Kubernetes Engineer

'

: - ( - )

Experience: 7+ yrs

Location: Hyderabad

Job Type: Full-time

We are looking for an experienced Kubernetes Engineer – Istio Specialist to design, implement, operate, and optimise cloud-native microservices platforms across AWS EKS and Oracle OKE environments.

The role requires strong hands-on expertise in Kubernetes, Istio, service mesh, cloud networking, security, automation, GitOps, and observability. The ideal candidate will have proven production experience managing Istio and Kubernetes platforms across complex, multi-cluster or multi-cloud environments.

Key Responsibilities

• Design, deploy, configure, manage, and scale Kubernetes clusters across AWS EKS and Oracle OKE.
• Automate Kubernetes cluster provisioning and lifecycle management using Terraform, Helm, GitLab, Argo CD, Flux, or similar technologies.
• Implement and maintain GitOps-based approaches for Kubernetes configuration and application deployments.
• Optimise cluster performance, workload scheduling, autoscaling, node pools, resource utilisation, and platform reliability.
• Design, deploy, and manage Istio Service Mesh in production Kubernetes environments.
• Implement Istio across multi-cluster, multi-region, and multi-cloud architectures.
• Configure advanced traffic management including canary releases, blue/green deployments, traffic splitting, retries, timeouts, fault injection, and circuit breaking.
• Implement mTLS, zero-trust networking, authorization policies, and secure service-to-service communication.
• Configure and manage Istio ingress and egress gateways.
• Troubleshoot and optimise Envoy sidecars and proxy configurations.
• Develop and maintain Istio resources including VirtualServices, DestinationRules, Gateways, and AuthorizationPolicies.
• Design and implement Kubernetes networking, service discovery, ingress/egress, network policies, and secure communication patterns.
• Work with AWS and OCI networking components including VPCs, subnets, load balancers, security groups, security lists, and NSGs.
• Integrate service mesh environments with identity and authentication technologies such as OIDC, OAuth2, SPIFFE, and SPIRE.
• Build observability solutions using Prometheus, Grafana, Kiali, Jaeger/Zipkin, AWS CloudWatch, and OCI Monitoring.
• Define and monitor SLIs, SLOs, error budgets, alerts, latency, errors, and service reliability metrics.
• Perform root-cause analysis and resolve production issues involving Kubernetes, Istio, networking, routing, connectivity, latency, and service-to-service communication.
• Integrate Kubernetes and Istio configurations with CI/CD and GitOps pipelines.
• Develop automation using Python, Bash, or Go to streamline platform and operational activities.
• Build reusable platform capabilities and self-service solutions that improve developer productivity.
• Collaborate with DevOps, SRE, Security, Application Engineering, and Cloud Infrastructure teams.

What Makes You a Great Fit

• 7–9 years of experience in Kubernetes, Cloud Infrastructure, DevOps, SRE, Platform Engineering, or a related field.
• Strong hands-on experience with Kubernetes platform engineering and production cluster operations.
• Proven production experience designing, implementing, and managing Istio Service Mesh.
• Strong expertise in AWS EKS and Oracle OKE architecture and operations.
• Deep understanding of Envoy Proxy, service mesh architecture, and microservices communication patterns.
• Strong experience with Terraform, Helm, Argo CD, Flux, GitOps, and YAML-based configuration management.
• Strong understanding of Kubernetes and cloud networking, including VPC, CNI, DNS, service discovery, ingress/egress, network policies, and load balancers.
• Hands-on experience implementing mTLS, zero-trust architecture, authentication, authorisation, and security policies.
• Strong knowledge of observability tools including Prometheus, Grafana, Kiali, Jaeger/Zipkin, CloudWatch, or OCI Monitoring.
• Good scripting and automation skills using Python, Bash, or Go.
• Strong troubleshooting and root-cause analysis capabilities across Kubernetes, Istio, networking, and cloud infrastructure.
• Experience supporting multi-cluster, multi-region, or multi-cloud service mesh environments is an advantage.
• Knowledge of AWS App Mesh or OCI Service Mesh is a plus.
• Familiarity with SPIFFE/SPIRE workload identity frameworks is preferred.
• Experience with container and Kubernetes security tools such as Falco, Trivy, Aqua Security, or Prisma Cloud is an advantage.
• Experience building platform engineering and developer self-service capabilities is preferred.
• Certifications such as CKA, CKAD, CKS, AWS Solutions Architect, AWS DevOps Engineer, or OCI Architectare advantageous.
• Strong communication, collaboration, ownership, and production-support skills with the ability to work effectively in a fast-paced engineering environment.