Senior DevOps Engineer – Security, Reliability

This is a fully remote position, open to applicants in Poland.

📋 Description

• Take charge of the security and reliability aspects of Physitrack's infrastructure, which encompasses the edge, data layer, and observability stack.

• Manage the Envoy-based edge, implement WAF rules, rate limiting, and bot management across cloud and CDN layers.

• Design and optimize defenses against content scraping, credential attacks, and traffic anomalies.

• Develop detection mechanisms for significant traffic patterns and enhance the signal-to-noise ratio.

• Strengthen the AWS environment by establishing IAM boundaries, applying least-privilege access, threat detection, and EKS runtime monitoring.

• Oversee the management of secrets, certificates, and the token lifecycle throughout the platform.

• Generate infrastructure documentation for ISO 27001 audits, penetration tests, and enterprise security assessments.

• Operate PostgreSQL and RDS in production across various regions, handling upgrades, performance, encryption, and access control.

• Manage the Typesense and vector-search infrastructure from end to end.

• Collaborate with MongoDB and ElastiCache in conjunction with primary data stores.

• Supervise monitoring activities using Grafana, Loki, Prometheus, Sentry, and PagerDuty.

• Construct reliable, low-noise alerting systems with meaningful thresholds and clear runbooks.

• Enhance log and metric flows from the edge and application into the observability stack.

• Engage in a 24/7 PagerDuty on-call rotation based on agreement.

• Maintain threat models, decision records, and runbooks.

• Provide written asynchronous updates and take part in planning and infrastructure/security sync meetings.

⛳️ Requirements

• Minimum of 5 years of experience in infrastructure, SRE, or security engineering.

• In-depth knowledge of AWS.

• Practical experience with edge, WAF, or reverse proxy technologies such as Envoy, nginx, Cloudflare, ModSecurity, Coraza, or similar.

• Experience with production Kubernetes, preferably EKS.

• Proficiency in Terraform.

• Experience in operating PostgreSQL at scale, including upgrades and performance optimization.

• Hands-on experience in observability with a focus on effective alerting.

• A security engineering mindset.

• Proficiency in English at a working professional level.

• Experience with search infrastructure, such as Typesense, Elasticsearch, OpenSearch, or vector search (desirable).

• Background in content protection and anti-scraping (desirable).

• Technical support experience for ISO 27001, SOC 2, or similar audits (desirable).

• Experience in healthcare, fintech, or other regulated domains (desirable).

• Knowledge of the Polish language (desirable).

🏝️ Benefits

• Participation in the 24/7 on-call rotation is compensated separately.

• Flexible working hours set by the employee.

• Freedom to choose tools.

• Access to a wellness platform for the employee, friends, and family through Champion Health.

• Inclusive and entrepreneurial work culture.

• Flat organizational structure and autonomy in work.

• Opportunity to collaborate with individuals globally and learn from diverse experiences.