Tech Stack
AnsibleAWSAzureCloudGrafanaKubernetesMicroservicesNode.jsPrometheusPythonTerraform
About the role
- Support, manage, and optimize Istio across Kubernetes production environments, leading design and implementation of traffic management, security (mTLS, authN/Z), and observability.
- Deploy, configure, and manage Istio for Kubernetes-based applications.
- Design traffic management (routing, circuit breaking, load balancing, canary releases).
- Monitor and troubleshoot mesh components to ensure high availability and performance.
- Work with Dev and Ops to optimize microservices communication and observability using Istio.
- Automate installation and configuration of Istio components with Helm and DevOps tooling.
- Perform regular upgrades and maintenance of Istio and related components.
- Provide technical guidance, documentation, and training on service mesh best practices.
Requirements
- Strong understanding of service mesh architecture, networking, and security principles.
- Hands-on experience deploying and operating Istio in Kubernetes (production).
- Expertise implementing mTLS, authorization policies, and authentication mechanisms in Istio.
- Proficiency with observability tooling: Prometheus, Grafana, Jaeger, OpenTelemetry, Datadog.
- Automation with Helm and at least one of Terraform or Ansible.
- Experience with major cloud providers (AWS, Azure, or Google Cloud).
- Strong scripting in Bash or Python.
- Familiarity with CI/CD and GitOps practices (pipelines, deployments, config repos).
- Familiarity with certificate management for mesh workloads.
- Excellent problem-solving, troubleshooting, communication, and collaboration skills.
- Istio Certified Associate (or similar certification) (Nice to Have).
- Experience with multi-cluster or hybrid cloud mesh deployments (Nice to Have).
- Knowledge of Envoy and/or API gateways like Kong (Nice to Have).