BR

Service Mesh Engineer (Istio / Linkerd)

Job summary

The Woodlands
Engineering

Work model

Fully remote
Only US
1 week ago
Job description

Bright Vision Technologies is a forward-thinking software development company dedicated to building innovative solutions that help businesses automate and optimize their operations. We leverage cutting-edge technologies to create scalable, secure, and user-friendly applications.

As we continue to grow, we're looking for a skilled Service Mesh Engineer (Istio / Linkerd) to join our dynamic team and contribute to our mission of transforming business processes through technology.

This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Position Details

  • Location: 100% Remote (Continental United States)
  • Position Type: In-house Bright Vision Technologies SOW engagement (no third-party client or vendor)
  • Salary: 100 K - 150 K
  • Experience: 5+ years
  • Employment Type: Full-time, direct W2 with Bright Vision Technologies (no C2C, no 1099, no third-party)
  • Sponsorship: No new H1B sponsorship available. H1B transfers welcomed for qualified candidates.

Employment Terms & Visa Policy

This is a 100% remote, full-time, direct W2 position with Bright Vision Technologies. This role is part of Bright Vision Technologies' in-house Statement of Work (SOW) engagement. The client, end customer, and employer for this position is Bright Vision Technologies — there is no third-party client, vendor, or implementation partner involved.

We do not engage in C2C, 1099, or third-party arrangements for this role.

STRICTLY NO C2C/1099/3RD PARTY COMPANIES. ALL OUR ROLES ARE W2 AND NO 3RD PARTY BROKERING PLEASE. Candidates must be willing to work directly as a full-time W2 employee of Bright Vision Technologies and contribute to our in-house SOW deliverables.

No new H1B sponsorship is available for this role. However, candidates who are currently on a valid H1B visa and require a transfer are welcome to apply. We will support H1B transfers for qualified candidates. For every role, a technical coding assessment is mandatory.

Job Summary

We are looking for a Service Mesh Engineer to design, deploy, and operate service mesh platforms — primarily Istio and Linkerd — that provide secure, observable, and reliable service-to-service communication across our Kubernetes estate. The role focuses on platform engineering, mesh adoption, mTLS, traffic policy, and helping application teams reap the benefits of a mesh without paying for unnecessary complexity.

Key Responsibilities

  • Design and operate service mesh platforms — primarily Istio and Linkerd — across multi-cluster Kubernetes environments.
  • Implement and operate mTLS, certificate rotation, and identity propagation across the mesh.
  • Define traffic management policies including routing, retries, circuit breaking, and fault injection.
  • Integrate the mesh with ingress, egress, and API gateway tiers for unified traffic management.
  • Build observability for mesh traffic including distributed tracing, golden signals, and topology visualization.
  • Design multi-cluster and cross-cluster mesh topologies for high availability and tenant isolation.
  • Profile and optimize mesh performance, sidecar resource usage, and control-plane footprint.
  • Develop paved-road adoption patterns and onboarding guides that make mesh adoption easy for app teams.
  • Implement authorization policies and zero-trust patterns at the service mesh layer.
  • Operate service mesh upgrades, control-plane lifecycle management, and configuration governance.
  • Partner with SRE, platform, and security teams on mesh policy and incident response.
  • Troubleshoot complex networking, mTLS, and traffic issues spanning sidecar and gateway tiers.
  • Maintain runbooks, architecture diagrams, and onboarding materials for the service mesh platform.
  • Stay current with Istio, Linkerd, Cilium, and broader service mesh ecosystem developments.

Required Qualifications

  • Bachelor's degree in Computer Science or a related field.
  • Five or more years of experience in platform engineering, SRE, or networking roles.
  • Hands-on experience operating Istio or Linkerd in production.
  • Strong understanding of Envoy proxy internals and configuration.
  • Deep Kubernetes expertise including networking, CNI, and ingress.
  • Strong understanding of mTLS, PKI, and certificate lifecycle management.
  • Experience with distributed tracing and observability for mesh traffic.
  • Proficiency in Go or Python for tooling and automation.
  • Strong troubleshooting skills across networking, application, and control plane layers.
  • Excellent communication and collaboration skills.

Preferred Qualifications

  • Experience with multi-cluster Istio or Linkerd deployments.
  • Familiarity with Cilium service mesh and eBPF networking.
  • Open-source contributions to service mesh projects.
  • Experience with SPIFFE/SPIRE for workload identity.
  • Exposure to zero-trust networking initiatives at enterprise scale.

How to Apply

Would you like to know more about this opportunity? For immediate consideration, please send your resume to [email protected] or contact us at (908) 505-3544. Learn more about Bright Vision Technologies at www.bvteck.com.

Equal Employment Opportunity (EEO) Statement

Bright Vision Technologies is an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute. Bright Vision Technologies is an Equal Opportunity Employer, including Disability/Veterans. Position offered by "No Fee Agency."