. Mobile Platform Management

• Manage application lifecycle on:
  • Apple App Store
  • Google Play Store
  • Firebase
•  Handle provisioning profiles, certificates, signing, publishing, and compliance with store requirements.

11. Regional & Group Coordination

• Act as the primary technical contact between Regional and Group teams.
• Coordinate architecture reviews, compliance alignment, and escalations.
• Ensure local cloud implementation aligns with Group governance standards.

12. Research & Development (R&D)

• Evaluate new cloud technologies and propose improvements.
• Conduct POC for architecture modernization, cost savings, or automation.
• Continuously improve infrastructure reliability and efficiency.

13. Operational Excellence & On-Call Support

• Provide after-hours or weekend support when required.
• Ensure SLA compliance and high system reliability.
• Promote DevOps culture and continuous improvement.
• Demonstrate strong ownership, accountability, and willingness to learn.

• Formal Education: Minimum Bachelor’s Degree in Technology/IT/Engineering
• Professional Accreditation: Active contribution to the Software Engineering community through talks, meet ups or published articles.
• Preferred level of Experience (by years/function/industry):5 years and above in ICT, with experience in Software Engineering.
• Experienced developers/engineers with required essential skills are encouraged to apply and specialize in this role
• Essential (Required to start) Experienced software developer, specifically in Java.
• Full stack and polyglot is a bonus. Hands-on knowledge in Linux Servers.
• Ability to quickly learn and support new technologies and enterprise platforms to enable deployments and resolve complex L3 issues.
• Ability to analyze Telemetry logs / CDR / wireshark, reverse engineer and make sense of the e2e transaction flow to solve a technical bottleneck.

Specific (Expectations to grow)

• Understand integration architecture in banking Experience as a DevOps Engineer with hands-on experience with automating all stages of the SDLC. Ability to interact with developers and IT operation engineers in harmony. Experience tackling scalability challenges across multiple products.

Strong hands-on knowledge

• Experience setting up and tuning monitoring to efficiently detect and predict issues, using tools.
• Experience managing a cloud-based, enterprise platform running on public cloud such as AWS, Azure, or Google.
• Experience leveraging technologies such as Kubernetes, Terraform, Consul, and Docker.
• Experience with developing CI/CD pipelines. Scripting experience using Bash or Python.
• Understanding of networks, including subnets, VPN, firewalls, and load balancing.
• Ability to maneuver through complex and restrictive banking technology landscape without compromising compliance or security.
• Ability to manage challenges around people dynamics and processes to achieve DevOps end-state goals.