Professional Services | Solutions Engineer

At the application traffic layer, only Google processes more volume than Tetrate. We manage 2 trillion application transactions annually ranging from high-frequency API authorization and multi-provider traffic steering to AI agent routing. This is the high-density layer where OpenAI and some of the Fortune 50 solve for performance, observability, cost, and security at scale. At this level of transaction density, a single user interaction triggers a massive cascade of internal operations that legacy infrastructure simply wasn’t designed to handle.At Tetrate, we work with leading enterprises-including major financial institutions and numerous multi-million-dollar customers-to solve complex application networking, security, and platform challenges. As the creators of Envoy Gateway and Envoy AI Gateway, we build technology for environments where reliability, governance, and scale are not optional. We’re building a world-class field engineering organization and looking for hands-on technical talent who want to help customers turn modern infrastructure into real operational outcomes.As a Professional Services Solutions Engineer, you will deliver hands-on implementation and enablement for enterprise customers adopting Tetrate’s platform. You will work closely with SRE, DevOps, platform, and security teams to get customers from “installed” to “operational, governed, and scaling”, and you will develop reusable deployment patterns that reduce bespoke work over time.What you will do* You will plan, deploy, and operationalise Tetrate products in customer environments (Kubernetes and hybrid), including service mesh and gateway patterns.* You will accelerate adoption with pragmatic templates and automation (Helm/Terraform/GitOps), working with customer tooling standards and CI/CD workflows.* You will troubleshoot multi layer issues (cluster, networking, traffic policy, identity integration, observability flows) and help teams develop runbooks and operational routines rooted in service mesh and gateway best practices.* You will deliver customer training on TSB, TIS, and TEG in a structured, scenario driven format (labs, demos, persona tracks).* You will feed recurring adoption blockers back into internal best practice guides and product enhancement requests, so delivery becomes easier quarter over quarter.What success looks like in the first 6 months* Multiple customers reach stable production operation with standardised onboarding and repeatable configuration patterns.* Customer teams can operate core workflows independently (traffic management, policy changes, upgrades, incident response runbooks), reducing repeated PS intervention.* You contribute at least one reusable delivery accelerator (deployment scaffold, troubleshooting playbook, integration template) adopted across engagements.Required experience and skills* Strong hands on experience with Kubernetes production operations and cloud native delivery.* Experience implementing and operating service mesh and/or modern application gateways (Istio and Envoy ecosystem preferred).* Customer facing delivery experience (professional services, SRE/Platform engineering with stakeholder-facing responsibilities, or equivalent).* Solid debugging skills and a structured troubleshooting methodology (networking, L7 routing, certs/identity, telemetry).Nice to have* Workload identity familiarity (SPIFFE/SPIRE or comparable).* Familiarity with Gateway API concepts and Envoy Gateway implementations.* Understanding of identity/authorisation patterns that map to “AI tool access” (OAuth, authorisation policy, MCP awareness).

• Strong hands on experience with Kubernetes production operations and cloud native delivery.

• Experience implementing and operating service mesh and/or modern application gateways (Istio and Envoy ecosystem preferred).

• Customer facing delivery experience (professional services, SRE/Platform engineering with stakeholder-facing responsibilities, or equivalent).

• Solid debugging skills and a structured troubleshooting methodology (networking, L7 routing, certs/identity, telemetry).

Nice to have

• Workload identity familiarity (SPIFFE/SPIRE or comparable).

• Familiarity with Gateway API concepts and Envoy Gateway implementations.