Mid DevOps Engineer (Security and Reliability)

Stack

Responsibilities

• ▹Own the Envoy-based edge, including WAF rules, rate limiting, and bot management across the cloud and CDN layers
• ▹Design and tune protections against abuse such as content scraping, credential attacks, and traffic anomalies
• ▹Build detection for meaningful traffic patterns and improve signal-to-noise ratio
• ▹Harden the AWS estate: IAM boundaries, least privilege access, threat detection, and runtime monitoring on EKS
• ▹Manage secrets, certificates, and token lifecycle across the platform
• ▹Produce infrastructure evidence for ISO 27001 audits, penetration tests, and enterprise security reviews
• ▹Run PostgreSQL and RDS in production across regions, covering upgrades, performance, encryption, and access control
• ▹Own the search infrastructure (Typesense, vector search) end to end
• ▹Work with MongoDB and Elasticache alongside the primary data stores
• ▹Own the monitoring platform (Grafana, Loki, Prometheus, Sentry, PagerDuty)
• ▹Build alerting people trust, with meaningful thresholds and clear runbooks

Requirements

• ▹5+ years in infrastructure, SRE, or security engineering with strong AWS depth
• ▹Real experience with edge, WAF, or reverse proxy technology (Envoy, nginx, Cloudflare, ModSecurity, Coraza, or equivalent)
• ▹Production Kubernetes experience, ideally EKS, and strong Terraform skills
• ▹Experience operating PostgreSQL at scale, including upgrades and performance work
• ▹Practical observability experience building alerting that actually works
• ▹A security engineer's instincts, thinking like an attacker
• ▹English at a working professional level

Nice to have

• ▹Search infrastructure experience (Typesense, Elasticsearch, OpenSearch, or vector search)
• ▹Content protection and anti-scraping experience
• ▹Experience supporting ISO 27001, SOC 2, or similar audits

Soft skills

What we offer

• ▹Fully remote work from Poland
• ▹B2B contract, EUR 6,000-8,000 gross per month

About the company

Physitrack PLC builds digital health software for clinicians, physiotherapists, and employers in over 100 countries, running on a multi-region AWS platform and ISO 27001:2022 certified.