Gravitee API Management Engineer

Role & responsibilities

JD:

Gravitee API Management Engineer

Description:

• Implement and maintain Gravitee API Management in a hybrid control-plane / on-prem gateway model
  • Debug Gravitee policy-chain, flow-matching, shared policy group, dictionary/configuration, and promotion failures
  • Reconstruct and author Groovy and JavaScript policies; manage dictionaries and shared policy groups
  • Own API environment promotion across dev, test, and production using GitOps pipelines, including manifest management, branch controls, and rollback/recovery procedures
  • Work strictly within an existing governed GitOps process no direct portal edits
  • Manage ArgoCD sync/reconciliation and GKO (Gravitee Kubernetes Operator) lifecycle
  • Handle Kubernetes/OpenShift gateway runtime troubleshooting, pod-level diagnosis, and resource tuning
  • Configure and troubleshoot API security: OAuth2, OIDC, JWT, IDCS/IAM integration, TLS/certificates
  • Support GitHub Actions-based promotion pipelines and Kustomize/CRD management
  • Follow shared-component ownership, review, and change-control expectations
    Gravitee APIM
  • Hands-on Gravitee APIM: API V4 definitions, plans, subscriptions, shared policy groups, dictionaries
  • Policy authoring and debugging: Groovy, JavaScript, flow-matching, policy-chain, dictionary/configuration, and promotion failures
  • Configuration-as-code patterns; promotion manifest management
    CI/CD & GitOps
  • ArgoCD sync/reconciliation; GKO lifecycle management
  • GitHub Actions-based API promotion pipelines (delta-aware)
  • Customize overlays and CRD management in multi-environment clusters
  • Branch controls, rollback/recovery expectations, and GitOps-only change discipline
    API Security
  • OAuth2, OIDC, JWT within Gravitee plan/subscription security schemes
  • IDCS/IAM integration; TLS certificate configuration and troubleshooting
    Kubernetes / OpenShift
  • Gateway runtime behaviour, pod-level and control-plane troubleshooting, and resource tuning
  • Hybrid Gravitee architecture: cloud control plane + on-prem gateways
  • Environment-specific deployment diagnosis across dev, test, prod

Preferred (Nice-to-Have)

• HashiCorp Vault: KV v2, AppRole auth, dynamic secret paths, CyberArk-to-Vault sync
• OpenTelemetry + Grafana observability; migration from Splunk-based logging
• Apigee-to-Gravitee migration experience (enterprise scale)
• Production support combining Gravitee, GitOps, Vault, Kubernetes/OpenShift, and shared platform dependencies

Preferred candidate profile