API Gateway Engineer (IBM API Connect + Kong)

Codetech • Scottsdale, AZ

10h

About The Position

Design, implement, and operate APIs using IBM API Connect and Kong gateways. Build gateway assemblies, including policies, GatewayScript, and XSLT, and configure routing, rate limiting, and authentication. Implement CI/CD for gateway configurations, environments, and automated promotions using GitOps practices. Configure catalogs, products, plans, subscriptions, and developer portal integrations. Establish observability through logging, metrics, tracing, and analytics, including SLOs and error budgets. Harden API security with WAF, threat protection, schema validation, zero trust, and secrets management. Support proxy and API gateway migrations, including transitions between Kong and IBM API Connect. Troubleshoot performance, capacity, and reliability issues and conduct load tests. Partner with application teams, security, and networking teams on DNS, TLS, certificates, and IP allowlists.

Requirements

• At least 5 years of experience with API gateways.
• At least 2 years of experience each with IBM API Connect and Kong.
• Strong knowledge of REST, SOAP, OpenAPI, OAuth2/OIDC/JWT, mTLS/TLS, and PEM/PFX/P12 certificates.
• Experience with Kong OSS or Enterprise.
• Experience with IBM API Connect v10, including assembly policies, DataPower, GatewayScript, XSLT, products, and plans.
• Experience with CI/CD tools such as GitHub Actions or Jenkins.
• Experience with observability tools such as Splunk/ELK and Prometheus/Grafana.

Responsibilities

• Design, implement, and operate APIs on IBM API Connect and Kong gateways.
• Build assemblies using policies, GatewayScript, and XSLT; configure routing, rate limiting, and authentication.
• Implement GitOps-based CI/CD for gateway configurations, environments, and automated promotions.
• Configure catalogs, products, plans, subscriptions, and developer portal integrations.
• Implement observability using logging, metrics, tracing, and analytics, and work with SLOs and error budgets.
• Harden security using WAF, threat protection, schema validation, zero trust, and secrets management.
• Support proxy and API gateway migrations, including Kong and IBM API Connect transitions.
• Troubleshoot performance, capacity, and reliability issues and conduct load tests.
• Partner with application, security, and networking teams on DNS, TLS, certificates, and IP allowlists.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed