Senior Devops Engineer

Physitrack PLC builds digital health software used by clinicians, physiotherapists and employers in over 100 countries. Their two product lines, Physitrack and Champion Health, operate on a multi-region AWS platform serving Europe, the UK, North America, Australia and the Middle East. The company is ISO 27001:2022 certified and manages clinical data requiring strong security.

Essential:

• 5+ years in infrastructure, SRE or security engineering with strong AWS expertise
• Real experience with edge, WAF, or reverse proxy technologies such as Envoy, nginx, Cloudflare, ModSecurity or Coraza
• Production Kubernetes, ideally EKS, and strong Terraform skills
• Experience operating PostgreSQL at scale including upgrades and performance tuning
• Practical observability expertise with successful alerting implementation
• Security engineering mindset focusing on attacker perspectives
• Professional working proficiency in English

Nice to have:

• Experience with search infrastructure: Typesense, Elasticsearch, OpenSearch or vector search
• Experience in content protection and anti-scraping
• Technical support for ISO 27001, SOC 2, or similar audits
• Background in healthcare, fintech, or regulated domains
• Polish language skills

Edge and network security:

• Own Envoy based edge, including WAF rules, rate limiting, and bot management across cloud and CDN layers
• Design and tune protections against abuse such as content scraping, credential attacks, and traffic anomalies
• Build detection for significant traffic patterns and improve signal to noise ratio

Cloud security posture:

• Harden the AWS estate with IAM boundaries, least privilege access, threat detection, and runtime monitoring on EKS
• Manage secrets, certificates, and token lifecycle across the platform
• Produce infrastructure evidence for ISO 27001 audits, penetration tests, and enterprise security reviews

Data platform:

• Run PostgreSQL and RDS production instances across regions, handling upgrades, performance, encryption, and access control
• Own search infrastructure including Typesense and vector search end to end
• Work with MongoDB and Elasticache alongside primary data stores

Observability:

• Own monitoring platform including Grafana, Loki, Prometheus, plus Sentry and PagerDuty
• Build trusted alerting systems with meaningful thresholds, low noise, and clear runbooks
• Improve logs and metrics flow from edge and applications into the observability stack

The controller of your personal data is Physitrack PLC, 4th Floor 140 Aldersgate Street, London, United Kingdom, EC1A 4HY. Data processing follows GDPR regulations based on recruitment purpose, including mandatory and voluntary data. Data retention is until recruitment completion and up to 24 months with consent for future recruitment. Rights to data access, rectification, erasure, restriction, portability, objection, and complaint are guaranteed. Consent withdrawal is possible at any time without affecting prior processing. Data is not subject to profiling.