Role Title:

Istio Service Mesh Administrator

Experience:

4 - 10 Years (5+ yrs Kubernetes, 3+ yrs Istio in production)

Location: New Delhi

Role Overview

We are seeking an experienced Istio Service Mesh Administrator to design, implement, and operate an enterprisegrade service mesh for largescale microservices running on AWS EKS.
The role requires deep expertise in Istio architecture, Kubernetes networking, zerotrust security, observability, and automation/GitOps, with handson responsibility for reliability, performance, and secure servicetoservice communication across multiple environments.

Key Responsibilities

Service Mesh Architecture & Design

- Design and manage Istio service mesh on AWS EKS for 300+ microservices.
- Architect scalable mesh topology across Dev, QA, Prod, and DR environments.
- Manage Istio control plane lifecycle, including upgrades and revisionbased deployments.
- Define namespace isolation, sidecar injection strategies, and mesh standards.

Traffic Management & Routing

- Configure and manage:
- VirtualServices
- DestinationRules
- Gateways
- ServiceEntries

- Implement advanced routing strategies:

- Canary deployments
- BlueGreen deployments
- Headerbased routing

- Configure retries, timeouts, circuit breaking, and fault injection.
- Manage ingress and egress traffic, including outbound policies (ALLOW_ANY / REGISTRY_ONLY).

Security & Zero Trust

- Implement and enforce mTLS across all services.
- Configure PeerAuthentication and AuthorizationPolicy.
- Integrate mesh security with AWS IAM and IRSA.
- Secure external communication using Istio Egress Gateway.
- Ensure namespacelevel and servicelevel isolation.

Observability & Monitoring





- Implement distributed tracing using Jaeger or OpenTelemetry.
- Operate Prometheus, Grafana, and Kiali dashboards.
- Define SLIs, SLOs, and alerting strategies.
- Troubleshoot latency issues, 503 errors, and mTLS failures.

Kubernetes & AWS Integration

- Strong understanding of Kubernetes internals:
- API Server
- etcd
- Scheduler
- CNI

- Manage highavailability EKS clusters with autoscaling.
- Configure AWS Load Balancer Controller (ALB/NLB) for Istio Ingress Gateway.
- Optimize Envoy sidecar resource usage and overall cluster performance.

Reliability & Performance Engineering

- Implement resilience patterns:
- Bulkheads
- Circuit breakers
- Rate limiting

- Optimize Envoy proxy performance and telemetry overhead.
- Troubleshoot highthroughput production workloads.
- Support multicluster / multiregion service mesh (preferred).

Automation & DevOps

- Manage mesh configurations using GitOps tools (ArgoCD / Flux).
- Use Helm for deployment and versioning of mesh resources.
- Integrate CI/CD pipelines for automated policy rollouts.
- Automate mesh upgrades and rollout strategies.

Required Skills

- Kubernetes (5+ years) EKS preferred
- Istio (3+ years) in production
- Experience operating 200–300+ microservices architectures
- Deep knowledge of Kubernetes networking & service discovery
- Handson expertise with Envoy proxy and Istio control plane components
- Strong troubleshooting skills in production environments
- Strong understanding of AWS networking:
- VPC, Subnets, Route Tables
- NAT, IAM

Preferred Qualifications

- Experience with multicluster service mesh architectures
- Integration of API Gateway with Istio
- Solid scripting skills (Bash / Python)

📌 AWS EKS Engineer-Immediate Joiners (Noida)
🏢 Tata Consultancy Services
📍 Noida