Senior DevOps Engineer (Security and Reliability)
P
Physitrack PLCDigital health software
Fully remote, based in PolandContractSenior
Salary8,000 EUR per month
Apply NowOpens the employer's application page
Job Details
- Languages
- English at a working professional level; Polish is a nice-to-have.
- Experience
- 5+ years in infrastructure, SRE or security engineering
- Required Skills
- AWSPostgreSQLKubernetesGrafanaPrometheusTerraform
Requirements
- Have 5+ years of experience in infrastructure, SRE, or security engineering, with strong AWS depth.
- Bring practical experience with edge, WAF, or reverse-proxy technology such as Envoy, nginx, Cloudflare, ModSecurity, or Coraza.
- Have production Kubernetes experience, ideally with EKS.
- Have strong Terraform experience.
- Have operated PostgreSQL at scale, including upgrades and performance work.
- Have practical observability experience building effective alerting and removing ineffective alerts.
- Apply a security-engineering mindset and consider how an attacker could exploit shipped systems.
- Have professional working proficiency in English.
- Search infrastructure experience, content protection or anti-scraping work, and technical support for ISO 27001, SOC 2, or similar audits are nice to have.
- Healthcare, fintech, or other regulated-domain experience and Polish are nice to have.
Responsibilities
- Own the Envoy-based edge, including WAF rules, rate limiting, and bot management across cloud and CDN layers.
- Design and tune protections against abuse, including content scraping, credential attacks, and traffic anomalies.
- Build detection for relevant traffic patterns and improve its signal-to-noise ratio.
- Harden the AWS estate through IAM boundaries, least-privilege access, threat detection, and runtime monitoring on EKS.
- Manage secrets, certificates, and token lifecycle across the platform.
- Produce infrastructure evidence for ISO 27001 audits, penetration tests, and enterprise security reviews.
- Operate PostgreSQL and RDS in production across regions, including upgrades, performance, encryption, and access control.
- Own Typesense and vector search infrastructure, and work with MongoDB and ElastiCache.
- Own monitoring with Grafana, Loki, Prometheus, Sentry, and PagerDuty; build trusted alerts and improve log and metric flows.
View Full Description & ApplyYou'll be redirected to the employer's site
