Physitrack

Mid DevOps Engineer (Security and Reliability)

6000 - 8000 EUR/ mies./ mies.B2BB2B (netto)

MidZdalnieFull-time·B2B

#435436·Dodano miesiąc temu·34

Źródło: Physitrack

Aplikuj teraz

Tech Stack / Keywords

AWSEnvoyWAFKubernetes Terraform PostgreSQL Grafana PrometheusTypesensePagerDuty

Firma i stanowisko

Physitrack PLC builds digital health software used by clinicians, physiotherapists and employers in over 100 countries. Their two product lines, Physitrack (exercise prescription, telehealth and patient engagement) and Champion Health (workplace wellbeing), run on a multi-region AWS platform serving Europe, the UK, North America, Australia and the Middle East. The company is ISO 27001:2022 certified and holds clinical data and a large proprietary content library.

Wymagania

Essential:

5+ years in infrastructure, SRE or security engineering, with strong AWS experience.
Experience with edge, WAF or reverse proxy technology such as Envoy, nginx, Cloudflare, ModSecurity or Coraza, or equivalent.
Production Kubernetes experience, ideally EKS, and strong Terraform skills.
Experience operating PostgreSQL at scale, including upgrades and performance work.
Practical observability experience, including building effective alerting.
Security engineering instincts and consideration of how an attacker could use what you ship.
English at a working professional level.

Nice to have:

Search infrastructure experience with Typesense, Elasticsearch, OpenSearch or vector search.
Content protection and anti-scraping experience.
Technical support for ISO 27001, SOC 2 or similar audits.
Experience in healthcare, fintech or another regulated domain.
Polish language skills.

Obowiązki

Edge and network security:

Own the Envoy-based edge, including WAF rules, rate limiting and bot management across cloud and CDN layers.
Design and tune protections against abuse, including content scraping, credential attacks and traffic anomalies.
Build detection for relevant traffic patterns and improve its signal-to-noise ratio.

Cloud security posture:

Harden the AWS estate through IAM boundaries, least-privilege access, threat detection and runtime monitoring on EKS.
Manage secrets, certificates and token lifecycle across the platform.
Produce infrastructure evidence for ISO 27001 audits, penetration tests and enterprise security reviews.

Data platform:

Run PostgreSQL and RDS in production across regions, covering upgrades, performance, encryption and access control.
Own search infrastructure, including Typesense and vector search.
Work with MongoDB and ElastiCache alongside the primary data stores.

Observability:

Own the monitoring platform: Grafana, Loki, Prometheus, Sentry and PagerDuty.
Build alerting with meaningful thresholds, low noise and clear runbooks.
Improve how logs and metrics flow from the edge and application into the stack.

Benefity

Set your own hours and choose your own tools.

Elastyczne godziny

Inne informacje

The role is fully remote and based in Poland.
Participation in the 24/7 on-call rotation through PagerDuty is agreed with you and separately compensated.

Physitrack

3 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz