Kubernetes Service Engineer

Bright Vision Technologies•Nashville, TN

3d•$100,000 - $150,000•Remote

About The Position

Bright Vision Technologies is seeking a Kubernetes Service Engineer to design, deploy, and operate service mesh platforms, primarily Istio and Linkerd, across its Kubernetes estate. The role focuses on platform engineering, mesh adoption, mutual TLS (mTLS), traffic policy, and enabling application teams to use service mesh capabilities without unnecessary complexity. The ideal candidate has operated a service mesh in production, understands Envoy and the data plane, and applies pragmatic platform engineering practices. This is a full-time, direct W2 position that is 100% remote within the United States. The stated salary range is $100,000–$150,000 annually. Candidates eligible to apply include U.S. citizens, Green Card holders, EAD holders, and H-1B transfer candidates; new H-1B petitions cannot be sponsored. The posting lists six or more years of experience, while the required qualifications specify five or more years in platform engineering, SRE, or networking roles. Bright Vision Technologies is an equal opportunity employer and prohibits workplace harassment and discrimination.

Requirements

Bachelor’s degree in Computer Science or a related field.
Five or more years of experience in platform engineering, SRE, or networking roles.
Hands-on experience operating Istio or Linkerd in production.
Strong understanding of Envoy proxy internals and configuration.
Deep Kubernetes expertise, including networking, CNI, and ingress.
Strong understanding of mTLS, PKI, and certificate lifecycle management.
Experience with distributed tracing and observability for mesh traffic.
Proficiency in Go or Python for tooling and automation.
Strong troubleshooting skills across networking, application, and control-plane layers.
Excellent communication and collaboration skills.

Nice To Haves

Experience with multi-cluster Istio or Linkerd deployments.
Familiarity with Cilium service mesh and eBPF networking.
Open-source contributions to service mesh projects.
Experience with SPIFFE/SPIRE for workload identity.
Exposure to enterprise-scale zero-trust networking initiatives.

Responsibilities

Design and operate Istio- and Linkerd-based service mesh platforms across multi-cluster Kubernetes environments.
Implement and operate mTLS, certificate rotation, and identity propagation across the mesh.
Define traffic management policies for routing, retries, circuit breaking, and fault injection.
Integrate the mesh with ingress, egress, and API gateway tiers for unified traffic management.
Build mesh traffic observability, including distributed tracing, golden signals, and topology visualization.
Design multi-cluster and cross-cluster mesh topologies for high availability and tenant isolation.
Profile and optimize mesh performance, sidecar resource usage, and control-plane footprint; use measurement and data-driven validation to improve throughput, latency, or resource efficiency.
Develop paved-road adoption patterns and onboarding guides for application teams.
Implement authorization policies and zero-trust patterns at the service mesh layer.
Operate mesh upgrades, control-plane lifecycle management, and configuration governance using disciplined release practices.
Partner with SRE, platform, and security teams on mesh policy and incident response.
Troubleshoot networking, mTLS, and traffic issues across sidecar and gateway tiers.
Maintain runbooks, architecture diagrams, and onboarding materials for the service mesh platform.
Stay current with Istio, Linkerd, Cilium, and broader service mesh developments.