API Gateway

Role & responsibilities Design, implement, and manage API Gateway platforms (e.g., Apigee, Kong, AWS API Gateway, Azure API Management, Mulesoft) Collaborate with the application team to gather requirements, define plugin functionality, and integrate APIs. Develop and maintain custom plugins (Authentication & authorization, Transformations, Security plugins) for API Gateway platforms (e.g., Kong, Apigee, or similar) using Lua, Python, and Java. Implement and manage security controls such as: Authentication & authorization (OAuth 2.0, JWT, mTLS) Rate limiting, throttling, IP filtering Security plugins (Bot detection, IP restriction, JSON Threat Protection) Develop and maintain shared gateway policies (logging, caching, transformation) Support application teams with onboarding, troubleshooting, and optimization Integrate Kong API Gateway with observability and analytics platforms like Elasticsearch/OpenSearch, Splunk, and Prometheus to enable centralized API monitoring and logging. Monitor API performance, availability, and usage metrics Enabled real-time API traffic indexing into Elasticsearch or similar tool for monitoring, troubleshooting, and audit purposes. Integrated API Gateway logs and metrics with Elasticsearch-based observability stacks (ELK). Integrate API gateways with CI/CD pipelines Act as an escalation point for API gateway issues Preferred candidate profile Strong understanding of REST APIs, HTTP, JSON, OpenAPI/Swagger Hands-on experience with API Gateway platforms API security standards (OAuth 2.0, OIDC, JWT, mTLS) Experience with rate limiting, caching, traffic shaping Knowledge of cloud platforms (AWS, Azure, GCP) Scripting / automation (Python, Bash, Terraform) Monitoring & logging tools (Prometheus, Splunk, ELK) Functional API onboarding API availability and latency Security incidents related to APIs Platform stability and scalability Cross-team collaboration Incident management & troubleshooting Documentation and knowledge sharing .