API Gateway

Role & responsibilities

• Design, implement, and manage

  API Gateway platforms

   (e.g., Apigee, Kong, AWS API Gateway, Azure API Management, Mulesoft)
• Collaborate with the

  application team

   to gather requirements, define plugin functionality, and integrate APIs.
• Develop and maintain

  custom plugins

   (Authentication & authorization, Transformations, Security plugins) for API Gateway platforms (e.g., Kong, Apigee, or similar) using

  Lua, Python, and Java

  .
• Implement and manage

  security controls such as

  :
• Authentication & authorization (OAuth 2.0, JWT, mTLS)
• Rate limiting, throttling, IP filtering
• Security plugins (Bot detection, IP restriction, JSON Threat Protection)
• Develop and maintain

  shared gateway policies

   (logging, caching, transformation)
• Support application teams with

  onboarding, troubleshooting, and optimization

• Integrate Kong API Gateway with observability and analytics platforms like Elasticsearch/OpenSearch, Splunk, and Prometheus to enable centralized API monitoring and logging.
• Monitor API performance, availability, and usage metrics
• Enabled

  real-time API traffic indexing into Elasticsearch or similar tool

   for monitoring, troubleshooting, and audit purposes.
• Integrated API Gateway logs and metrics with

  Elasticsearch-based observability stacks

   (ELK).
• Integrate API gateways with

  CI/CD pipelines

• Act as an escalation point for API gateway issues

Required Skills

Technical

• Strong understanding of

  REST APIs

  , HTTP, JSON, OpenAPI/Swagger
• Hands-on experience with

  API Gateway platforms

• API security standards (OAuth 2.0, OIDC, JWT, mTLS)
• Experience with

  rate limiting, caching, traffic shaping

• Knowledge of

  cloud platforms

   (AWS, Azure, GCP)
• Scripting / automation (Python, Bash, Terraform)
• Monitoring & logging tools (Prometheus, Splunk, ELK)

Functional

• API onboarding
• API availability and latency
• Security incidents related to APIs
• Platform stability and scalability
• Cross-team collaboration
• Incident management & troubleshooting
• Documentation and knowledge sharing