Kubernetes Service Engineer
Kubernetes 服务工程师 远程亮视觉技术是一家提供云，人工智能，数据和企业解决方案的科技咨询和软件开发公司。这是一个非常好的机会加入一家既定且受尊敬的组织，提供巨大的职业增长潜力。工作称号：库伯内斯特斯服务工程師位置：100%远程 （美国）职位类型：全日制，直接 W2工资范围：100,000~150,000美元年经验要求：6年以上赞助：美国公民，绿卡持有人，EAD 持有人以及 H-1B 转让候选人鼓励申请。我们不能赞助新的 H-1B 签证申请该职位。工作总结 我们正在寻找一个 Kubernetes 服务工程师来设计，部署和运营服务网格平台主要是 Istio 和 Linkerd 在我们的 Kubernetes 财产中提供安全，可观测和可靠的服务到服务通信。该角色重点关注平台工程，网格采用，mTLS,交通政策，帮助应用团队获得网格的好处而不需付出不必要的复杂性。理想候选人在生产中运行了服务网格，深入了解发言人和数据平面，并带来了平台工程纪律和务实的采用策略。关键责任：· 设计和运营服务网格平台，主要是 Istio 和 Linkerd 在多集群 Kubernetes 环境中。· 实施并运行 mTLS,证书旋转和身份传播在整个网格。· 定义包括路由，反试，断电路和故障注射的交通管理政策。· 将网格与入口，出口和 API 门户层进行统一流量管理。· 建立分布式追踪，黄金信号和拓视觉等网络流量的可观性。· 为高可用性和租客隔离设计多集群和跨集群网格拓。· 分析和优化网格性能，侧车资源使用以及控制平面的足迹，应用系统测量，目标改进和数据驱动验证以实现可定量的吞吐量，延迟或资源效率增长。·开发铺设道路采用模式和安装指南，使应用团队轻松地采用网格。· 在服务网格层实施授权政策和零信任模式。·运营服务网格升级，控制平面生命周期管理，
查看英文原文
Kubernetes Service Engineer – Remote
Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.
This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.
Job Title: Kubernetes Service Engineer
Location: 100% Remote (U.S.)
Position Type: Full-time, Direct W2
Salary Range: $100,000–$150,000 Annually
Experience Required: 6+ years
Sponsorship: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.
Job Summary
We are looking for a Kubernetes Service Engineer to design, deploy, and operate service mesh platforms — primarily Istio and Linkerd — that provide secure, observable, and reliable service-to-service communication across our Kubernetes estate. The role focuses on platform engineering, mesh adoption, mTLS, traffic policy, and helping application teams reap the benefits of a mesh without paying for unnecessary complexity. The ideal candidate has operated service mesh in production, deeply understands Envoy and the data plane, and brings both platform engineering discipline and pragmatic adoption strategies.
Key Responsibilities
· Design and operate service mesh platforms — primarily Istio and Linkerd — across multi-cluster Kubernetes environments.
- Implement and operate mTLS, certificate rotation, and identity propagation across the mesh.
- Define traffic management policies including routing, retries, circuit breaking, and fault injection.
- Integrate the mesh with ingress, egress, and API gateway tiers for unified traffic management.
- Build observability for mesh traffic including distributed tracing, golden signals, and topology visualization.
- Design multi-cluster and cross-cluster mesh topologies for high availability and tenant isolation.
- Profile and optimize mesh performance, sidecar resource usage, and control-plane footprint, applying systematic measurement, targeted improvements, and data-driven validation to deliver quantifiable gains in throughput, latency, or resource efficiency.
- Develop paved-road adoption patterns and onboarding guides that make mesh adoption easy for app teams.
- Implement authorization policies and zero-trust patterns at the service mesh layer.
- Operate service mesh upgrades, control-plane lifecycle management, and configuration governance, applying disciplined release practices that keep the mesh current without disrupting workloads running on top of it.
- Partner with SRE, platform, and security teams on mesh policy and incident response.
- Troubleshoot complex networking, mTLS, and traffic issues spanning sidecar and gateway tiers.
- Maintain runbooks, architecture diagrams, and onboarding materials for the service mesh platform.
- Stay current with Istio, Linkerd, Cilium, and broader service mesh ecosystem developments.
Required Qualifications
· Bachelor’s degree in Computer Science or a related field.
- Five or more years of experience in platform engineering, SRE, or networking roles.
- Hands-on experience operating Istio or Linkerd in production.
- Strong understanding of Envoy proxy internals and configuration.
- Deep Kubernetes expertise including networking, CNI, and ingress.
- Strong understanding of mTLS, PKI, and certificate lifecycle management.
- Experience with distributed tracing and observability for mesh traffic.
- Proficiency in Go or Python for tooling and automation.
- Strong troubleshooting skills across networking, application, and control plane layers.
- Excellent communication and collaboration skills.
Preferred Qualifications
· Experience with multi-cluster Istio or Linkerd deployments.
- Familiarity with Cilium service mesh and eBPF networking.
- Open-source contributions to service mesh projects.
- Experience with SPIFFE/SPIRE for workload identity.
- Exposure to zero-trust networking initiatives at enterprise scale.
How to Apply
Would you like to know more about this opportunity?
For immediate consideration, please send your resume to or contact us at (908) 505-3545. Learn more about Bright Vision Technologies at www.bvteck.com.
Bright Vision Technologies is an Equal Opportunity Employer.Equal Employment Opportunity (EEO) Statement
Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.
BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.
Originally posted on Himalayas