DevSecOps Engineer

ABOUT VINUNIVERSITY

VinUniversity (VinUni) is Vietnam’s first private, not-for-profit university established to international standards, with the vision of becoming one of the world’s top 100 universities. Guided by its core values (EXCEL) of Empathy, Creativity, Leadership Mindset, Exceptional Capability, and Entrepreneurial Spirit, VinUni develops talent equipped to create meaningful impact in Vietnam and globally.

Founded by Vingroup, one of Asia’s largest private conglomerates, VinUni benefits from a dynamic ecosystem spanning Industrials & Technology, Real Estate & Services, Infrastructure, Green Energy, Culture, and Social Enterprises. This ecosystem provides unique opportunities for collaboration and innovation through leading organizations such as VinFast, Vinpearl, Vinmec, Vinschool, and Vinhomes, as well as a vibrant entrepreneurial network including VinVentures, VinMotion, VinRobotics, VinSpace, and VinEnergo.

VinUni comprises four colleges: the College of Arts and Sciences, the College of Business and Management, the College of Engineering and Computer Science, and the College of Health Sciences. The University has established strategic partnerships with Cornell University, the University of Pennsylvania and Nanyang Technological University to advance excellence in education, research, and innovation.

In 2024, VinUni became the youngest and fastest university globally to achieve QS 5 Stars, earning the highest rating in nine categories: Global Engagement, Good Governance, Program Strength, Academic Development, Teaching, Employability, Facilities, Arts, and Social Impact. The University was also appointed by UNESCO as the first and only UNESCO Chair University, focusing on Environmental Leadership, Cultural Heritage, and Biodiversity.

As a rapidly growing research-intensive university, VinUni is investing in world-class talent, research centers, and cutting-edge facilities to drive breakthroughs in Artificial Intelligence and Machine Learning, Data Science, Environmental Intelligence, Innovations in Health Sciences, Policy Development, and Sustainable Societies.

 

ABOUT THE POSITION

The DevSecOps Engineer builds and operates the cloud infrastructure and delivery pipelines for the Center for AI Research's AI products on Vingroup's shared cloud and AI platform. The role manages environments, releases, monitoring and costs, and integrates security controls throughout development and deployment in line with Vingroup's processes. It also operates infrastructure supporting large language model (LLM) services, including model gateways, vector stores, tracing and cost controls. The engineer serves as the team's technical contact with VinSmart Future (VSF) on platform matters and with VinSOC on security reviews, scans and AI-risk assessments before and after go-live.

 

KEY RESPONSIBILITIES

1. Infrastructure & Delivery Pipeline

Cloud Infrastructure

• Design, build and maintain the products' AWS infrastructure across development, testing and production environments within Vingroup's shared cloud accounts and standards, using infrastructure-as-code and Kubernetes/Helm.
• Operate the databases, queues and caches the products depend on with appropriate high availability; implement backup, disaster recovery and failover testing.

CI/CD, GitOps & Change Management

• Design and operate CI/CD pipelines that automate build, test, security checks and deployment, using GitOps practices; execute releases and go-lives under a clear change-management process.
• Build tools for system analysis and automate repetitive operational work.

1. Security in the Pipeline

Security Controls

• Integrate security scanning into CI/CD — static and dynamic application testing, dependency and container scanning, software supply-chain checks — to identify and report security issues before deployment to production.
• Manage secrets, IAM and least-privilege access, network policies and secure configuration baselines (CIS, OWASP) across all environments.

Vulnerability & Data Protection

• Manage vulnerabilities and maintain a regular patching schedule for platform components; keep audit logging complete and reviewable.
• Apply personal-data protection requirements across all environments, including access controls and logging for learner, instructor and research data; coordinate security incident response with VinSOC.

1. Vingroup Compliance: VinSOC & VSF

VinSOC

• Act as the team's point of contact with VinSOC: submit systems and source code for review and receive periodic scan findings.
• Resolve configuration-related security issues, assign code-related issues to engineers, and ensure remediation is completed within deadlines based on severity.

VSF & Reviews

• Work with VSF on integration with Vingroup's shared AI platform and on the technical inputs for architecture, security and AI-risk reviews; coordinate independent penetration tests.
• Keep environments, configurations and integration points aligned with Vingroup's platform standards and shared components.

1. AI Platform Operations

LLM Infrastructure

• Operate the shared infrastructure for LLM-based services: model API gateways, per-user usage quotas, cost dashboards, and vector databases with backups.
• Manage model provider integrations to support switching or adding models with minimal changes to product code.

AI Data & Controls

• Maintain storage and versioning for model and prompt artifacts and evaluation datasets; keep evaluation and load-test pipelines running reliably for engineers.
• Maintain controls for model access, outbound data transfers and API key management, including redaction of personal data in traces and logs; support engineers in addressing AI-specific threats.

1. Operations, Reliability & Cost

Reliability & Observability

• Maintain observability systems for cloud infrastructure and LLM services, covering metrics, logs, traces and alerts using Prometheus, Grafana, ELK or equivalent tools; define and track service-level objectives.
• Respond to and resolve incidents, conduct root-cause analysis and implement preventive measures; build and run load and stress tests. Release and incident support outside office hours is occasionally required.

Cost, Documentation & Knowledge Sharing

• Optimize cloud and model costs, track usage and spending against budget, and coordinate release schedules with the Product Owner and operational readiness with engineers.
• Maintain runbooks, architecture diagrams, operational procedures and handover documentation; train another engineer to provide operational cover, and share platform and security practices through guides and internal sessions.

 

KEY SELECTION CRITERIA

1. Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Security or a related field.
• Minimum 3 years' hands-on DevOps or platform engineering experience, including responsibility for a production system on AWS.
• Proficiency with Docker, Kubernetes and Helm; CI/CD tools such as GitLab CI, GitHub Actions or Jenkins; and infrastructure-as-code tools such as Terraform.
• Hands-on experience integrating security scanning into CI/CD; working knowledge of OWASP, CIS baselines, secure configuration practices and personal-data protection requirements.
• Proficiency in scripting and automation using Python or Bash; strong troubleshooting, incident-management and system-design skills.
• Experience with monitoring and logging stacks (Prometheus, Grafana, ELK or equivalent).
• Strong written and verbal communication in Vietnamese and English.
• Alignment with VinUni's core values (EXCEL): Empathy, Creativity, Leadership Mindset, Exceptional Capability, and Entrepreneurial Spirit.

1. Preferred Qualifications

• Direct experience remediating findings from penetration tests or an enterprise security operations center, or working under enterprise security processes.
• AWS, Kubernetes or security certifications.
• Experience with GitOps (ArgoCD/Flux) and configuration management (Ansible).
• Experience operating PostgreSQL, Redis, Kafka or similar systems in high-availability configurations.
• Experience operating AI or LLM infrastructure: vector databases, model gateways, inference serving, MLOps/LLMOps tooling.
• Ability to implement platform-level services in Python (single sign-on, LMS integration, audit logging).
• Familiarity with cloud cost management and optimization (FinOps).

COMPENSATION & BENEFITS

The salary and benefits are competitive and commensurate with qualifications and experience. 

We thank all applicants for their interest. Please note that only those candidates selected for interviews will be contacted.