Architect

"The AWS & DevSecOps Architect serves as the principal, client-facing technical leader responsible for driving hybrid cloud infrastructure (AWS + On-Premise OpenShift), DevSecOps automation, technical reviews, team guidance, and client engagement for the VCB Corporate Digibank MVP1 program.
Roles & Responsibilities
Hybrid Infrastructure Architecture: Design AWS multi-account landing zones (AFT, EKS, Transit Gateway) connected to VCB's backend core systems and on-premise OpenShift. Maintain component parity across environments (e.g., AWS WAF/S3 vs On-Prem F5 WAF/Ceph).
DevSecOps & Security Automation: Architect GitLab CI/CD pipelines with integrated shift-left security (SAST, DAST, SCA, container scanning). Implement zero-trust security, data encryption (TLS 1.3, AES-256), and identity federation (ForgeRock CIAM, Keycloak, HashiCorp Vault).
GitOps & Release Governance: Lead ArgoCD-based GitOps deployments, Main-Based release branching, immutable artifact promotion, and Change Advisory Board (CAB) approval gates.
Observability, DR, & Client Engagement: Establish unified hybrid monitoring (Prometheus, Grafana, ELK, Dynatrace), validate RTO/RPO DR failover strategies, and act as the primary advisor to VCB leadership
Client Interface & Query Management: Serve as the primary technical point of contact for Vietcombank (VCB) IT, Security, and Enterprise Architecture stakeholders. Proactively address client inquiries, resolve complex architecture/infrastructure queries, present design proposals, and lead discussions in ARB, DRB and Change Control Boards.
Team Guidance & Technical Enablement: Lead, coach, and mentor cross-functional engineering and DevOps teams on GitOps practices, cloud-native design, and mobile security. Foster a DevSecOps culture, establish engineering standards, and build reusable documentation and training materials via the Dev Portal.

Work arrangement
Hybrid