Senior DevOps Engineer (Security and Reliability)

Stack

Responsibilities

• ▹Own the Envoy-based edge, along with WAF rules, rate limiting and bot management across the cloud and CDN layers
• ▹Design and tune protections against abuse such as content scraping, credential attacks and traffic anomalies
• ▹Harden the AWS estate: IAM boundaries, least privilege access, threat detection and runtime monitoring on EKS
• ▹Manage secrets, certificates and token lifecycle across the platform
• ▹Produce infrastructure evidence for ISO 27001 audits, penetration tests and enterprise security reviews
• ▹Run PostgreSQL and RDS in production across regions: upgrades, performance, encryption, access control
• ▹Own the search infrastructure, Typesense and vector search, end to end
• ▹Work with MongoDB and Elasticache alongside the primary data stores
• ▹Own the monitoring platform: Grafana, Loki, Prometheus, plus Sentry and PagerDuty
• ▹Build alerting people trust, with meaningful thresholds, low noise and clear runbooks

Requirements

• ▹5+ years in infrastructure, SRE or security engineering, with strong AWS depth
• ▹Real experience with edge/WAF/reverse proxy technology, e.g. Envoy, nginx, Cloudflare, ModSecurity, Coraza
• ▹Production Kubernetes experience, ideally EKS, and strong Terraform
• ▹Experience operating PostgreSQL at scale, including upgrades and performance work
• ▹Practical observability experience, with alerting that has actually worked
• ▹A security engineer's instincts
• ▹English at a working professional level

Nice to have

• ▹Search infrastructure: Typesense, Elasticsearch, OpenSearch or vector search
• ▹Content protection and anti-scraping work
• ▹Experience supporting ISO 27001 or SOC 2 audits

What we offer

• ▹Fully remote
• ▹B2B contract, EUR 8,000 per month

About the company

Physitrack PLC builds digital health software used by clinicians, physiotherapists and employers in over 100 countries, with two product lines, Physitrack and Champion Health, running on an ISO 27001:2022-certified, multi-region AWS platform.