Infrastructure Lead (Cloud)
Top 3 Reasons To Join Us
The Job
INFRASTRUCTURE LEAD (HYBRID: CLOUD & ON-PREM)
ABOUT US
CarDoctor is a pioneer in applying AI to optimize vehicle care and automotive operations. The CarDoctor ecosystem connects drivers, garages, and partners within an intelligent platform that delivers convenience, safety, efficiency, and cost savings for users.
Website:
Aggregatori Capaci is the core technology development company behind CarDoctor, building its technology ecosystem from the ground up with AI-first architecture and emerging technologies at its core.
Website:
- Working Location: 5BT2, Me Tri Ha Urban Area, Tu Liem Ward, Hanoi
- Working Hours: 08:00 AM – 05:30 PM | Monday – Friday
JOB PURPOSE
- Lead the design, operation, and continuous improvement of the company's hybrid infrastructure, spanning both cloud (AWS/GCP) and on-premise (data center/colocation) environments.
- Ensure high availability, security, performance, and cost-efficiency across both cloud and on-prem systems, with a consistent architecture and operating model between the two.
- Lead the Infra team (~4-6 engineers) and coordinate with internal teams and vendors to ensure reliable infrastructure operations end-to-end.
KEY RESPONSIBILITIES
A. Infrastructure Architecture & Capacity Planning
- Design and own the hybrid infrastructure architecture: cloud-native workloads on AWS/GCP (EKS, EC2, S3, RDS, VPC, ALB/NLB...) and on-premise infrastructure (data center/colocation: compute, storage, network, security); standardize dev, staging, and production environments across both.
- Lead capacity planning for both cloud and on-prem, based on user growth, tenant/station count, and workload trends; build a 12–24 month hardware/cloud investment roadmap.
- Design High Availability and Disaster Recovery across environments (multi-AZ/multi-site, active-active or active-standby); define RPO/RTO per service tier and run periodic DR drills.
- Decide, workload by workload, what runs on cloud vs. on-prem, based on cost, performance, compliance, and Vietnam data-residency requirements.
B. Platform Operations, CI/CD & Container Orchestration
- Lead Kubernetes operations at scale across both environments (EKS and on-prem K8s) using Helm, with autoscaling/self-healing; support multi-tenant architecture for platform products (e.g. Service Station Portal).
- Build and standardize CI/CD (Jenkins/GitLab CI/ArgoCD) and IaC (Terraform, Ansible, Helm) so releases to either environment are safe, fast, and consistent.
- Operate the data and middleware layer (PostgreSQL/MySQL clusters, Redis, Kafka/RabbitMQ, Elasticsearch/OpenSearch, object storage) and real-time infrastructure (VoIP/SIP, WebRTC, WebSocket) where applicable; ensure performance during peak periods.
C. Observability, Security & Cost Efficiency
- Build and maintain observability (Prometheus, Grafana, ELK/Loki, CloudWatch) across cloud and on-prem; define and enforce SLIs/SLOs/SLAs, and lead incident response and blameless RCA.
- Enforce least-privilege IAM, network/firewall security, and secret management across both environments; integrate security monitoring into reliability workflows.
- Apply FinOps/cost-efficiency practices on cloud (rightsizing, autoscaling, Savings Plans) and cost-aware capacity planning on-prem; balance reliability vs. cost trade-offs across the hybrid estate.
D. Team Leadership & Collaboration
- Manage, mentor, and develop the Infra team (~4-6 engineers); own the infrastructure technical roadmap across cloud and on-prem.
- Collaborate with Backend, QA, and Security teams to standardize release, rollback, and versioning processes; report infrastructure status, incidents, and cost to the CTO/Management regularly.
Your Skills and Experience
JOB REQUIREMENTS
- Minimum 7 years of experience in DevOps/SRE/Infrastructure, including experience leading a team; experience spanning both cloud and on-premise environments is strongly preferred.
- Proficient with core AWS services (EKS, EC2, S3, RDS, IAM, VPC, ALB/NLB, CloudWatch) and Terraform (required).
- Hands-on experience managing on-premise infrastructure: Servers, Network, Storage, Virtualization (VMware/Hyper-V), Backup/DR.
- Strong understanding of Kubernetes operations at scale (EKS and/or on-prem), Helm, and multi-tenant architecture.
- Experience with CI/CD (Jenkins/GitLab CI/ArgoCD) and implementing observability (Prometheus/Grafana/ELK); experience defining SLIs/SLOs/SLAs.
- Solid understanding of system security (IAM/RBAC, secret management, least privilege, network/firewall) and FinOps/cost optimization.
- Experience operating database clusters, caching, message queues, search, or object storage (PostgreSQL/MySQL, Redis, Kafka/RabbitMQ, Elasticsearch, Ceph/MinIO) is a plus.
- Proven ability to lead/mentor a technical team, with strong communication skills across technical teams, senior stakeholders, and vendors.
Why You'll Love Working Here
Compensation & Benefits
- Competitive salary package based on qualifications and experience.
- 13th-month salary.
- Annual health check-up according to company policy.
- Holiday bonuses for National Day (September 2) and New Year.
- Comprehensive employee care policies including birthday, marriage, childbirth, and illness support.
- Company-provided laptop, monitor, and necessary tools/accounts for work.
- 50% discount at the company café for employees.
Career Development
- Annual salary review and promotion opportunities.
- Diverse career paths including management and specialist tracks.
- Opportunities to participate in technical training and TechTalks.
- Opportunity to work on cloud infrastructure supporting an AI-first automotive technology product.
- Recognition and rewards at both team and organizational levels.
Working Environment
- Open and collaborative working environment.
- High-performance culture with opportunities for technical ownership and innovation.
- Quarterly/annual teambuilding activities and internal events.
Skills
- AI
- Ansible
- Argo CD
- AWS
- Azure
- CI/CD
- Cloud
- Cloud Native
- CloudWatch
- DevOps
- EC2
- EKS
- Elasticsearch
- ELK
- FinOps
- Firewall
- GCP
- GitLab
- Grafana
- Helm
- Hyper-V
- IAM
- Infrastructure as Code
- Jenkins
- Kafka
- Kubernetes
- Loki
- MySQL
- Observability
- OpenSearch
- PostgreSQL
- Prometheus
- RabbitMQ
- RBAC
- RDS
- Redis
- S3
- Terraform
- Virtualization
- VMware
- VoIP
- VPC
- Websockets