Role: IT Infrastructure Services - Other
Industry Type: IT Services & Consulting
Department: IT & Information Security
Employment Type: Full Time, Permanent
Role Category: IT Infrastructure Services
UG: B.Tech / B.E. in Any Specialization
PG: M.Tech in Any Specialization, MCA in Any Specialization
Role Title: Istio Service Mesh Administrator Experience: 4 - 10 Years (5+ yrs Kubernetes, 3+ yrs Istio in production) Location: New Delhi
Role Overview
We are seeking an experienced Istio Service Mesh Administrator to design, implement, and operate an enterprisegrade service mesh for largescale microservices running on AWS EKS. The role requires deep expertise in Istio architecture, Kubernetes networking, zerotrust security, observability, and automation/GitOps, with handson responsibility for reliability, performance, and secure servicetoservice communication across multiple environments.
Key Responsibilities
Service Mesh Architecture & Design Design and manage Istio service mesh on AWS EKS for 300+ microservices. Architect scalable mesh topology across Dev, QA, Prod, and DR environments. Manage Istio control plane lifecycle, including upgrades and revisionbased deployments. Define namespace isolation, sidecar injection strategies, and mesh standards. Traffic Management & Routing Configure and manage: VirtualServices DestinationRules Gateways ServiceEntries Implement advanced routing strategies: Canary deployments BlueGreen deployments Headerbased routing Configure retries, timeouts, circuit breaking, and fault injection. Manage ingress and egress traffic, including outbound policies (ALLOW_ANY / REGISTRY_ONLY). Security & Zero Trust Implement and enforce mTLS across all services. Configure PeerAuthentication and AuthorizationPolicy. Integrate mesh security with AWS IAM and IRSA. Secure external communication using Istio Egress Gateway. Ensure namespacelevel and servicelevel isolation. Observability & Monitoring Implement distributed tracing using Jaeger or OpenTelemetry. Operate Prometheus, Grafana, and Kiali dashboards. Define SLIs, SLOs, and alerting strategies. Troubleshoot latency issues, 503 errors, and mTLS failures. Kubernetes & AWS Integration Strong understanding of Kubernetes internals: API Server etcd Scheduler CNI Manage highavailability EKS clusters with autoscaling. Configure AWS Load Balancer Controller (ALB/NLB) for Istio Ingress Gateway. Optimize Envoy sidecar resource usage and overall cluster performance. Reliability & Performance Engineering Implement resilience patterns: Bulkheads Circuit breakers Rate limiting Optimize Envoy proxy performance and telemetry overhead. Troubleshoot highthroughput production workloads. Support multicluster / multiregion service mesh (preferred). Automation & DevOps Manage mesh configurations using GitOps tools (ArgoCD / Flux). Use Helm for deployment and versioning of mesh resources. Integrate CI/CD pipelines for automated policy rollouts. Automate mesh upgrades and rollout strategies.
Required Skills
Kubernetes (5+ years) EKS preferred Istio (3+ years) in production Experience operating 200รป300+ microservices architectures Deep knowledge of Kubernetes networking & service discovery Handson expertise with Envoy proxy and Istio control plane components Strong troubleshooting skills in production environments Strong understanding of AWS networking: VPC, Subnets, Route Tables NAT, IAM Preferred Qualifications Experience with multicluster service mesh architectures Integration of API Gateway with Istio Strong scripting skills (Bash / Python)