Senior DevOps Engineer

Company Description

Newton Research is a well-funded software start-up building the next generation of the closed loop media lifecycle. We develop AI agents that combine the latest in LLMs and generative AI with specialized domain

knowledge, powering media planning, buying, and measurement workflows for brands, agencies, and publishers.

Role Description

We're looking for a Senior DevOps Engineer to own our Kubernetes platform end to end - from cluster architecture and workload design through to the developer experience on top of it.

Our product ships in two shapes: a SaaS platform we run on AWS, and customer-installed deployments running inside our customers' own Azure and GCP environments. You'll be designing for portability from day one,

packaging workloads that behave predictably whether they land on our EKS clusters or a customer's cluster you've never seen.

The team is small, so you'll own problems end to end and have real say in tooling and architecture.

Responsibilities

• Own the Kubernetes platform: cluster provisioning and lifecycle (EKS primary; AKS and GKE for customer environments), upgrade strategy, autoscaling and node pool design, resource governance, and multi-

tenancy boundaries

• Design how our software gets deployed - Helm charts, GitOps workflows (Argo CD, Flux, or your recommendation), progressive delivery, and rollback strategies that work in environments you don't directly control
• Package and harden our applications for customer-installed Kubernetes deployments, and support customer teams through installation and upgrades
• Manage the in-cluster ecosystem: ingress, certificates, secrets (External Secrets, Vault, or similar), service-to-service networking, and any operators we adopt                                                                                                   • Build and maintain cloud infrastructure in Terraform across AWS, Azure, and GCP
• Help maintain and improve our CI/CD pipelines (GitHub Actions), from merge through staging validation to production rollout, including release gating and rollback
• Instrument systems with Prometheus, Grafana, OpenTelemetry, Sentry, and Better Stack; define SLOs/SLIs and lead incident response and postmortems
• Contribute to maintaining our SSO integrations (SAML and OIDC), including supporting customer onboarding in installed environments
• Maintain our SOC 2 posture - RBAC, admission control and pod security standards, image scanning, audit logging, change management, encryption - and own technical evidence collection for audits
• Use AI tooling in your daily workflow and push its adoption across engineering

Qualifications

• 7+ years in DevOps, SRE, platform, or infrastructure engineering with ownership of production systems at scale
• Deep production Kubernetes experience - you've run clusters, not just deployed to them. Comfortable with upgrades, autoscaling behavior, resource management, RBAC, network policy, and debugging workloads that misbehave in ways the dashboard doesn't explain
• Hands-on with Helm and a GitOps deployment model (Argo CD, Flux, or equivalent)
• Strong Terraform experience across multiple cloud providers; deep AWS expertise (EKS in particular) with working knowledge of Azure and GCP
• Proficiency with GitHub Actions or comparable CI/CD tooling
• Experience with Prometheus, Grafana, and distributed tracing
• SSO implementation via SAML 2.0 and/or OIDC with enterprise IdPs (Okta, Entra ID, Google Workspace); Auth0 as a service provider is a plus
• Experience supporting SOC 2 or similar frameworks (e.g., ISO 27001)
• Fluency in Python, Bash, or Go
• Networking fundamentals - DNS, load balancing, VPC design, VPN configuration - plus Kubernetes networking specifically (CNI behavior, service types, ingress)
• Comfort with Linux system administration
• A track record of using AI as a practical tool in day-to-day work
• Able to explain technical tradeoffs to non-technical stakeholders

The Kind of Person Who Succeeds Here

You know Kubernetes deeply enough to know when it isn't the answer, and you're comfortable saying so. You automate what's manual and repeatable, and you treat compliance as engineering discipline rather than a

checkbox exercise.

What We Offer

• Significant autonomy over technical strategy and architecture, working directly with founders
• Competitive compensation, significant equity, and benefits
• Hard technical problems and a modern stack

Base salary range: $150,000-175,000 + Equity