I can vouch for Nomad, coupled with Consul and Vault. You can start simple, it scales well and with the recent and undergoing integrations with Consul Connect and Nomad you can go service mesh with mTLS if you want.