Senior DevOps Engineer (Security & Reliability)

Quick Facts

• Role: Senior DevOps Engineer focused on security and reliability for a multi-region AWS platform
• Work model: Fully remote
• Contract: B2B contractor (EUR 8,000 per month)

Description

You will own the security and reliability surface of the infrastructure—edge, data layer, and the observability stack that detects problems across a multi-region environment. This is hands-on engineering at the intersection of security engineering and SRE, including designing edge controls, hardening cloud security posture, and producing technical evidence for audits and enterprise security reviews.

Responsibilities

• Edge and network security: own Envoy-based edge, WAF rules, rate limiting, and bot management across cloud and CDN layers
• Design and tune protections against abuse (content scraping, credential attacks, traffic anomalies)
• Build detection for key traffic patterns and improve signal-to-noise ratio
• Cloud security posture: harden AWS estate (IAM boundaries, least privilege, threat detection, runtime monitoring on EKS)
• Manage secrets, certificates, and token lifecycle
• Produce infrastructure evidence for ISO 27001 audits, penetration tests, and enterprise security reviews
• Data platform: operate PostgreSQL and RDS in production across regions (upgrades, performance, encryption, access control)
• Own search infrastructure (Typesense and vector search) end to end
• Work with MongoDB and ElastiCache alongside primary data stores
• Observability: own Grafana, Loki, and Prometheus, plus Sentry and PagerDuty
• Build trusted alerting with meaningful thresholds, low noise, and clear runbooks
• Improve how logs and metrics flow from edge and applications into the stack

Requirements

• 5+ years in infrastructure, SRE, or security engineering with strong AWS depth
• Hands-on experience with edge, WAF, or reverse proxy technologies (Envoy, nginx, Cloudflare, ModSecurity, Coraza, or equivalent)
• Production Kubernetes experience, ideally EKS, and strong Terraform
• Experience operating PostgreSQL at scale, including upgrades and performance work
• Practical observability experience with alerting that worked and reducing/ending ineffective alerts
• Security-engineering instincts; think like an attacker
• Professional working-level English

Benefits

• 24/7 PagerDuty on-call rotation with documented playbooks and readiness checklists; participation is agreed and separately compensated
• Async updates with fortnightly planning touchpoint and regular infrastructure/security sync
• Autonomy: small team, wide scope, minimal process; set your own hours and choose your own tools
• Documentation-driven work: threat models, decision records, and runbooks are expected