Senior Staff Engineer, Hybrid Cloud Fabric

Sr Staff Engineer - Multi-Cloud Service Mesh

Become a key player in GEICO's tech transformation! We are seeking a Senior or Staff Engineer with deep expertise in service mesh technologies to help implement modern, scalable, and secure communication fabric across our hybrid cloud environment. You will play a vital role in enabling seamless and secure communication between services, enhancing observability, and ensuring high availability and performance for our applications.

• You are passionate about service mesh technologies and their role in building resilient and scalable microservices architectures.
• You enjoy exploring cutting-edge technologies and pushing the boundaries of what's possible.
• You are eager to contribute to the Istio community and share your expertise with others.
• You thrive in a collaborative environment and enjoy working with diverse teams to solve complex problems.
• You are excited by the opportunity to shape the future of GEICO's application infrastructure and contribute to our transformation into a cloud-native organization.

• Design and implement a robust service mesh architecture, encompassing traffic management, security, observability, and resilience for microservices across public and private clouds within our on‑premises data centers.
• Integrate the service mesh with existing infrastructure and applications, ensuring seamless operation and interoperability with various platforms and technologies, including legacy systems.
• Establish and enforce service mesh best practices, including security policies, traffic routing rules, circuit breakers, and access control mechanisms, to maintain a secure and reliable application environment.
• Develop comprehensive monitoring and observability dashboards to provide deep insights into service mesh health, performance, and potential issues, enabling proactive problem identification and resolution.
• Guide and mentor engineers on service mesh principles and best practices, fostering knowledge sharing and expertise development within the team, empowering them to contribute effectively to the service mesh implementation.
• Work closely with networking and security teams to ensure secure and efficient integration of the service mesh with on‑premises infrastructure and networks, addressing potential challenges and ensuring smooth operation.
• Partner with SREs to establish service mesh observability, monitoring, and alerting strategies for maintaining high availability and performance, collaborating to define SLOs, SLIs, and error budgets.
• Actively engage with the Istio community, contribute to open‑source projects, and represent GEICO's leadership in service mesh adoption.

• Service mesh expertise (dev):
  Familiarity with mesh architecture, components, and configuration options, including advanced traffic management, security policies, and telemetry customization.
• Service mesh experience (ops):
  Designed, implemented, and managed service mesh solutions at scale, addressing challenges related to performance, security, and observability.
• Programming skills
  :
  Experience with Go is a must;
  Rust is a bonus.
• Linux OS
  :
  In‑depth knowledge of Linux operating systems, including performance tuning, troubleshooting, and security best practices.
• Networking
  :
  Advanced understanding of networking concepts and tools (e.g., iptables, netfilter, traffic shaping) for analyzing and optimizing service mesh performance within the hybrid cloud environment.
• Kubernetes and containerization
  :
  Extensive experience with Kubernetes and container orchestration platforms, including networking, security, and service management.
• Microservices architecture
  :
  Deep understanding of microservices design patterns, service discovery mechanisms, API gateways, and distributed tracing.
• Observability and monitoring
  :
  Expertise in tools like Prometheus, Grafana, Jaeger, and Kiali to monitor service mesh performance and troubleshoot issues.
• Security best practices
  :
  Knowledge of zero‑trust security principles, authentication and authorization mechanisms, and encryption technologies within the context of service mesh.
• Networking and security…