Service Mesh Engineer

Bright Vision Technologies; United States; Remote; USD 100,000 - 160,000; Full time

Job summary

Bright Vision Technologies is seeking a Service Mesh Engineer to design, deploy, and operate service mesh platforms across Kubernetes estates, focusing on secure, observable, and reliable service-to-service communication. The role emphasizes platform engineering, mesh adoption, and pragmatic patterns for app teams.

The candidate should have production experience with Istio/Linkerd, strong Envoy knowledge, and solid Kubernetes expertise, including networking and ingress.

Qualifications

• Bachelor’s degree in Computer Science or related field.
• 8+ years of experience in platform engineering, SRE, or networking roles.
• Hands-on experience operating Istio or Linkerd in production.
• Strong understanding of Envoy proxy internals and configuration.
• Deep Kubernetes expertise including networking, CNI, and ingress.
• Strong understanding of mTLS, PKI, and certificate lifecycle management.
• Experience with distributed tracing and observability for mesh traffic.
• Proficiency in Go or Python for tooling and automation.
• Strong troubleshooting skills across networking, application, and control plane layers.
• Excellent communication and collaboration skills.

Responsibilities

• Design and operate service mesh platforms — Istio and Linkerd — across multi-cluster Kubernetes environments.
• Implement and operate mTLS, certificate rotation, and identity propagation across the mesh.
• Define traffic management policies including routing, retries, circuit breaking, and fault injection.
• Integrate the mesh with ingress, egress, and API gateway tiers for unified traffic management.
• Build observability for mesh traffic including distributed tracing and topology visualization.
• Design multi-cluster and cross-cluster mesh topologies for high availability and tenant isolation.
• Profile and optimize mesh performance, sidecar resource usage, and control-plane footprint with data-driven validation.
• Develop paved-road adoption patterns and onboarding guides for app teams.
• Implement authorization policies and zero-trust patterns at the service mesh layer.
• Operate service mesh upgrades, control-plane lifecycle management, and configuration governance.
• Partner with SRE, platform, and security teams on mesh policy and incident response.
• Troubleshoot complex networking, mTLS, and traffic issues across layers.
• Maintain runbooks, architecture diagrams, and onboarding materials.

Skills

Kubernetes expertise

Networking troubleshooting

Communication skills

Go or Python

Service mesh experience

Education

Bachelor's degree in Computer Science or related field

Tools

Istio

Linkerd

Envoy

Kubernetes

Cilium

eBPF

SPIFFE/SPIRE

Job description

Service Mesh Engineer - Remote

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.

This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title

Service Mesh Engineer

Location

100% Remote (U.S.)

Position Type

Full-time, Direct W2

Salary Range

$100,000–$160,000 Annually

Experience Required

8+ years

Sponsorship

U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.

Job Summary

We are looking for a Service Mesh Engineer to design, deploy, and operate service mesh platforms — primarily Istio and Linkerd — that provide secure, observable, and reliable service-to-service communication across our Kubernetes estate. The role focuses on platform engineering, mesh adoption, mTLS, traffic policy, and helping application teams reap the benefits of a mesh without paying for unnecessary complexity. The ideal candidate has operated service mesh in production, deeply understands Envoy and the data plane, and brings both platform engineering discipline and pragmatic adoption strategies.

Key Responsibilities

• Design and operate service mesh platforms — primarily Istio and Linkerd — across multi-cluster Kubernetes environments.
• Implement and operate mTLS, certificate rotation, and identity propagation across the mesh.
• Define traffic management policies including routing, retries, circuit breaking, and fault injection.
• Integrate the mesh with ingress, egress, and API gateway tiers for unified traffic management.
• Build observability for mesh traffic including distributed tracing, golden signals, and topology visualization.
• Design multi-cluster and cross-cluster mesh topologies for high availability and tenant isolation.
• Profile and optimize mesh performance, sidecar resource usage, and control-plane footprint, applying systematic measurement, targeted improvements, and data-driven validation to deliver quantifiable gains in throughput, latency, or resource efficiency.
• Develop paved-road adoption patterns and onboarding guides that make mesh adoption easy for app teams.
• Implement authorization policies and zero-trust patterns at the service mesh layer.
• Operate service mesh upgrades, control-plane lifecycle management, and configuration governance, applying disciplined release practices that keep the mesh current without disrupting workloads running on top of it.
• Partner with SRE, platform, and security teams on mesh policy and incident response.
• Troubleshoot complex networking, mTLS, and traffic issues spanning sidecar and gateway tiers.
• Maintain runbooks, architecture diagrams, and onboarding materials for the service mesh platform.
• Stay current with Istio, Linkerd, Cilium, and broader service mesh ecosystem developments.

Required Qualifications

• Bachelor’s degree in Computer Science or a related field.
• Eight or more years of experience in platform engineering, SRE, or networking roles.
• Hands‑on experience operating Istio or Linkerd in production.
• Strong understanding of Envoy proxy internals and configuration.
• Deep Kubernetes expertise including networking, CNI, and ingress.
• Strong understanding of mTLS, PKI, and certificate lifecycle management.
• Experience with distributed tracing and observability for mesh traffic.
• Proficiency in Go or Python for tooling and automation.
• Strong troubleshooting skills across networking, application, and control plane layers.
• Excellent communication and collaboration skills.

Preferred Qualifications

• Experience with multi‑cluster Istio or Linkerd deployments.
• Familiarity with Cilium service mesh and eBPF networking.
• Open‑source contributions to service mesh projects.
• Experience with SPIFFE/SPIRE for workload identity.
• Exposure to zero‑trust networking initiatives at enterprise scale.

Equal Employment Opportunity (EEO) Statement

Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.

BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.