обновлено 2 дня назад
Service Mesh Engineer (Istio/Kubernetes)
100 000 - 160 000$
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Service Mesh Engineer (Istio/Kubernetes): Designing and operating secure, observable service mesh platforms across multi-cluster Kubernetes environments with an accent on mTLS, traffic management, and platform adoption. Focus on optimizing Envoy and sidecar performance, building multi-cluster topologies, managing zero-trust policies, and troubleshooting complex networking and control-plane issues.
Location: 100% remote within the United States
Salary: $100,000–$160,000 annually
Company
is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.
What you will do
- Design, deploy, and operate Istio and Linkerd service mesh platforms across multi-cluster Kubernetes environments.
- Implement mTLS, certificate rotation, identity propagation, authorization policies, and zero-trust patterns.
- Define traffic management policies for routing, retries, circuit breaking, fault injection, ingress, egress, and API gateway integration.
- Build observability for mesh traffic through distributed tracing, golden signals, and topology visualization.
- Design high-availability and tenant-isolated mesh topologies while profiling and optimizing sidecar and control-plane performance.
- Create adoption patterns, onboarding guides, runbooks, architecture diagrams, and governance practices in partnership with SRE, platform, and security teams.
Requirements
- U.S. work authorization is required: U.S. citizens, Green Card holders, EAD holders, and H-1B transfer candidates are encouraged to apply.
- New H-1B visa petitions cannot be sponsored for this position.
- Eight or more years of experience in platform engineering, SRE, or networking roles.
- Production experience operating Istio or Linkerd, with strong knowledge of Envoy internals and configuration.
- Deep Kubernetes expertise, including networking, CNI, and ingress, plus strong knowledge of mTLS, PKI, and certificate lifecycle management.
- Experience with distributed tracing and mesh observability, troubleshooting across networking, application, and control-plane layers, and proficiency in Go or Python.
Nice to have
- Experience with multi-cluster Istio or Linkerd deployments.
- Familiarity with Cilium service mesh and eBPF networking.
- Open-source contributions to service mesh projects.
- Experience with SPIFFE/SPIRE and enterprise-scale zero-trust networking.
Culture & Benefits
- Full-time direct W-2 employment.
- Remote work within the United States.
- Career growth opportunities within an established organization.
- Collaboration with SRE, platform, and security teams.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Музыка
Осень
Поддержка