- Location
- Ho Chi Minh City, Ho Chi Minh City, Vietnam · Vietnam
- Type
- Full-time
- Department
- Engineering
- Seniority
- Entry
Description
OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life.
About the Role
MetaDefender Cloud is OPSWAT’s cloud-native SaaS platform. Organizations worldwide use it to detect and prevent file-borne threats through Multiscanning, Deep CDR™, Sandbox and threat intelligence APIs. As an Associate DevOps Engineer, you’ll help keep this platform fast, secure and always available, working alongside senior engineers on the infrastructure that handles large volumes of untrusted files every day. AI is part of how this team builds and operates the platform, and you’ll use it from day one.
What You Will Be Doing
- Build and maintain Infrastructure as Code with Terraform, and Kubernetes manifests with Kustomize and Helm, delivered through GitOps (Argo CD) across multiple AWS regions
- Operate and improve CI/CD pipelines in GitHub Actions so engineering teams can ship scanning and threat-intelligence features safely and often
- Support development teams in deploying and running containerized microservices on Amazon EKS, including the message queues, caches and databases they depend on
- Monitor system health, performance and cost; take part in troubleshooting and incident response for production issues
- Automate routine operational tasks such as scaling, patching, backups and new-region setup
- Apply security best practices across cloud infrastructure, as fits a platform built to handle malicious content
- Write and maintain runbooks and technical documentation
How We Work with AI
- AI assistants and internal AI agents are part of our delivery flow: an agent scores the risk of every infrastructure pull request and routes it to the right approvers, and AI review runs on code changes
- You will use AI to draft Terraform and Kubernetes changes, investigate alerts and logs, and write runbooks and incident notes
- You stay accountable for every change: you review each plan before it is applied, and no agent approves or merges on your behalf
- You will help run the AI tooling itself: CI workflows that call AI models, the API keys and access they need, and least-privilege credentials for agents
What We Need from You
- A Bachelor’s degree in Computer Science or a related field, or equivalent practical experience
- Hands-on experience with AWS (EC2, S3, IAM, VPC)
- Familiarity with CI/CD, ideally GitHub Actions
- A good understanding of Docker and basic Kubernetes (pods, deployments, services; reading logs and events with kubectl)
- Scripting skills in Bash and/or Python, plus comfort with YAML/JSON configuration
- Basic Linux administration and networking knowledge (DNS, load balancing, TLS)
- Regular use of AI coding assistants (such as Claude Code, GitHub Copilot or Cursor), with the habit of checking their output before trusting it
- Good written English for runbooks, incident notes and tickets
- A willingness to learn, take ownership and work well within a global team
It Would Be Nice If You Had
- Certifications such as AWS Solutions Architect – Associate, AWS DevOps Engineer, or CKA/CKAD
- Experience with Helm, Kustomize and Argo CD, or Kubernetes autoscaling (Karpenter, KEDA)
- Experience operating Kafka (Amazon MSK), RabbitMQ, Redis (ElastiCache) or MongoDB/Amazon DocumentDB
- Experience with observability tools such as Coralogix, OpenTelemetry, Prometheus or Grafana
- Experience with cloud cost management (tagging, Savings Plans, rightsizing)
- An interest in cybersecurity or secure cloud practices (secrets management with SOPS or External Secrets, least privilege, vulnerability scanning)
- Knowledge of information security standards and certifications such as ISO/IEC 27001 and ISO/IEC 27017
- Experience setting up or operating AI tooling: AI steps in CI pipelines, MCP servers, agent permissions, or LLM services such as Amazon Bedrock
OPSWAT is an equal opportunity employer. We celebrate diversity and are committed to providing an environment where equal employment opportunities are extended to all employees and applicants, free of discrimination and harassment of any type. All employment decisions are based on individual qualifications, job requirements, and business needs without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other category protected by federal, state, or local laws.
Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time.