Moovx

Istio Service Mesh Engineer

Moovx

full-time

Posted on:

Origin:  • 🇦🇷 Argentina

Visit company website
AI Apply
Manual Apply

Job Level

Mid-LevelSenior

Tech Stack

AnsibleAWSAzureCloudGrafanaKubernetesMicroservicesNode.jsPrometheusPythonTerraform

About the role

  • Support, manage, and optimize Istio across Kubernetes production environments, leading design and implementation of traffic management, security (mTLS, authN/Z), and observability.
  • Deploy, configure, and manage Istio for Kubernetes-based applications.
  • Design traffic management (routing, circuit breaking, load balancing, canary releases).
  • Monitor and troubleshoot mesh components to ensure high availability and performance.
  • Work with Dev and Ops to optimize microservices communication and observability using Istio.
  • Automate installation and configuration of Istio components with Helm and DevOps tooling.
  • Perform regular upgrades and maintenance of Istio and related components.
  • Provide technical guidance, documentation, and training on service mesh best practices.

Requirements

  • Strong understanding of service mesh architecture, networking, and security principles.
  • Hands-on experience deploying and operating Istio in Kubernetes (production).
  • Expertise implementing mTLS, authorization policies, and authentication mechanisms in Istio.
  • Proficiency with observability tooling: Prometheus, Grafana, Jaeger, OpenTelemetry, Datadog.
  • Automation with Helm and at least one of Terraform or Ansible.
  • Experience with major cloud providers (AWS, Azure, or Google Cloud).
  • Strong scripting in Bash or Python.
  • Familiarity with CI/CD and GitOps practices (pipelines, deployments, config repos).
  • Familiarity with certificate management for mesh workloads.
  • Excellent problem-solving, troubleshooting, communication, and collaboration skills.
  • Istio Certified Associate (or similar certification) (Nice to Have).
  • Experience with multi-cluster or hybrid cloud mesh deployments (Nice to Have).
  • Knowledge of Envoy and/or API gateways like Kong (Nice to Have).