Remote Kubernetes Service Engineer: Mesh & Observability

Bright Vision Technologies; Chapel Hill (NC); On-site; USD 100,000 - 150,000; Full time

Job summary

Bright Vision Technologies is seeking a Kubernetes Service Engineer to design, deploy, and operate service mesh platforms across a remote U.S. Kubernetes estate.

You will focus on mTLS, traffic policies, and observability to deliver secure, observable, and reliable service-to-service communication. The ideal candidate has hands-on production experience with Istio or Linkerd, deep Envoy knowledge, and strong Kubernetes networking skills, enabling app teams to adopt mesh patterns with minimal

Qualifications

• 6+ years of experience in platform engineering, SRE, or networking.
• Hands-on production experience with Istio or Linkerd.
• Strong Envoy proxy internals and config knowledge.
• Deep Kubernetes expertise including networking, CNI, and ingress.
• Strong understanding of mTLS, PKI, and certificate lifecycle management.
• Experience with distributed tracing and observability for mesh traffic.
• Proficiency in Go or Python for tooling and automation.

Responsibilities

• Design and operate service mesh platforms — Istio/Linkerd — across multi-cluster Kubernetes environments.
• Implement and operate mTLS, certificate rotation, and identity propagation across the mesh.
• Define traffic management policies including routing, retries, circuit breaking, and fault injection.
• Integrate the mesh with ingress, egress, and API gateway tiers for unified traffic management.
• Build observability for mesh traffic including distributed tracing, golden signals, and topology visualization.
• Design multi-cluster and cross-cluster mesh topologies for high availability and tenant isolation.
• Profile and optimize mesh performance, sidecar resource usage, and control-plane footprint with measurable gains.
• Develop paved-road adoption patterns and onboarding guides for app teams.
• Implement authorization policies and zero-trust patterns at the service mesh layer.
• Operate mesh upgrades, control-plane lifecycle management, and configuration governance.
• Partner with SRE, platform, and security teams on mesh policy and incident response.
• Troubleshoot complex networking, mTLS, and traffic issues across mesh tiers.
• Maintain runbooks, architecture diagrams, and onboarding materials.
• Stay current with Istio, Linkerd, Cilium, and broader service mesh developments.

Skills

Istio

Linkerd

Envoy

Kubernetes

mTLS

PKI

Distributed tracing

Go

Python

Job description

Bright Vision Technologies is seeking a Kubernetes Service Engineer to design, deploy, and operate service mesh platforms across a remote U.S. Kubernetes estate.

You will focus on mTLS, traffic policies, and observability to deliver secure, observable, and reliable service-to-service communication. The ideal candidate has hands-on production experience with Istio or Linkerd, deep Envoy knowledge, and strong Kubernetes networking skills, enabling app teams to adopt mesh patterns with minimal