We have an immediate opening for a results-driven, hands-on Cloud Infrastructure Engineer to join our Infrastructure Services (IS) team located in Ho Chi Minh. To thrive in this role, you should be a strong technical owner with a bias toward execution and a track record of building cloud infrastructure, not just managing it. The candidate filling this role will share on-call responsibilities with other members of the team.
Position Overview
The Cloud Infrastructure Engineer is an enterprise-level position responsible for the design, architecture, implementation, automation, and Infrastructure as Code (IaC) management of CES’s cloud infrastructure. This is not a cloud administration or monitoring role. It requires demonstrated, hands-on proficiency in architecting and building cloud-native solutions, constructing automated infrastructure delivery pipelines, and applying IaC principles at scale across a growing, multi-account AWS environment.
This individual will own and drive CES’s Infrastructure as Code practice using Terraform and Terraform Cloud, defining the standards, module patterns, and deployment frameworks that underpin cloud infrastructure delivery across the organization. The Cloud Infrastructure Engineer will contribute to an active, multi-year migration program, provisioning and integrating cloud infrastructure in close coordination with application development, data engineering, and security teams.
The candidate must demonstrate advanced, hands-on expertise with core AWS services, a strong command of Terraform and the AWS CLI, and the ability to apply cloud networking, security governance, and FinOps practices in a complex enterprise environment. This role requires proven experience implementing Infrastructure as Code and cloud automation in organizations where standards are still being established, and the initiative to create structure and drive adoption across the IS team.
This role carries direct responsibility for engaging with internal stakeholders across CES business lines and external clients and partners, including their technical and non-technical representatives, to support cloud infrastructure requirements, communicate service impact, and drive resolution under pressure. The ability to communicate accurately and professionally with technical and non-technical audiences alike is a firm requirement of this role.
Responsibilities
Cloud Architecture & Infrastructure
- Design and implement scalable, highly available, and fault-tolerant AWS infrastructure solutions across a multi-account AWS Organizations environment.
- Own the architecture and configuration of cloud networking components, including VPCs, subnets, routing tables, Transit Gateway, Direct Connect, and VPN connectivity to on-premises environments.
- Manage and optimize core AWS services, including EC2, EKS/ECS, Lambda, S3, RDS, Aurora, DynamoDB, CloudFront, and Route 53.
- Implement and maintain cloud security controls, including IAM least-privilege policies, service control policies (SCPs), and secrets management, in alignment with organizational security standards.
- Establish and maintain robust disaster recovery and business continuity protocols for cloud-hosted systems.
Infrastructure as Code & Automation
- Drive the development of CES's Infrastructure as Code practice using Terraform and Terraform Cloud, defining standards, modules, and deployment models from inception.
- Develop and maintain CI/CD pipelines for infrastructure deployments using GitHub Actions, with automated validation, testing, and rollback.
- Automate operational tasks and provisioning workflows using Python, Bash, and the AWS CLI.
- Define and document Infrastructure as Code standards, naming schemes, module patterns, and state management best practices for team adoption.
Cloud Migration
- Contribute to an active, multi-year program that migrates on-premises servers, applications, and databases into AWS. This includes network readiness, infrastructure provisioning, cutover planning, and post-migration validation.
- Work with application and data engineering teams to ensure cloud infrastructure is the right size, secure, and optimized for migrated workloads.
- Support hybrid connectivity between on-premises environments and AWS during the migration transition period.
FinOps & Observability
- Continuously track cloud infrastructure performance, uptime, and costs with CloudWatch and related tools; proactively resolve issues and eradicate inefficiencies.
- Design and implement tagging strategies, cost allocation frameworks, and FinOps practices. Deliver financial visibility and optimize cloud spend across accounts.
- Construct and oversee dashboards and alerting systems for infrastructure health, capacity, and cost trends.
Containerization & Platform
- Administer and maintain containerized workloads running on EKS and/or ECS. Oversee cluster configuration, scaling policies, and provide operational support.
- Collaborate with development teams to right-size, secure, and integrate container infrastructure with CI/CD pipelines.
