Service Infrastructure Engineer

Bright Vision Technologies•Wesley Chapel, FL
•$100,000 - $150,000•Remote

About The Position

Bright Vision Technologies is seeking a Service Infrastructure Engineer to design, deploy, and operate service mesh platforms, primarily Istio and Linkerd, supporting secure, observable, and reliable service-to-service communication across its Kubernetes estate. The role focuses on platform engineering, mesh adoption, mutual TLS (mTLS), and traffic policy, while helping application teams benefit from service mesh capabilities without unnecessary complexity. The ideal candidate has operated service mesh in production, understands Envoy and its data plane in depth, and brings platform engineering discipline and pragmatic adoption strategies. The position is full-time, direct W2, and 100% remote within the United States. The stated annual salary range is $100,000–$150,000. Bright Vision Technologies cannot sponsor new H-1B visa petitions for this position, but U.S. citizens, Green Card holders, EAD holders, and H-1B transfer candidates are encouraged to apply.

Requirements

  • Bachelor’s degree in Computer Science or a related field.
  • Five or more years of experience in platform engineering, SRE, or networking roles.
  • Hands-on experience operating Istio or Linkerd in production.
  • Strong understanding of Envoy proxy internals and configuration.
  • Deep Kubernetes expertise, including networking, CNI, and ingress.
  • Strong understanding of mTLS, PKI, and certificate lifecycle management.
  • Experience with distributed tracing and observability for mesh traffic.
  • Proficiency in Go or Python for tooling and automation.
  • Strong troubleshooting skills across networking, application, and control plane layers.
  • Excellent communication and collaboration skills.

Nice To Haves

  • Experience with multi-cluster Istio or Linkerd deployments.
  • Familiarity with Cilium service mesh and eBPF networking.
  • Open-source contributions to service mesh projects.
  • Experience with SPIFFE/SPIRE for workload identity.
  • Exposure to zero-trust networking initiatives at enterprise scale.

Responsibilities

  • Design, deploy, and operate service mesh platforms, primarily Istio and Linkerd, across a Kubernetes estate.
  • Support secure, observable, and reliable service-to-service communication.
  • Drive platform engineering and service mesh adoption, including mTLS and traffic policy.
  • Help application teams realize the benefits of a service mesh without unnecessary complexity.
  • Troubleshoot issues across networking, application, and control plane layers.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service