Remote Senior Edge & Cloud Security DevOps Engineer

Physitrack; Polska; Remote; PLN 292.000 - 389.000; Vollzeit

Zusammenfassung

Physitrack PLC is seeking a senior infrastructure engineer to own the edge, data layer and observability stack across a multi-region AWS estate. This hands-on role blends security engineering with SRE disciplines to design controls, harden posture and provide evidence for audits.

You will implement edge protections (Envoy/WAF), strengthen AWS IAM and EKS runtime security, manage PostgreSQL and vector search, and shape reliable alerts and runbooks for enterprise customers.

Qualifikationen

• 5+ years in infrastructure, SRE or security engineering, with strong AWS depth.
• Hands-on experience with edge, WAF or reverse proxy tech (Envoy, nginx, Cloudflare, ModSecurity, Coraza).
• Production Kubernetes (preferably EKS) and Terraform expertise.
• Experience running PostgreSQL at scale with upgrades and performance work.
• Proven observability track record with effective alerting and low false positives.
• Security-minded approach to threat modeling and secure delivery.
• Professional English language skills in an international engineering team.

Aufgaben

• Own edge security stack including Envoy, WAF rules, rate limiting and bot protection.
• Harden AWS posture with IAM boundaries, least privilege and runtime monitoring on EKS.
• Manage cross-region PostgreSQL and associated data stores, with upgrades and security controls.
• Own observability stack: Grafana, Prometheus, Loki, Sentry; build meaningful alerts and runbooks.

Kenntnisse

AWS depth

Edge/WAF tech

Kubernetes (EKS)

Terraform

PostgreSQL at scale

Observability experience

Security instincts

English proficiency

Tools

Envoy

Nginx

Cloudflare

Coraza

ModSecurity

Kubernetes (EKS)

Terraform

PostgreSQL

Typesense/OpenSearch/Elasticsearch

Jobbeschreibung

Physitrack PLC is seeking a senior infrastructure engineer to own the edge, data layer and observability stack across a multi-region AWS estate. This hands-on role blends security engineering with SRE disciplines to design controls, harden posture and provide evidence for audits.

You will implement edge protections (Envoy/WAF), strengthen AWS IAM and EKS runtime security, manage PostgreSQL and vector search, and shape reliable alerts and runbooks for enterprise customers.