Technical Engineer - API Gateway

Role & responsibilities

• Design, implement, and manage API Gateway platforms (e.g., Apigee, Kong, AWS API Gateway, Azure API Management, Mulesoft)

• Collaborate with the application team to gather requirements, define plugin functionality, and integrate APIs.

• Develop and maintain custom plugins (Authentication & authorization, Transformations, Security plugins) for API Gateway platforms (e.g., Kong, Apigee, or similar) using Lua, Python, and Java.

• Implement and manage security controls such as:

• Authentication & authorization (OAuth 2.0, JWT, mTLS)

• Rate limiting, throttling, IP filtering

• Security plugins (Bot detection, IP restriction, JSON Threat Protection)

• Develop and maintain shared gateway policies (logging, caching, transformation)

• Support application teams with onboarding, troubleshooting, and optimization

• Integrate Kong API Gateway with observability and analytics platforms like Elasticsearch/OpenSearch, Splunk, and Prometheus to enable centralized API monitoring and logging.

• Monitor API performance, availability, and usage metrics

• Enabled real-time API traffic indexing into Elasticsearch or similar tool for monitoring, troubleshooting, and audit purposes.

• Integrated API Gateway logs and metrics with Elasticsearch-based observability stacks (ELK).

• Integrate API gateways with CI/CD pipelines

• Act as an escalation point for API gateway issues

Required Skills

Technical

• Strong understanding of REST APIs, HTTP, JSON, OpenAPI/Swagger
• Hands-on experience with API Gateway platforms
• API security standards (OAuth 2.0, OIDC, JWT, mTLS)
• Experience with rate limiting, caching, traffic shaping
• Knowledge of cloud platforms (AWS, Azure, GCP)
• Scripting / automation (Python, Bash, Terraform)
• Monitoring & logging tools (Prometheus, Splunk, ELK)

Functional

• API onboarding
• API availability and latency
• Security incidents related to APIs
• Platform stability and scalability
• Cross-team collaboration
• Incident management & troubleshooting
• Documentation and knowledge sharing