← Innova -Software Research and Development
Cloud Solution Engineer
Innova -Software Research and Development · Hồ Chí Minh
Ứng tuyển tại trang chính thức ↗
Loại hình
Toàn thời gian
Hình thức
Tại văn phòng
Cấp bậc
Nhân viên
Ngành nghề
Kỹ thuật / Cơ khí
Mức lương
Thương lượng
Địa điểm
Quận Tân Bình, Hồ Chí Minh, Hồ Chí Minh
Tổng quan
- Administer and support cloud environments across AWS, Azure, and GCP.
- Configure and maintain firewall rules, routing, NAT, and related network settings.
- Support and maintain CI/CD pipelines and deployment processes.
- Install, configure, and troubleshoot Nginx services.
- Support Active Directory integration and access management.
- Monitor cloud and infrastructure services, respond to incidents, and resolve technical issues.
- Maintain documentation for configurations, procedures, and operational standards.
- Collaborate with internal teams to support security, compliance, and system reliability.
- Your Skills and Experience
Yêu cầu
- Proven experience working with AWS, Azure, and GCP.
- Strong knowledge of firewall configuration and network configuration, including routing and NAT.
- Experience with CI/CD tools and deployment automation.
- Experience managing Nginx in a production environment.
- Working knowledge of Active Directory.
- Strong troubleshooting and problem-solving skills.
- Ability to work independently and communicate effectively with technical teams.
- Willingness and ability to work on-site, full-time, at the company's office (this role is not remote or hybrid).
- SSL/TLS Certificate Lifecycle Management
- Hands-on experience with SSL/TLS certificate procurement, issuance, renewal, and revocation across enterprise environments.
- Proficiency with certificate formats and workflows: PEM, PFX/PKCS#12, CSR generation, private key management, and chain trust validation.
- Experience deploying and binding certificates on IIS, Apache, Nginx, and other web servers; troubleshooting binding mismatches, chain errors, and private key association issues.
- Familiarity with Let's Encrypt / Certbot and ACME protocol-based automation for certificate issuance and renewal.
- Experience with AWS Certificate Manager (ACM) — provisioning, DNS/email validation, and integrating with ALB, CloudFront, and API Gateway; understanding ACM's scope limitations (AWS-managed services only) vs. imported certs for EC2/on-prem use.
- Exposure to Azure Key Vault certificate management — importing, auto-renewal policies, and integration with App Service, Application Gateway, and Azure Front Door.
- Familiarity with GCP Certificate Manager or managed SSL on Google Cloud Load Balancing; understanding of Google-managed vs. self-managed certificate workflows.
- Understanding of Windows ADCS (Active Directory Certificate Services) for internal PKI — CA hierarchy, certificate templates, and auto-enrollment via Group Policy.
- Awareness of CA/Browser Forum compliance trends, including the shift toward shorter certificate validity windows (sub-90-day by 2027) and the operational need for automation.
- Experience with certificate monitoring and alerting to prevent expiry-related outages.
- Information Security Management (ISO/IEC 27001 & TISAX)
- Proven experience in information security management, cybersecurity, or IT governance.
- Experience implementing and maintaining an Information Security Management System (ISMS).
- Strong knowledge of TISAX requirements and the VDA ISA catalogue.
- Good understanding of ISO/IEC 27001 principles, risk management, security controls, and compliance requirements.
- Ability to manage and improve information security policies, procedures, risk assessments, and security awareness activities.
- Experience coordinating audits and managing corrective action plans.
- Understanding of automotive cybersecurity requirements is an advantage.
- Experience with Terraform, Ansible, or other infrastructure automation tools.
- Experience with Linux administration.
- Experience with Windows Server administration.
- Knowledge of DNS, VPN, load balancing, and hybrid cloud connectivity.
- Experience supporting enterprise cloud operations.
- Scripting experience in Bash or PowerShell.
- Relevant cloud certifications (e.g., AWS Solutions Architect, Azure Administrator, or Google Cloud Engineer).
- Experience with container orchestration using Docker and Kubernetes.
- Familiarity with monitoring and observability tools (e.g., Prometheus, Grafana, Datadog, or CloudWatch).
- Certifications and Training (Information Security)
- ISO/IEC 27001 Lead Implementer or Lead Auditor.
- PECB — ISO/IEC 27001 Lead Implementer / Lead Auditor.
- TÜV or similar bodies — ISO/IEC 27001 Auditor / Implementer qualifications.
Quyền lợi
- 15 Vacation days, 5 sick days and Holiday.
- 2 paying days for Christmas holiday.
- Paid foreign language school English, Chinese, Japanese, Spanish.
- Paid Health and Life insurance for employees and family.
- Opportunity to travel abroad.
Chế độ thưởngĐào tạo
Tóm tắt thông tin từ tin tuyển dụng chính thức. Xem bản gốc ↗
Quan tâm đến vị trí này?
Bạn sẽ được chuyển đến trang ứng tuyển chính thức của nhà tuyển dụng.
Ứng tuyển tại trang chính thức ↗
Đây là doanh nghiệp của bạn?
Nhận quản lý trang, yêu cầu chỉnh sửa hoặc gỡ bỏ
→