Service Mesh Engineer

Service Mesh Engineer

Key Responsibilities

Service Mesh Architecture & Operations

• Architect, deploy, and manage

  Service Mesh platforms

  (Istio, Linkerd, Consul Connect) across multi-cluster/multi-cloud environments.
• Configure and optimize

  Envoy Proxy

  for traffic control, security policies, mTLS, rate-limiting, and mesh-wide routing.
• Implement automated sidecar injection, custom CRDs, mesh gateways, and traffic management rules.

Kubernetes Platform Engineering

• Work extensively with

  Kubernetes CRDs, operators, networking, and controllers

  to ensure smooth integration of the service mesh.
• Troubleshoot cluster networking issues related to mesh components, sidecar proxies, and workloads.

Security & Zero Trust

• Implement

  zero-trust networking

  across services using mTLS, identity-based policies, and RBAC controls.
• Integrate service mesh security with certificate authorities, secret managers, and identity providers.

Networking & Traffic Management

• Handle core networking protocols including

  TCP/IP, HTTP/2, gRPC, TLS

  , and L4/L7 routing.
• Define and manage traffic strategies like canary deployment, rate limiting, retries, timeouts, and circuit breaking.

Automation & Scripting

• Develop automation tools and mesh extensions using

  Go or Python

  .
• Build CI/CD integrations to automate mesh configuration rollout, policy deployment, and version updates.

Observability & Reliability

• Integrate

  Prometheus, Grafana, Jaeger, Zipkin, OpenTelemetry

  for mesh visibility and performance tracing.
• Monitor mesh reliability and optimize performance across proxies, nodes, and workloads.
• Create dashboards, alerts, SLIs/SLOs, and runbooks for proactive operational excellence.

Linux & Containerization

• Leverage advanced

  Linux networking tools

  (iptables, netns, iproute2, eBPF) to diagnose deep network problems.
• Work with Docker/container runtime internals to ensure efficient service-to-service communication.

Cross-Team Collaboration

• Collaborate with Platform Engineering, DevOps, SRE, and Application teams to design scalable communication architectures.
• Lead service mesh onboarding, best practices, documentation, and training for engineering teams.

Required Skills

• Strong hands-on experience with

  Istio / Linkerd / Consul Connect

• Solid understanding of

  Envoy Proxy configuration

  and traffic filters
• Deep expertise in

  Kubernetes

  , CRDs, operators, ingress/egress gateways
• Strong coding skills in

  Go or Python

• Strong foundation in

  TCP/IP, HTTP/2, gRPC, TLS

  , and microservices networking
• Experience with

  zero-trust architecture

• Hands-on with

  Prometheus, Grafana, Jaeger, Zipkin, OpenTelemetry

• Excellent understanding of

  containers & Linux

Good to Have

• Knowledge of

  multi-cluster service mesh

  patterns
• Experience with

  GitOps (Argo CD, Flux)

• Exposure to

  Cloud Platforms

  (GCP, AWS, Azure)
• Experience with

  eBPF, Cilium, Calico

• Performance tuning of high-throughput service networks