Technical Engineer - API Gateway

Role & responsibilities

• Design, implement, and manage API Gateway platforms (e.g., Apigee, Kong, AWS API Gateway, Azure API Management, Mulesoft)
• Collaborate with the application team to gather requirements, define plugin functionality, and integrate APIs.
• Develop and maintain custom plugins (Authentication & authorization, Transformations, Security plugins) for API Gateway platforms (e.g., Kong, Apigee, or similar) using Lua, Python, and Java.
• Implement and manage security controls such as:
• Authentication & authorization (OAuth 2.0, JWT, mTLS)
• Rate limiting, throttling, IP filtering
• Security plugins (Bot detection, IP restriction, JSON Threat Protection)
• Develop and maintain shared gateway policies (logging, caching, transformation)
• Support application teams with onboarding, troubleshooting, and optimization
• Integrate Kong API Gateway with observability and analytics platforms like Elasticsearch/OpenSearch, Splunk, and Prometheus to enable centralized API monitoring and logging.
• Monitor API performance, availability, and usage metrics
• Enabled real-time API traffic indexing into Elasticsearch or similar tool for monitoring, troubleshooting, and audit purposes.
• Integrated API Gateway logs and metrics with Elasticsearch-based observability stacks (ELK).
• Integrate API gateways with CI/CD pipelines
• Act as an escalation point for API gateway issues

Required Skills

Technical

• Strong understanding of REST APIs, HTTP, JSON, OpenAPI/Swagger
• Hands-on experience with API Gateway platforms
• API security standards (OAuth 2.0, OIDC, JWT, mTLS)
• Experience with rate limiting, caching, traffic shaping
• Knowledge of cloud platforms (AWS, Azure, GCP)
• Scripting / automation (Python, Bash, Terraform)
• Monitoring & logging tools (Prometheus, Splunk, ELK)

Functional

• API onboarding
• API availability and latency
• Security incidents related to APIs
• Platform stability and scalability
• Cross-team collaboration
• Incident management & troubleshooting
• Documentation and knowledge sharing