Collaboration & Documentation
- Partner with infrastructure, security, application, and data engineering teams across CES's global offices to align cloud infrastructure with organizational objectives and ensure consistent, well-governed delivery.
- Engage directly with internal stakeholders across CES business lines and external clients and partners, including their technical and non-technical representatives, to support cloud infrastructure requirements, coordinate resolution of service-impacting issues, and communicate clearly in both technical and non-technical terms as the situation requires.
- Manage competing priorities across concurrent workstreams, communicating status and risk clearly to IS leadership and relevant stakeholders.
- Draft and update detailed documentation of cloud architecture, configurations, runbooks, and operational procedures.
- Serve in on-call rotation to address critical cloud infrastructure incidents and escalations.
- Evaluate emerging AWS services and devise adoption strategies aligned with organizational objectives.
Required
- 5+ years of hands-on experience in cloud infrastructure engineering or cloud architecture, with AWS as the primary platform.
- Demonstrate deep expertise with core AWS services. These include EC2, EKS/ECS, Lambda, S3, RDS/Aurora, DynamoDB, VPC, IAM, Route 53, CloudFront, CloudWatch, and AWS Organizations.
- Extensive practical experience with Terraform, including module authorship, state management, and configuring remote backends (preferably with Terraform Cloud).
- Demonstrate strong command of AWS CLI and proficiency in Python and/or Bash for automation and operational tooling.
- Have experience building and managing CI/CD pipelines. Experience with GitHub Actions is preferred.
- Have a solid understanding of cloud networking. This covers routing, DNS, load balancing, security groups, NACLs, Transit Gateway, Direct Connect, and hybrid connectivity.
- Implement IAM least-privilege, SCPs, and secrets management in a multi-account AWS environment.
- Have experience with containerization and orchestration, such as Docker and Kubernetes (EKS or similar).
- Proven ability to architect and uphold IaC frameworks in environments where standards are still evolving—comfortable with ambiguity and proactive about creating structure.
- Bachelor’s degree in computer science, Information Technology, or a related field, or equivalent practical experience.
- Excellent written and verbal communication skills, with the demonstrated ability to engage clearly and professionally with technical and non-technical stakeholders across all levels of an organization. This is a firm requirement of this role.
- Demonstrated experience working directly with internal business stakeholders and external clients or partners, including their technical and non-technical representatives, to coordinate cloud infrastructure solutions, communicate service impact, and maintain trust during high-pressure situations.
Required Certifications
- AWS Certified Solutions Architect (Professional)
- AWS Certified DevOps Engineer (Professional)
- Active pursuit with demonstrated progress is also acceptable.
Preferred Certifications
- AWS Certified Security (Specialty)
- HashiCorp Terraform Associate or Professional
- Microsoft Certified: Azure Administrator Associate or Azure Network Engineer Associate
Nice to Have
- Experience with AWS CloudFormation alongside Terraform in a mixed IaC environment.
- Familiarity with monitoring and observability platforms beyond CloudWatch (Grafana, or similar).
- Exposure to Azure networking and hybrid connectivity in a secondary cloud capacity.
- Experience with FinOps tooling or cloud cost management platforms.
- Familiarity with network security concepts relevant to cloud environments: WAF, Shield, GuardDuty, Security Hub.
CES offers a competitive salary commensurate with experience, a performance-based annual bonus, a year-end bonus in accordance with company policy, premium health insurance for associates and eligible family members, and statutory insurance and benefits in accordance with Vietnamese law. Associates also receive applicable allowances, 12 days of annual leave, paid sick leave, public holidays, additional company-designated leave, and access to professional development and unlimited online training opportunities.
Beyond the benefits package, here’s what you can expect at CES:
- Meaningful responsibility and the opportunity to make a real impact in dynamic energy markets.
- The chance to learn from and collaborate with experienced professionals across our teams in Vietnam, India, and the United States.
- Ongoing opportunities to strengthen your technical, analytical, and leadership skills.
- Annual performance evaluations and clear opportunities for professional and career development.
- A supportive culture that values initiative, accountability, collaboration, and continuous growth.
- Team-building activities, employee engagement events, and company celebrations.
Customized Energy Solutions provides equal employment opportunities to all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.