Operation Engineer

Multi‐Account & Landing Zone management
Manage and configure AWS Organizations, Service Control Policies (SCPs), and Organizational Units (OUs)
Manage IAM roles, policies, and permission boundaries across multi- account environment.
Deploy and manage AWS SSO (IAM Identity Center) for centralized authentication and authorization
Design, deploy, and operate AWS Landing Zone using AWS Control Tower and Account Factory for Terraform (AFT).
Establish and maintain account baselines: security controls, logging, and networking standards across all accounts.
Automate AWS account creation and management through AFT pipeline, ensuring compliance and governance.
Shared Services & Network Hub operations
Operate Transit Gateway and manage routing for multi- account infrastructure
Manage and operate Route 53 Resolver, Private Hosted Zones, and DNS forwarding rules for the entire organization.
Deploy and manage AWS PrivateLink for secure connectivity to partner services
Deploy and manage VPC Endpoints (Gateway and Interface Endpoints) to optimize connectivity and cost
Manage VPN Site- to- Site connections for connectivity to partners and third- party services
Troubleshoot network issues using packet captures and flow logs analysis
Network Security Appliances administration
Manage Palo Alto Networks (PAN- OS) firewalls: configure policies, zones, NAT rules, and threat prevention
Operate F5 Load Balancers: configuration, traffic management, SSL offloading, and health monitoring
Assess impact and participate in Change Advisory Board (CAB) for network security- related changes
Collaborate with SOC/NOC teams to enhance operational efficiency and incident response
Monitoring & Observability
Manage CloudWatch Alarms, EventBridge rules, and SNS topics for automation and alerting
Configure alerting rules and notification channels (PagerDuty, Slack, Email) for incident response
Build and maintain centralized monitoring systems using Grafana, Prometheus, and Loki stack
Proactively monitor, analyze, and provide early warnings on operational metrics to detect anomalies before incidents occur
Create Grafana dashboards for real- time visibility into infrastructure, applications, and network
Set up log aggregation from all accounts to central logging account using CloudWatch Logs and Loki
Automation & Infrastructure as Code
Deploy automation solutions to reduce manual interventions and enhance operational accuracy and efficiencyMulti‐Account & Landing Zone management
Implement GitOps workflow for infrastructure changes and policy management
Create and maintain Terraform state management, remote backends, and workspace strategies
Write Python/Bash scripts to automate operational and maintenance tasks
Develop and maintain Terraform modules for AFT customizations and account provisioning § Build CI/CD pipelines for infrastructure deployments using GitLab CI and GitHub Actions
Incident Management & BCP/DR
Ensure cloud infrastructure- related incidents are logged, resolved, and remediated in a timely manner
Participate in on- call rotation to support 24/7 operations and incident response
Create runbooks, documentation, and knowledge base for operational procedures
Develop, maintain, and regularly test BCP/DR plans for critical cloud systems
Continuously monitor cloud infrastructure availability, compare against committed KPIs, and report deviations
Collaboration & Support
Train and mentor junior team members
Provide guidance on best practices for application deployment, security, and networking
Manage licenses, contracts, and vendor relationships, ensuring SLA compliance
Maintain design documentation, SOPs, Runbooks, and inventory of services running on infrastructure
Support development teams in onboarding to the cloud platform
Produce daily operational checklists and periodic reports

Solid knowledge of Infrastructure as Code: Terraform (advanced level- modules, state management, workspaces), Python and Bash scripting.
Network analysis skills: Flow Logs analysis, packet captures, and connectivity troubleshooting.
Experience in developing Terraform modules and CI/CD pipelines for infrastructure automation.
Experience in incident response, BCP/DR planning, and participating in on- call rotation.
Knowledge of IAM best practices: roles, policies, permission boundaries, and AWS SSO (IAM Identity Center).
Bachelor&039;s degree in Computer Science, Information Technology, or related field, or equivalent relevant work experience.
Proven hands- on experience in deploying AWS Control Tower and Account Factory for Terraform (AFT).
Practical experience with Palo Alto Networks firewalls and F5 Load Balancers in enterprise environments.
Ability to work effectively in teams, with capability to mentor and train junior members.
Minimum of 5 years of experience working with AWS Cloud Infrastructure.
Excellent documentation and communication skills, with ability to create runbooks, SOPs, and technical documentation.
AWS Solutions Architect Professional or AWS Advanced Networking Specialty
Prior experience in banking, financial services, or large- scale organizations with stringent requirements for security, reliability, and service availability is highly preferred.
Hands- on experience with Palo Alto Networks (PAN- OS): policies, zones, NAT rules, and threat prevention.
Palo Alto Networks (PCNSA/PCNSE) or F5 Certified
Experience in building and operating centralized monitoring systems using Grafana, Prometheus, and Loki stack.
Minimum of 3 years of experience managing multi- account AWS environments.
Understanding of CI/CD pipelines for infrastructure deployments using GitLab CI, GitHub Actions, and GitOps workflow.
Comprehensive understanding of AWS Cloud Infrastructure, including multi- account management, Landing Zone, networking, security, and related services.
Experience with Direct Connect and hybrid cloud connectivity is a plus
Strong organizational and time management skills, with ability to prioritize tasks and manage multiple priorities
Hands- on experience with F5 BIG- IP: virtual servers, pools, health monitors, SSL offloading, and traffic management.
Knowledge of BCP/DR planning, incident management, and change management processes.
Strong knowledge of Monitoring & Observability stack: Grafana, Prometheus, Loki, CloudWatch Logs, Metrics, and Alarms.
Experience with ECS, EKS, Kubernetes is a plus
Good English proficiency for technical documentation and collaboration
Ability to work under pressure, with readiness for on- call rotation and 24/7 operations support.
Understanding of AWS Well- Architected Framework, security baselines, compliance standards, and governance policies.
Proficiency in AWS Networking: Transit Gateway, Route 53, VPC, Subnetting, VPC Endpoints (Gateway & Interface), PrivateLink, and Site- to- Site VPN.
In- depth expertise in AWS Organizations, Control Tower, Account Factory for Terraform (AFT), Service Control Policies (SCPs), and Organizational Units (OUs).
Strong ability to troubleshoot and resolve complex issues related to cloud infrastructure, networking, and security.

Được vay ưu đãi theo chính sách ngân hàng từng thời kỳ
Thu nhập hấp dẫn, lương thưởng cạnh tranh theo năng lực (16- 18 tháng lương)
Chế độ ngày phép hấp dẫn theo cấp bậc công việc
Thưởng các Ngày lễ, Tết (theo chính sách ngân hàng từng thời kỳ)
Bảo hiểm bắt buộc theo luật lao động + Bảo hiểm VPBank care cho CBNV tùy theo cấp bậc và thời gian công tác
Được tham gia các khóa đào tạo tùy thuộc vào Khung đào tạo cho từng vị trí
Thời gian làm việc: từ thứ 2 – thứ 6 & 2- 3 sáng thứ 7/ tháng
Môi trường làm việc năng động, thân thiện, có nhiều cơ hội học đào tạo, học hỏi và phát triển; được tham gia nhiều hoạt động văn hóa thú vị (cuộc thi về thể thao, tài năng, hoạt động teambuiding...)

Cập nhật gần nhất lúc: 2026-03-08 19:10:03