Senior DevOps Engineer

Newton Research•Needham, MA

3h•$150,000 - $175,000

About The Position

We're looking for a Senior DevOps Engineer to own our Kubernetes platform end to end — from cluster architecture and workload design through to the developer experience on top of it. Our product ships in two shapes: a SaaS platform we run on AWS, and customer-installed deployments running inside our customers' own Azure and GCP environments. You'll be designing for portability from day one, packaging workloads that behave predictably whether they land on our EKS clusters or a customer's cluster you've never seen. The team is small, so you'll own problems end to end and have real say in tooling and architecture.

Requirements

7+ years in DevOps, SRE, platform, or infrastructure engineering with ownership of production systems at scale
Deep production Kubernetes experience — you've run clusters, not just deployed to them. Comfortable with upgrades, autoscaling behavior, resource management, RBAC, network policy, and debugging workloads that misbehave in ways the dashboard doesn't explain
Hands-on with Helm and a GitOps deployment model (Argo CD, Flux, or equivalent)
Strong Terraform experience across multiple cloud providers; deep AWS expertise (EKS in particular) with working knowledge of Azure and GCP
Proficiency with GitHub Actions or comparable CI/CD tooling
Experience with Prometheus, Grafana, and distributed tracing
SSO implementation via SAML 2.0 and/or OIDC with enterprise IdPs (Okta, Entra ID, Google Workspace); Auth0 as a service provider is a plus
Experience supporting SOC 2 or similar frameworks (e.g., ISO 27001)
Fluency in Python, Bash, or Go
Networking fundamentals — DNS, load balancing, VPC design, VPN configuration — plus Kubernetes networking specifically (CNI behavior, service types, ingress)
Comfort with Linux system administration
A track record of using AI as a practical tool in day-to-day work
Able to explain technical tradeoffs to non-technical stakeholders

Nice To Haves

You know Kubernetes deeply enough to know when it isn't the answer, and you're comfortable saying so.
You automate what's manual and repeatable, and you treat compliance as engineering discipline rather than a checkbox exercise.

Responsibilities

Own the Kubernetes platform: cluster provisioning and lifecycle (EKS primary; AKS and GKE for customer environments), upgrade strategy, autoscaling and node pool design, resource governance, and multi-tenancy boundaries
Design how our software gets deployed — Helm charts, GitOps workflows (Argo CD, Flux, or your recommendation), progressive delivery, and rollback strategies that work in environments you don't directly control
Package and harden our applications for customer-installed Kubernetes deployments, and support customer teams through installation and upgrades
Manage the in-cluster ecosystem: ingress, certificates, secrets (External Secrets, Vault, or similar), service-to-service networking, and any operators we adopt
Build and maintain cloud infrastructure in Terraform across AWS, Azure, and GCP
Help maintain and improve our CI/CD pipelines (GitHub Actions), from merge through staging validation to production rollout, including release gating and rollback
Instrument systems with Prometheus, Grafana, OpenTelemetry, Sentry, and Better Stack; define SLOs/SLIs and lead incident response and postmortems
Contribute to maintaining our SSO integrations (SAML and OIDC), including supporting customer onboarding in installed environments
Maintain our SOC 2 posture — RBAC, admission control and pod security standards, image scanning, audit logging, change management, encryption — and own technical evidence collection for audits
Use AI tooling in your daily workflow and push its adoption across engineering