Company Description
SmartDev is an AI-powered software development company headquartered in Vietnam, part of the Verysell Group. We help global businesses deliver faster and build smarter — combining AI-driven development practices with deep expertise across fintech, healthcare, retail, and enterprise technology. Our team of engineers, architects, and AI specialists works across the full stack: from custom software and cloud solutions to generative AI, MLOps, and intelligent automation. At SmartDev, we believe that great architecture and AI-first thinking are a competitive advantage — and we build our teams accordingly.
The company is at a pivotal point in our journey: transitioning from a pure IT outsourcing provider to an AI-enabled solutions partner.
We have over 200 talented employees working both on-site and remote/hybrid at locations:
Danang: 81 Quang Trung, Hai Chau 1 ward, Hai Chau District, Danang
Hanoi: Zodiac building, 19 Duy Tan Street, Dich Vong Hau ward, Cau Giay District, Hanoi
Job Description
Own the AWS infrastructure for all platform environments (dev, staging, production and DR) through Terraform, with every change going through PR review and a pipeline plan.
Operate and upgrade the EKS clusters, including Auto Mode node pools for CPU and GPU sandboxes, Gateway API routing, add-ons and capacity limits.
Maintain the Bitbucket Pipelines and Helm GitOps flow that builds application images and promotes releases across environments.
Run and test the disaster recovery setup: cross-region RDS replication, S3 and ECR replication, Step Functions failover, and fail-back. Keep RPO/RTO targets documented and verified.
Keep the security baseline green: WAF rules, Security Hub (FSBP, CIS), GuardDuty, Inspector and IAM least privilege. Triage findings and remediate HIGH and CRITICAL ones.
Run observability and alerting with Prometheus (AMP), Grafana, Loki and CloudWatch. Route alerts to the team's on-call channels, not a single mailbox.
Onboard new white-label tenants: network, buckets, DNS, certificates and partner IP allowlists.
Handle incidents and changes using the client's change process, and write short post-incident reports.
Control AWS cost: right-size workloads, scale sandbox pools to zero when idle, and report monthly spend trends to the client.
Keep runbooks, architecture pages and handover docs current in Confluence.
Join client meetings, explain technical trade-offs in plain English, and respond to client request.
Use AI-assisted engineering tools (e.g. Claude Code) responsibly to speed up IaC and pipeline work, with human review on every change.
Qualifications
5+ years in DevOps, SRE or platform engineering, with at least 3 years running production workloads on AWS
Hands-on Amazon EKS in production: upgrades, node scaling (Karpenter or Auto Mode), ingress or Gateway API, IRSA or Pod Identity, troubleshooting
Strong Terraform: multi-environment layout, reusable modules, remote state and locking, safe plan and apply in CI
CI/CD with Bitbucket Pipelines or GitHub Actions, plus Helm and a GitOps workflow (ArgoCD, Flux or a Helm deploy repo)
AWS networking and security: VPC design, NAT, VPC endpoints, peering, WAF, IAM, KMS, Secrets Manager, OIDC federation
Disaster recovery on AWS: cross-region replication for RDS and S3, failover runbooks and DR drills
Observability: Prometheus, Grafana, Loki or ELK/EFK, and alerting design
Linux and scripting in Bash and Python
Has worked in a regulated or security-sensitive domain (fintech, banking, payments) with ISO 27001 or SOC 2 style controls
Can own a client environment end to end: clear written English and confident in client calls
Can handle 2 or more projects at once and prioritise without close supervision
NICE TO HAVE
AWS certifications: Solutions Architect Professional, DevOps Engineer Professional or Security Specialty; CKA or CKS
Amazon Managed Prometheus/Grafana, ADOT and Grafana Alloy
Velero backup and restore for Kubernetes
Security tooling in pipelines: Trivy, tflint, SonarQube, Snyk
Golang basics, enough to read services and debug builds
Generative AI on AWS (Amazon Bedrock) or running AI-assisted engineering workflows
Azure (AKS) experience for multi-cloud projects
Additional Information
Benefits
International working environment with AI-driven strategic direction.
20 days of annual leave – Hybrid working mode.
Premium healthcare package with BIC and comprehensive annual health check-ups
Competitive salary & 13th salary bonus
Lunch allowance to fuel your productivity.
Engaging company culture with fun activities
Global collaboration – Work with both Vietnamese and international colleagues.