Infrastructure & Cyber Security Engineer (DevSecOps)
Cloudteam
Mô tả công việc
JOB PURPOSES This position is responsible for deploying, operating, and securing enterprise IT infrastructure, including firewalls, Linux/Windows systems, monitoring platforms, and security compliance frameworks. The ideal candidate has strong hands-on experience with firewall systems, Linux servers, identity services, monitoring tools, and basic database administration, with a solid understanding of IT security standards. KEY RESPONSIBILITIES Bachelor’s degree in IT, Computer Science, Network Security, Telecommunications, or related fields. Deploy, operate, and maintain enterprise IT infrastructure across Linux and Windows environments. Install, configure, patch, upgrade, monitor, and troubleshoot production servers and infrastructure services. Deploy, configure, and maintain enterprise firewall and network security solutions. Manage network connectivity, routing, VPN (Site-to-Site & Remote Access), NAT, IPS/IDS, Web Filtering, and security policies. Monitor infrastructure health, system availability, network performance, and capacity to ensure high service reliability. Investigate system and network incidents, perform root cause analysis, and implement corrective and preventive actions. Participate in infrastructure hardening, vulnerability remediation, and security improvement initiatives. Participate in IT governance, security architecture review, and infrastructure security planning. Support security risk assessments, compliance reviews, and remediation planning. Participate in security incident response, investigation, containment, recovery, and post-incident analysis. Collect and analyze system, firewall, and security logs to support incident investigation and root cause analysis. Automate infrastructure operations using scripting and modern automation tools. Leverage AI-assisted engineering tools and AI agent platforms to improve infrastructure operations, troubleshooting, documentation, and operational efficiency. Support and maintain compliance with ISO 9001:2015, ISO/IEC 27001:2022, PCI-DSS, and other applicable security standards. Perform routine operational tasks for enterprise databases, including backup support, monitoring, basic troubleshooting, and maintenance. Create and maintain technical documentation, system architecture diagrams, operational procedures (SOPs), and implementation documents. Collaborate with internal teams, vendors, auditors, and project stakeholders to deliver infrastructure and security projects. Participate in change management, incident response, disaster recovery, and continuous service improvement activities.
Yêu cầu công việc
Operating Systems Strong knowledge of Linux system administration (Ubuntu, CentOS, RHEL, Rocky Linux…). Experience administering Windows Server environments, including Active Directory, DNS, DHCP, Group Policy, and File Services. Network & Security Strong experience with at least one enterprise firewall platform: Sophos Firewall XG pfSense & OPNsense FortiGate Good understanding of TCP/IP, VLAN, Routing, Switching, VPN, NAT, IPS/IDS, Web Filtering, DNS, and network troubleshooting. Experience implementing firewall policies, VPN connectivity, security hardening, and network segmentation. Knowledge of enterprise security principles, access control, identity management, and security best practices. Monitoring & Operations Hands-on experience with infrastructure monitoring platforms such as PRTG, WhatsUp Gold, Zabbix, Grafana, or equivalent solutions. Experience monitoring system availability, capacity, performance, and service health. Basic understanding of SIEM platforms such as Wazuh, Microsoft Sentinel, Splunk, QRadar, or equivalent solutions. Basic understanding of Security Operations Center (SOC), security monitoring, threat detection, and log analysis. Database Basic knowledge of Oracle/MySQL Database administration, including user management, backup support, monitoring, troubleshooting, and maintenance. Virtualization & Infrastructure (Preferred) Experience with VMware vSphere, Hyper-V, Proxmox VE, or equivalent virtualization platforms. Basic understanding of SAN/NAS storage, backup, disaster recovery, and high availability solutions. Automation & Scripting (Preferred) Basic scripting skills using Bash, PowerShell, or Python for system automation and operational tasks. Experience with infrastructure automation tools (Ansible or equivalent) is an advantage. Identity & Access Security Knowledge of Active Directory, LDAP, RBAC, Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Identity & Access Management (IAM). Understanding of Zero Trust architecture and least privilege access control principles. Container Security (Preferred) Familiarity with Docker, Kubernetes, and container security best practices. Security & Compliance Strong understanding of IT security principles, defense-in-depth, and enterprise security best practices. Familiarity with ISO 9001:2015, ISO/IEC 27001:2022, PCI-DSS, vulnerability management, security auditing, and governance processes. Basic understanding of security architecture, risk assessment, vulnerability remediation, and security hardening. Knowledge of incident response lifecycle, digital forensic fundamentals, and security monitoring is an advantage. Awareness of AI governance and secure adoption of AI technologies is a plus. AI & Modern Engineering Tools (Preferred) Familiarity with AI-assisted engineering tools such as ChatGPT, Claude, Cursor, or equivalent platforms. Experience using AI agent platforms such as Hermes, OpenClaw, Claude Code, or similar autonomous agent frameworks. Ability to leverage AI tools for infrastructure automation, scripting, troubleshooting, documentation, and operational efficiency. Certifications (Preferred) CCNA or equivalent networking certification. MCSA / Microsoft Certified or equivalent Windows Server certification. LPI Level 1 (LPIC-1) or RHCSA Security+, CEH, ISO/IEC 27001, or equivalent security certifications. Oracle certification (nice to have). Language Good English communication skills. Ability to read technical documentation, prepare technical reports, and communicate effectively with international teams. Personal Skills Strong troubleshooting and analytical skills. Responsible, proactive, and detail oriented. Ability to work independently and in a team. Learn new technologies and security standards.
Quyền lợi
Competitive salary and benefits package, including a guaranteed 13th-month salary. Company trip annually. Dynamic and innovative working environment with professional colleagues. Opportunities for professional growth and exposure to enterprise technology platforms and global business practices. Comfortable workplace with free parking, coffee, snacks. Company-sponsored training programs and professional certifications. Onsite working environment at the company office in District 7, Ho Chi Minh City