Senior Engineer, Hybrid Cloud Fabric

About the role

Become a key player in GEICO's tech transformation! We are seeking a Senior or Staff Engineer with deep expertise in service mesh technologies to help implement modern, scalable, and secure communication fabric across our hybrid cloud environment. You will play a vital role in enabling seamless and secure communication between services, enhancing observability, and ensuring high availability and performance for our applications.

Responsibilities

• Design and implement a robust service mesh architecture, encompassing traffic management, security, observability, and resilience for microservices across public and private clouds within our on-premises data centers.
• Integrate the service mesh with existing infrastructure and applications, ensuring seamless operation and interoperability with various platforms and technologies, including legacy systems.
• Establish and enforce service mesh best practices, including security policies, traffic routing rules, circuit breakers, and access control mechanisms, to maintain a secure and reliable application environment.
• Develop comprehensive monitoring and observability dashboards to provide deep insights into service mesh health, performance, and potential issues, enabling proactive problem identification and resolution.
• Guide and mentor engineers on service mesh principles and best practices, fostering knowledge sharing and expertise development within the team, empowering them to contribute effectively to the service mesh implementation.
• Partner with SREs to establish service mesh observability, monitoring, and alerting strategies for maintaining high availability and performance, collaborating to define SLOs, SLIs, and error budgets.
• Actively engage with the Istio community, contribute to open-source projects, and represent GEICO's leadership in service mesh adoption.

Requirements

• 4+ years of professional experience in software engineering, DevOps, or related fields.
• 4+ years of experience designing, implementing, and managing microservices architectures.
• 2+ years of hands-on experience with Istio and service mesh technologies.
• Experience with Kubernetes and container orchestration platforms.
• Proven ability to lead technical projects and mentor other engineers.

Qualifications

• Service mesh expertise (dev): Familiarity with mesh architecture, components, and configuration options, including advanced traffic management, security policies, and telemetry customization.
• Service mesh experience (ops): Design, implementation, and management of service mesh solutions at scale, addressing challenges related to performance, security, and observability.
• Programming skills: Experience with Go is a must; Rust is a bonus.
• Linux OS: In-depth knowledge of Linux operating systems, including performance tuning, troubleshooting, and security best practices.
• Networking: Advanced understanding of networking concepts and tools (e.g., iptables, netfilter, traffic shaping) for analyzing and optimizing service mesh performance within the hybrid cloud environment.
• Kubernetes and containerization: Extensive experience with Kubernetes and container orchestration platforms, including networking, security, and service management.
• Microservices architecture: Deep understanding of microservices design patterns, service discovery mechanisms, API gateways, and distributed tracing.
• Observability and monitoring: Expertise in tools like Prometheus, Grafana, Jaeger, and Kiali to monitor service mesh performance and troubleshoot issues.
• Security best practices: Knowledge of zero-trust security principles, authentication and authorization mechanisms, and encryption technologies within the context of service mesh.
• Networking and security integration: Knowledge of network protocols, security policies, and best practices for integrating the service mesh with on-premises infrastructure.
• SRE practices for service mesh: Understanding of SRE principles and experience applying them to service mesh environments for reliability and performance optimization.

Skills

• Service mesh expertise (dev): Familiarity with mesh architecture, components, and configuration options, including advanced traffic management, security policies, and telemetry customization.
• Service mesh experience (ops): Design, implementation, and management of service mesh solutions at scale, addressing challenges related to performance, security, and observability.
• Programming skills: Experience with Go is a must; Rust is a bonus.
• Linux OS: In-depth knowledge of Linux operating systems, including performance tuning, troubleshooting, and security best practices.
• Networking: Advanced understanding of networking concepts and tools (e.g., iptables, netfilter, traffic shaping) for analyzing and optimizing service mesh performance within the hybrid cloud environment.
• Kubernetes and containerization: Extensive experience with Kubernetes and container orchestration platforms, including networking, security, and service management.
• Microservices architecture: Deep understanding of microservices design patterns, service discovery mechanisms, API gateways, and distributed tracing.
• Observability and monitoring: Expertise in tools like Prometheus, Grafana, Jaeger, and Kiali to monitor service mesh performance and troubleshoot issues.
• Security best practices: Knowledge of zero-trust security principles, authentication and authorization mechanisms, and encryption technologies within the context of service mesh.
• Networking and security integration: Knowledge of network protocols, security policies, and best practices for integrating the service mesh with on-premises infrastructure.
• SRE practices for service mesh: Understanding of SRE principles and experience applying them to service mesh environments for reliability and performance optimization.

Pay

Annual Salary: $100,000.00 - $215,000.00

Schedule

Full-time