Infrastructure Engineer
JOB DESCRIPTION
Arches is a global knowledge platform connecting 160,000+ experts to Fortune 500s and top investors. Founded in 2019, we have 250+ staff across 8 cities - with HCMC as our largest hub — and we are scaling to 400+ by becoming an AI-native organization. We are backed by $6M+ and certified as a Great Place to Work® Japan 2026.
Designs, builds, and operates the AWS infrastructure that supports our product, continuously improving its reliability, security, cost efficiency, and governance.
You'll be a founding member of a new engineering team—building culture, process, and tech stack from the ground up. This isn't a cog-in-the-machine role; it's your chance to define how a team works, what tools we adopt, and how we ship.
What's in it for you:
- Global exposure — collaborate across 15+ nationalities, with our largest hub in HCMC
- Fast-track growth — doubling in size means real leadership opportunities (Tech Lead → CTO track)
- AI-first innovation — build at the frontier, not just maintain legacy systems
- GRIT culture — Guts, Resilience, Initiative, Tenacity. We empower ownership, not titles
- Shape the future — your decisions today become the team's DNA tomorrow
Location: Ho Chi Minh City, Vietnam
- Build and operate cloud infrastructure using Infrastructure as Code (using Terraform, with changes applied through code review and CI/CD)
- Oversee multi-account governance - landing zone design and improvement via AWS Organizations / Control Tower, OU and SCP management, centralized logging and auditing
- Strengthen security and identity management - least-privilege IAM, SSO/federation, secrets management, encryption, threat detection
- Improve reliability and fault tolerance - eliminating single points of failure, high-availability and disaster-recovery design, backup/restore setup
- Optimize costs - right-sizing resources, leveraging autoscaling, cost visibility
- Build observability - metrics, alarms, dashboards, log management
- Raise engineering standards - writing design docs, runbooks, and standard rules; decision-making based on the Well-Architected Framework; incident response; mentoring team members
Required Qualifications
- 3+ years of experience building and operating production cloud infrastructure on AWS
- Hands-on knowledge of core AWS services across compute, data, networking, and delivery (e.g., ECS/Fargate, RDS, ElastiCache, OpenSearch, CloudFront/S3, Route 53, CloudWatch, VPC)
- Solid foundational knowledge of AWS security (IAM roles/policies/least privilege/federation/SSO, logging and auditing via CloudTrail, KMS, secure VPC network design)
- Practical cost optimization experience , having translated technical improvements into concrete cost savings
- Deep hands-on experience with Terraform or an equivalent IaC tool (including modules, state management, multi-environment/multi-account configurations, and CI/CD-based delivery)
- A careful, disciplined approach to safely changing live production systems (including change management, observability, rollback planning)
Preferred Qualifications
- Experience with AWS Organizations and multi-account strategy (including Control Tower or equivalent landing zones, OUs, and SCPs)
- AWS certifications (e.g., Solutions Architect, DevOps Engineer, Security Specialty)
- Experience migrating/isolating workloads across AWS accounts (including data migration, DNS/certificate cutover, and minimal-downtime migration strategies)
- CI/CD experience using GitHub Actions + OIDC, along with Policy as Code (e.g., OPA/Sentinel) and IaC testing
- Understanding of compliance/audit frameworks such as SOC 2 and ISO 27001
- Production experience running containerized application workloads
- English communication skills (reading, writing, and speaking)
Compensation & Benefits
- Competitive base salary
- Annual Bonus – 1-month gross salary
- Paid Leave – 12 days of annual leave, plus additional paid leave for significant life events and 8 days of sick leave
- Private Medical Insurance
- Self-learning Budget – Up to $1000 per year
Career Growth
- Rapid Career Advancement – Tackle challenging problems for top startups and gain skills for the global stage, with opportunities for swift promotions.
- Build a High-Caliber Network – Collaborate with and learn from top industry leaders and decision-makers, expanding valuable connections for career growth.
Engagement
- Enjoy a vibrant work environment with team activities, quarterly dinners, company trips, social gatherings, and office snacks and drinks. Support for employee well-being also includes sports clubs (badminton, golf, football, etc.)
- Flexible Work Arrangements