Skip to content

Cloud Security

Mid DevOps Engineer (Security and Reliability)

Physitrack logoPhysitrackRemote in PolandPosted 2mo ago
Apply on Physitrack (shows the role here)Physitrack as an employer: salaries and roles

The full posting

You will own the security and reliability surface of our infrastructure: the edge, the data layer, and the observability stack that tells us when either is misbehaving. It sits where security engineering meets SRE. You will design controls at the edge, harden our cloud posture, make sure we can see what is happening across a multi-region estate, then evidence all of it to auditors and enterprise customers. This is hands-on engineering, not a governance role.

****

Edge and network security

  • Own our Envoy based edge, along with WAF rules, rate limiting and bot management across our cloud and CDN layers
  • Design and tune protections against abuse, including content scraping, credential attacks and traffic anomalies
  • Build detection for the traffic patterns that matter, and keep improving its signal to noise ratio

****

Cloud security posture** **

  • Harden our AWS estate: IAM boundaries, least privilege access, threat detection and runtime monitoring on EKS
  • Manage secrets, certificates and token lifecycle across the platform
  • Produce the infrastructure evidence behind ISO 27001 audits, penetration tests and enterprise security reviews

****

Data platform

  • Run PostgreSQL and RDS in production across regions, covering upgrades, performance, encryption and access control
  • Own our search infrastructure, Typesense and vector search, end to end
  • Work with MongoDB and Elasticache alongside the primary data stores

****

Observability

  • Own the monitoring platform: Grafana, Loki and Prometheus, plus Sentry and PagerDuty
  • Build alerting people actually trust, with meaningful thresholds, low noise and clear runbooks
  • Improve how logs and metrics flow from the edge and the application into the stack

Essential

  • 5+ years in infrastructure, SRE or security engineering, with strong AWS depth
  • Real experience with edge, WAF or reverse proxy technology: Envoy, nginx, Cloudflare, ModSecurity, Coraza or equivalent
  • Production Kubernetes, ideally EKS, and strong Terraform
  • Operating PostgreSQL at scale. You have done upgrades and performance work, not just connected to one
  • Practical observability experience. You have built alerting that worked, and killed alerting that did not
  • A security engineer's instincts. You think about what an attacker does with the thing you just shipped
  • English at a working professional level. Our engineering team is international

Nice to have** **

  • Search infrastructure: Typesense, Elasticsearch, OpenSearch or vector search
  • Content protection and anti-scraping work
  • Having supported ISO 27001, SOC 2 or similar audits from the technical side
  • Healthcare, fintech or another regulated domain
  • Polish. Much of the engineering team is in Poland, though the company works in English

How we work

  • On-call. We run a 24/7 rotation through PagerDuty, with documented playbooks and readiness checklists. Participation is agreed with you rather than assumed, and separately compensated.
  • Cadence. Written async updates, a fortnightly planning touchpoint and a regular infrastructure and security sync. You set your own hours and choose your own tools.
  • Documentation. Threat models, decision records and runbooks are part of the work. We expect the reasoning to be written down, not just the config.
  • Autonomy. Small team, wide scope, very little process between you and a decision.

Where you can be based

This position is 100% remote and open to applicants based in Poland.

Text as Physitrack published it; last compared with the original on 13 Nov 2026.

Apply on Physitrack (shows the role here)

The application

Your details and CV, then 1 question.

Keep these to handCVOther files (optional)
  1. 1.
    Do you have excellent oral and written English?Yes or no

Taken from Physitrack's application form as it stood on 13 Nov 2026.

The employer: Physitrack

Physitrack makes exercise prescription, telehealth and workplace wellbeing software and is hiring one remote DevOps engineer for security and reliability in Poland.

Pay and benefits: B2B contractor engagement, fully remote within Poland.

Full postings from Physitrack All Physitrack openings on the board Physitrack employer profile

Other security roles worth a look

Secured production cloud estates?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Physitrack posts a security role

We read Physitrack's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.