Role Description This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential. We are looking for a Service Mesh Engineer to design, deploy, and operate service mesh platforms — primarily Istio and Linkerd — that provide secure, observable, and reliable service-to-service communication across our Kubernetes estate. The role focuses on platform engineering, mesh adoption, mTLS, traffic policy, and helping application teams reap the benefits of a mesh without paying for unnecessary complexity. The ideal candidate has operated service mesh in production, deeply understands Envoy and the data plane, and brings both platform engineering discipline and pragmatic adoption strategies. Key Responsibilities - Design and operate service mesh platforms — primarily Istio and Linkerd — across multi-cluster Kubernetes environments. - Implement and operate mTLS, certificate rotation, and identity propagation across the mesh. - Define traffic management policies including routing, retries, circuit breaking, and fault injection. - Integrate the mesh with ingress, egress, and API gateway tiers for unified traffic management. - Build observability for mesh traffic including distributed tracing, golden signals, and topology visualization. - Design multi-cluster and cross-cluster mesh topologies for high availability and tenant isolation. - Profile and optimize mesh performance, sidecar resource usage, and control-plane footprint. - Develop paved-road adoption patterns and onboarding guides that make mesh adoption easy for app teams. - Implement authorization policies and zero-trust patterns at the service mesh layer. - Operate service mesh upgrades, control-plane lifecycle management, and configuration governance. - Partner with SRE, platform, and security teams on mesh policy and incident response. - Troubleshoot complex networking, mTLS, and traffic issues spanning sidecar and gateway tiers. - Maintain runbooks, architecture diagrams, and onboarding materials for the service mesh platform. - Stay current with Istio, Linkerd, Cilium, and broader service mesh ecosystem developments. Qualifications - Bachelor’s degree in Computer Science or a related field. - Five or more years of experience in platform engineering, SRE, or networking roles. - Hands-on experience operating Istio or Linkerd in production. - Strong understanding of Envoy proxy internals and configuration. - Deep Kubernetes expertise including networking, CNI, and ingress. - Strong understanding of mTLS, PKI, and certificate lifecycle management. - Experience with distributed tracing and observability for mesh traffic. - Proficiency in Go or Python for tooling and automation. - Strong troubleshooting skills across networking, application, and control plane layers. - Excellent communication and collaboration skills. Preferred Qualifications - Experience with multi-cluster Istio or Linkerd deployments. - Familiarity with Cilium service mesh and eBPF networking. - Open-source contributions to service mesh projects. - Experience with SPIFFE/SPIRE for workload identity. - Exposure to zero-trust networking initiatives at enterprise scale. How to Apply Would you like to know more about this opportunity? For immediate consideration, please send your resume to [email protected] or contact us at (908) 676-4399. Learn more about Bright Vision Technologies at www.bvteck.com . Equal Employment Opportunity (EEO) Statement Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall. BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.

• Design, build, and operate components of the AI Gateway including centralized identity and authentication/authorization, token budgeting, DLP and content guardrails, multi-model routing and failover, MCP allow-listing, and request-level audit logging. • Build and maintain pieces of the Harness layer including agent orchestration (LangGraph or equivalent), prompt construction and context management, memory and state handling across multi-turn interactions, and model abstraction across providers such as AWS Bedrock and Google Vertex. • Develop and extend production services in Python (FastAPI) and pydantic.ai for LLM-powered components, and contribute to the React/TypeScript surfaces that expose platform capabilities to internal teams. • Implement MCP/tool wiring for internal and SaaS-embedded agents, ensuring every caller regardless of origin passes through the same policy controls. • Contribute to the Claude and Gemini Enterprise plugin framework by building, testing, and hardening role-based skills and agents, and help mature the pipeline for how plugins are authored, evaluated, and deployed. • Instrument the platform for observability including metrics, tracing, and audit trails, and participate in on-call and operational support for platform services. • Write clear technical documentation and participate in architecture and code reviews, holding a high bar for quality, security, and maintainability. • Partner with engineers across Enterprise Data, Enterprise Apps, Product Development, and Infosec to integrate the platform with governed data sources and shared architectural contracts. • Work with the Sr. Director and model evaluation tooling to help close the loop between evaluation results and model selection, prompt tuning, and routing decisions.

• Operates as the Directly Responsible Individual (DRI) for high-impact initiatives; takes full ownership of project health, system design, and end-to-end delivery. • Partners closely with Product Management and cross-functional teams to clarify ambiguous requirements, map business goals to technical scopes, and manage dependencies. • architectural design, pragmatic task breakdown, and execution planning, driving a team of engineers toward incremental deliverables. • Establish reusable patterns, technical standards, and platform primitives that other teams can build on. • Improve engineering efficiency through better tooling, automation, documentation, observability, and developer workflows. • Mentor engineers, raise the quality of technical decision-making, and help the team execute with consistency. • Drives adoption of AI tooling across the SDLC — building internal capabilities that automate engineering workflows while ensuring security, compliance, and best-practice alignment.

• Develop and maintain full-stack applications using JavaScript, TypeScript, Node.js, and React. • Design and build scalable backend services, APIs, and asynchronous workflows. • Work with browser-based technologies and complex frontend application flows. • Develop applications operating in cloud-native and containerized environments. • Troubleshoot and resolve production issues across frontend, backend, databases, and infrastructure. • Optimize application performance, scalability, reliability, and security. • Work with SQL databases, including schema design, migrations, indexing, and query optimization. • Participate in architecture discussions, code reviews, and technical design sessions. • Write clean, maintainable, and well-tested code. • Improve system observability through monitoring, logging, dashboards, and operational documentation. • Collaborate with globally distributed engineering teams. • Mentor other engineers and contribute to engineering best practices. • Leverage AI-assisted development tools responsibly to improve productivity and code quality.