Mid DevOps Engineer – Security, Reliability

This is a fully remote position, open to applicants in Poland.

📋 Description

• Take responsibility for the security and reliability aspects of Physitrack’s multi-region AWS infrastructure.

• Manage the Envoy-based edge, WAF regulations, rate limiting, and bot management across cloud and CDN layers.

• Design and optimize protections against content scraping, credential attacks, and traffic anomalies.

• Develop traffic-pattern detection systems and enhance their signal-to-noise ratio.

• Strengthen AWS infrastructure through IAM boundaries, least-privilege access, threat detection, and runtime monitoring on EKS.

• Oversee the management of secrets, certificates, and token lifecycle throughout the platform.

• Generate infrastructure evidence for ISO 27001 audits, penetration tests, and enterprise security evaluations.

• Operate PostgreSQL and RDS in production across various regions, including upgrades, performance tuning, encryption, and access control.

• Take full ownership of Typesense and vector search infrastructure.

• Collaborate with MongoDB and ElastiCache alongside primary data stores.

• Manage Grafana, Loki, Prometheus, Sentry, and PagerDuty monitoring systems.

• Develop reliable alerting systems with meaningful thresholds, minimal noise, and clear runbooks.

• Enhance log and metric flow from the edge and application into the observability stack.

• Participate in a 24/7 PagerDuty on-call rotation as agreed upon.

⛳️ Requirements

• Minimum of 5 years of experience in infrastructure, SRE, or security engineering.

• In-depth knowledge of AWS.

• Familiarity with edge, WAF, or reverse proxy technologies such as Envoy, nginx, Cloudflare, ModSecurity, Coraza, or similar.

• Experience with production Kubernetes, preferably EKS.

• Strong skills in Terraform.

• Experience managing PostgreSQL at scale, including upgrades and performance optimization.

• Practical experience in observability and creating effective alerting systems.

• A security-focused engineering mindset.

• Proficiency in English at a working professional level.

• Knowledge of Polish is a plus.

• Experience with search infrastructure technologies such as Typesense, Elasticsearch, OpenSearch, or vector search is a plus.

• Familiarity with content protection and anti-scraping methodologies is a plus.

• Technical support experience for ISO 27001, SOC 2, or similar audits is a plus.

• Experience in healthcare, fintech, or other regulated domains is a plus.

🏝️ Benefits

• Participation in 24/7 on-call duties is separately compensated.

• Flexible hours to set your own schedule.

• Freedom to choose your own tools.

• Access to a wellness platform for you and your friends and family through Champion Health.

• An inclusive and entrepreneurial company culture.

• A flat organizational structure that promotes autonomy.

• Opportunity to collaborate with individuals from around the globe and gain insights from their experiences.