Service Delivery Center - Apigee Platform Engineer - Senior

EY•San Antonio, TX

6d•$67,000 - $155,300

About The Position

EY is seeking a Senior Apigee Platform Engineer to help build, operate and continuously improve secure, automated and resilient enterprise API platforms across cloud, hybrid and on-premises environments. The engineer will work on API management, Kubernetes, cloud infrastructure, DevOps automation, security and production operations, collaborating with platform architects, API developers, cloud engineers, network and security teams, and operations support teams. The role supports stable runtimes, reliable deployments, observability, platform growth and migration programs. Scope and ownership are aligned to individual experience, with the role designed for professionals with four to eight years of relevant experience. The position supports Apigee X, Apigee hybrid and other approved enterprise deployment patterns, including environments for development, testing, UAT, performance, production and disaster recovery. It also supports migrations from IBM API Connect and DataPower to Apigee. The successful candidate is a practical, collaborative engineer who takes ownership, troubleshoots methodically, documents work, builds repeatable solutions and balances delivery speed with security, stability and operational discipline. At the more senior level, the engineer may lead platform activities, improve automation, support cutovers, mentor colleagues and contribute to architecture and readiness decisions.

Requirements

At least four years of relevant experience in Apigee platform administration, implementation, API gateway operations, DevOps or related platform engineering work.
Hands-on experience with Apigee proxies, shared flows, products, apps, environments, policies, analytics and management APIs.
Kubernetes operations experience covering pods, deployments, services, ingress, namespaces, secrets, config maps, RBAC, autoscaling, logging and troubleshooting.
Cloud platform exposure in GCP, AWS, Azure or hybrid/on-premises environments, including networking, IAM, load balancing, DNS and security fundamentals.
CI/CD implementation experience using tools such as Azure DevOps, GitHub Actions, Jenkins, GitLab CI, Maven, shell scripting, Python or equivalent automation technologies.
Knowledge of API security, TLS/mTLS, certificates, OAuth2, JWT, API keys, rate limiting, quota, spike arrest and threat protection.
Experience with observability, production support, Linux, networking, YAML/JSON, Git, REST APIs, troubleshooting and technical documentation.
Ability to collaborate across development and operations teams, communicate clearly across technical and nontechnical teams, work methodically, take ownership and document work thoughtfully.

Nice To Haves

Experience installing, upgrading or troubleshooting Apigee hybrid runtimes.
Exposure to Terraform, Helm, Kustomize, Ansible or GitOps for platform provisioning and configuration management.
Awareness of IBM API Connect or DataPower migration patterns, including API products, catalogs, policies, GatewayScript, XSLT and SOAP/XML.
Experience with DevSecOps or vulnerability scanning tools, regulated or multi-cloud environments, disaster recovery validation, capacity planning or platform resiliency testing.
A relevant Apigee, Google Cloud, Kubernetes, Terraform, cloud, DevOps, security or Linux certification; equivalent practical experience is also valued.

Responsibilities

Build and configure Apigee organizations, environments, environment groups, hostnames, target servers, KVMs, shared flows, products, developers, apps and runtime settings according to approved platform designs.
Support Apigee X, Apigee hybrid and other approved enterprise deployment patterns across development, testing, UAT, performance, production and disaster recovery environments.
Operate and troubleshoot Apigee hybrid runtimes on Kubernetes platforms such as GKE, EKS and AKS, including namespaces, pods, deployments, services, ingress, secrets, config maps, RBAC, autoscaling and health monitoring.
Build and maintain CI/CD and APIOps pipelines for proxies, shared flows, environment configuration and platform promotion using management APIs, Maven, scripting, Git-based workflows and approved DevOps tools.
Support networking and connectivity requirements, including DNS, hostnames, load balancers, routing, firewall rules, private connectivity, and TLS and mTLS certificate configuration and validation.
Apply security and access controls across Apigee, cloud IAM, Kubernetes RBAC, CI/CD service accounts, secrets management and gateway policies.
Configure logs, metrics, alerts, dashboards and analytics; troubleshoot deployment, runtime, traffic, certificate and backend connectivity issues; and contribute to incident response, root-cause analysis and production readiness.
Support IBM API Connect and DataPower migration waves through environment readiness, policy availability, routing, cutover, rollback validation, release support and hypercare.
Maintain platform documentation, deployment evidence, validation checklists, SOPs, runbooks, known-error articles and support transition materials.
At the more senior level, lead platform activities, improve automation, support cutovers, mentor colleagues and contribute to architecture and readiness decisions.