Remote Kubernetes Platform Engineer - Service Mesh

Bright Vision Technologies; Huntersville (NC); On-site; USD 100,000 - 150,000; Full time

Job summary

Bright Vision Technologies is seeking a Kubernetes Service Engineer to design, deploy, and operate service mesh platforms across our Kubernetes estates. The role focuses on platform engineering, mesh adoption, mTLS, traffic policy, and enabling app teams to reap mesh benefits with simplicity.

The ideal candidate will have production experience with Istio or Linkerd, deep Envoy knowledge, and a pragmatic approach to adoption, security, and reliability in a remote, US-based environment.

Qualifications

• 6+ years in platform engineering, SRE, or networking roles.
• Hands-on production experience with Istio or Linkerd.
• Strong understanding of Envoy proxy internals.
• Deep Kubernetes expertise including networking, CNI, and ingress.
• Knowledge of mTLS, PKI, and certificate lifecycle management.
• Experience with distributed tracing and observability for mesh traffic.
• Proficiency in Go or Python for tooling and automation.

Responsibilities

• Design and operate service mesh platforms across multi-cluster Kubernetes environments.
• Implement and operate mTLS, certificate rotation, and identity propagation.
• Define traffic management policies including routing, retries, circuit breaking, and fault injection.
• Integrate the mesh with ingress, egress, and API gateway tiers.
• Build observability for mesh traffic including distributed tracing, golden signals, and topology visualization.
• Design multi-cluster mesh topologies for high availability and tenant isolation.
• Profile and optimize mesh performance and resource usage.
• Develop onboarding guides and paved-road adoption patterns for app teams.
• Implement authorization policies and zero-trust patterns at the service mesh layer.
• Operate mesh upgrades, control-plane lifecycle, and governance.
• Partner with SRE, platform, and security teams on mesh policy and incident response.
• Troubleshoot complex networking and traffic issues spanning sidecar and gateway tiers.
• Maintain runbooks, diagrams, and onboarding materials.
• Stay current with Istio, Linkerd, Cilium, and service mesh developments.

Skills

Kubernetes

Envoy

Go or Python

Observability/Tracing

Tools

Istio

Linkerd

Envoy

Cilium

SPIFFE/SPIRE

Job description

Bright Vision Technologies is seeking a Kubernetes Service Engineer to design, deploy, and operate service mesh platforms across our Kubernetes estates. The role focuses on platform engineering, mesh adoption, mTLS, traffic policy, and enabling app teams to reap mesh benefits with simplicity.

The ideal candidate will have production experience with Istio or Linkerd, deep Envoy knowledge, and a pragmatic approach to adoption, security, and reliability in a remote, US-based environment.