Gravitee API Management Engineer

Role & responsibilities

JD:

Gravitee API Management Engineer

Description:

•    Implement and maintain Gravitee API Management in a hybrid control-plane / on-prem gateway model
  •    Debug Gravitee policy-chain, flow-matching, shared policy group, dictionary/configuration, and promotion failures
  •    Reconstruct and author Groovy and JavaScript policies; manage dictionaries and shared policy groups
  •    Own API environment promotion across dev, test, and production using GitOps pipelines, including manifest management, branch controls, and rollback/recovery procedures
  •    Work strictly within an existing governed GitOps process no direct portal edits
  •    Manage ArgoCD sync/reconciliation and GKO (Gravitee Kubernetes Operator) lifecycle
  •    Handle Kubernetes/OpenShift gateway runtime troubleshooting, pod-level diagnosis, and resource tuning
  •    Configure and troubleshoot API security: OAuth2, OIDC, JWT, IDCS/IAM integration, TLS/certificates
  •    Support GitHub Actions-based promotion pipelines and Kustomize/CRD management
  •    Follow shared-component ownership, review, and change-control expectations
  Gravitee APIM
  •    Hands-on Gravitee APIM: API V4 definitions, plans, subscriptions, shared policy groups, dictionaries
  •    Policy authoring and debugging: Groovy, JavaScript, flow-matching, policy-chain, dictionary/configuration, and promotion failures
  •    Configuration-as-code patterns; promotion manifest management
  CI/CD & GitOps
  •    ArgoCD sync/reconciliation; GKO lifecycle management
  •    GitHub Actions-based API promotion pipelines (delta-aware)
  •    Customize overlays and CRD management in multi-environment clusters
  •    Branch controls, rollback/recovery expectations, and GitOps-only change discipline
  API Security
  •    OAuth2, OIDC, JWT within Gravitee plan/subscription security schemes
  •    IDCS/IAM integration; TLS certificate configuration and troubleshooting
  Kubernetes / OpenShift
  •    Gateway runtime behaviour, pod-level and control-plane troubleshooting, and resource tuning
  •    Hybrid Gravitee architecture: cloud control plane + on-prem gateways
  •    Environment-specific deployment diagnosis across dev, test, prod
  

Preferred (Nice-to-Have)
•    HashiCorp Vault: KV v2, AppRole auth, dynamic secret paths, CyberArk-to-Vault sync
•    OpenTelemetry + Grafana observability; migration from Splunk-based logging
•    Apigee-to-Gravitee migration experience (enterprise scale)
•    Production support combining Gravitee, GitOps, Vault, Kubernetes/OpenShift, and shared platform dependencies

Preferred candidate profile