Service Mesh Architect

Bright Vision Technologies; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Bright Vision Technologies seeks a Service Mesh Architect to design, deploy, and operate service mesh platforms—primarily Istio and Linkerd—across a Kubernetes estate. The role emphasizes secure, observable, and reliable service-to-service communication with focus on mTLS, traffic policy, and platform engineering discipline.

The ideal candidate has production experience with service mesh, deep Envoy knowledge, and strong Go or Python scripting for tooling and automation.

Qualifications

• Bachelor’s degree in Computer Science or related field.
• 6+ years in platform engineering, SRE, or networking roles.
• Hands-on experience operating Istio or Linkerd in production.
• Strong understanding of Envoy proxy internals and configuration.
• Deep Kubernetes expertise including networking, CNI, and ingress.
• Strong understanding of mTLS, PKI, and certificate lifecycle management.
• Experience with distributed tracing and observability for mesh traffic.
• Proficiency in Go or Python for tooling and automation.
• Strong troubleshooting skills across networking, application, and control plane layers.
• Excellent communication and collaboration skills.

Responsibilities

• Design, deploy, and operate service mesh platforms—Istio and Linkerd—in production.
• Focus on platform engineering, mesh adoption, mTLS, traffic policy, and observability.
• Collaborate with application teams to enable secure, reliable service-to-service communication.
• Contribute to operational best practices and tooling for ongoing mesh management.

Skills

Service mesh

Istio

Linkerd

Envoy

Kubernetes

mTLS

PKI

Observability

Go or Python

Troubleshooting

Communication

Education

Bachelor's degree in Computer Science or related field

Job description

Service Mesh Architect – Remote

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States. This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title: Service Mesh Architect

Location: 100% Remote (U.S.)

Position Type: Full-time, Direct W2

Salary Range: $150,000–$190,000 Annually

Experience Required: 6+ years

Sponsorship: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.

Job Summary

We are looking for a Service Mesh Architect to design, deploy, and operate service mesh platforms — primarily Istio and Linkerd — that provide secure, observable, and reliable service-to-service communication across our Kubernetes estate. The role focuses on platform engineering, mesh adoption, mTLS, traffic policy, and helping application teams reap the benefits of a mesh without paying for unnecessary complexity. The ideal candidate has operated service mesh in production, deeply understands Envoy and the data plane, and brings both platform engineering discipline and pragmatic adoption strategies.

Required Qualifications

• Bachelor’s degree in Computer Science or a related field.
• Five or more years of experience in platform engineering, SRE, or networking roles.
• Hands-on experience operating Istio or Linkerd in production.
• Strong understanding of Envoy proxy internals and configuration.
• Deep Kubernetes expertise including networking, CNI, and ingress.
• Strong understanding of mTLS, PKI, and certificate lifecycle management.
• Experience with distributed tracing and observability for mesh traffic.
• Proficiency in Go or Python for tooling and automation.
• Strong troubleshooting skills across networking, application, and control plane layers.
• Excellent communication and collaboration skills.

Preferred Qualifications

• Experience with multi-cluster Istio or Linkerd deployments.
• Familiarity with Cilium service mesh and eBPF networking.
• Open-source contributions to service mesh projects.