OPSWAT

Protects critical infrastructure from malware

Associate DevOps Engineer

Cloud EngineeringPosted on Nov 12

Full-timeHo Chi Minh City, VietnamNo salary listedIn-person

About the Job

Requirements

A Bachelor's degree in Computer Science or a related field, or equivalent practical experience.
Hands-on experience with AWS, including EC2, S3, IAM, and VPC.
Familiarity with CI/CD, ideally GitHub Actions.
A good understanding of Docker and basic Kubernetes, including pods, deployments, services, and reading logs and events with kubectl.
Scripting skills in Bash and/or Python, and comfort with YAML/JSON configuration.
Basic Linux administration and networking knowledge, including DNS, load balancing, and TLS.
Regular use of AI coding assistants such as Claude Code, GitHub Copilot, or Cursor, with the habit of checking their output before trusting it.
Good written English for runbooks, incident notes, and tickets.

Responsibilities

Build and maintain Infrastructure as Code with Terraform, and Kubernetes manifests with Kustomize and Helm, delivered through GitOps (Argo CD) across multiple AWS regions.
Operate and improve CI/CD pipelines in GitHub Actions so engineering teams can ship scanning and threat-intelligence features safely and often.
Support development teams in deploying and running containerized microservices on Amazon EKS, including the message queues, caches, and databases they depend on.
Monitor system health, performance, and cost; take part in troubleshooting and incident response for production issues.
Automate routine operational tasks such as scaling, patching, backups, and new-region setup.
Apply security best practices across cloud infrastructure for a platform built to handle malicious content.
Write and maintain runbooks and technical documentation.
Use AI to draft Terraform and Kubernetes changes, investigate alerts and logs, and write runbooks and incident notes, while reviewing every change and plan before it is applied.
Help run the AI tooling, including CI workflows that call AI models, API keys and access, and least-privilege credentials for agents.

Desired Qualifications

Certifications such as AWS Solutions Architect – Associate, AWS DevOps Engineer, or CKA/CKAD.
Experience with Helm, Kustomize, and Argo CD, or Kubernetes autoscaling tools such as Karpenter and KEDA.
Experience operating Kafka (Amazon MSK), RabbitMQ, Redis (ElastiCache), or MongoDB/Amazon DocumentDB.
Experience with observability tools such as Coralogix, OpenTelemetry, Prometheus, or Grafana.
Experience with cloud cost management, including tagging, Savings Plans, and rightsizing.
An interest in cybersecurity or secure cloud practices, including secrets management with SOPS or External Secrets, least privilege, and vulnerability scanning.
Knowledge of information security standards and certifications such as ISO/IEC 27001 and ISO/IEC 27017.
Experience setting up or operating AI tooling, such as AI steps in CI pipelines, MCP servers, agent permissions, or LLM services such as Amazon Bedrock.

OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life.

About the Role
MetaDefender Cloud is OPSWAT’s cloud-native SaaS platform. Organizations worldwide use it to detect and prevent file-borne threats through Multiscanning, Deep CDR™, Sandbox and threat intelligence APIs. As an Associate DevOps Engineer, you’ll help keep this platform fast, secure and always available, working alongside senior engineers on the infrastructure that handles large volumes of untrusted files every day. AI is part of how this team builds and operates the platform, and you’ll use it from day one.

What You Will Be Doing

Build and maintain Infrastructure as Code with Terraform, and Kubernetes manifests with Kustomize and Helm, delivered through GitOps (Argo CD) across multiple AWS regions
Operate and improve CI/CD pipelines in GitHub Actions so engineering teams can ship scanning and threat-intelligence features safely and often
Support development teams in deploying and running containerized microservices on Amazon EKS, including the message queues, caches and databases they depend on
Monitor system health, performance and cost; take part in troubleshooting and incident response for production issues
Automate routine operational tasks such as scaling, patching, backups and new-region setup
Apply security best practices across cloud infrastructure, as fits a platform built to handle malicious content
Write and maintain runbooks and technical documentation

How We Work with AI

AI assistants and internal AI agents are part of our delivery flow: an agent scores the risk of every infrastructure pull request and routes it to the right approvers, and AI review runs on code changes
You will use AI to draft Terraform and Kubernetes changes, investigate alerts and logs, and write runbooks and incident notes
You stay accountable for every change: you review each plan before it is applied, and no agent approves or merges on your behalf
You will help run the AI tooling itself: CI workflows that call AI models, the API keys and access they need, and least-privilege credentials for agents

What We Need from You

A Bachelor’s degree in Computer Science or a related field, or equivalent practical experience
Hands-on experience with AWS (EC2, S3, IAM, VPC)
Familiarity with CI/CD, ideally GitHub Actions
A good understanding of Docker and basic Kubernetes (pods, deployments, services; reading logs and events with kubectl)
Scripting skills in Bash and/or Python, plus comfort with YAML/JSON configuration
Basic Linux administration and networking knowledge (DNS, load balancing, TLS)
Regular use of AI coding assistants (such as Claude Code, GitHub Copilot or Cursor), with the habit of checking their output before trusting it
Good written English for runbooks, incident notes and tickets
A willingness to learn, take ownership and work well within a global team

It Would Be Nice If You Had

Certifications such as AWS Solutions Architect – Associate, AWS DevOps Engineer, or CKA/CKAD
Experience with Helm, Kustomize and Argo CD, or Kubernetes autoscaling (Karpenter, KEDA)
Experience operating Kafka (Amazon MSK), RabbitMQ, Redis (ElastiCache) or MongoDB/Amazon DocumentDB
Experience with observability tools such as Coralogix, OpenTelemetry, Prometheus or Grafana
Experience with cloud cost management (tagging, Savings Plans, rightsizing)
An interest in cybersecurity or secure cloud practices (secrets management with SOPS or External Secrets, least privilege, vulnerability scanning)
Knowledge of information security standards and certifications such as ISO/IEC 27001 and ISO/IEC 27017
Experience setting up or operating AI tooling: AI steps in CI pipelines, MCP servers, agent permissions, or LLM services such as Amazon Bedrock

OPSWAT is an equal opportunity employer. We celebrate diversity and are committed to providing an environment where equal employment opportunities are extended to all employees and applicants, free of discrimination and harassment of any type. All employment decisions are based on individual qualifications, job requirements, and business needs without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other category protected by federal, state, or local laws.

Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time.

About the Company

OPSWAT

Protects critical infrastructure from malware

OPSWAT provides cybersecurity solutions that protect critical infrastructure from malware and zero-day attacks by focusing on threat prevention and secure data transfer. Its products secure files and devices at all stages—entry, exit, and rest—ensuring secure access and safe data exchange. The company differentiates itself through deep specialization in high-risk sectors like energy, finance, and government, and by achieving widespread trust (notably 98% of U.S. nuclear power facilities) for its compliance-driven approach. Its goal is to help organizations maintain secure, compliant operations and minimize the risk of cyber compromise while keeping systems productive.

Company size: 1,001-5,000
Company stage: Growth Equity (Venture Capital)
Total funding: $125M
Headquarters: Tampa, FL
Founded: 2002

Recently Posted Jobs

Explore more opportunities at OPSWAT

See more jobs