Apigee Cloud Engineer

We are seeking an experienced Apigee Cloud Engineer to join our team on a contract basis. In this role, you will design, deploy, secure, and automate API management workflows on the Google Cloud Platform (GCP). You will be responsible for configuring enterprise API proxies in Apigee X, establishing robust security policies, maintaining multi-environment CI/CD automation, and managing seamless target endpoint integrations.

Duration: 5 weeks (40HPW)

Responsibilities

• Apigee X & GCP Networking: Design and manage Apigee X API proxies, shared flows, target servers, and environment groups. Configure GCP networking components including Virtual Private Clouds (VPC), Private Service Connect (PSC), Load Balancers, and Cloud Armor.
• API Security & Identity Validation: Implement enterprise-grade security policies leveraging OAuth 2.0, JWT token validation, mTLS, and custom authorization headers.
• Credential Mediation & Secrets Management: Securely manage API keys, certificates, and credentials using GCP Secret Manager and Apigee Key-Value Maps (KVMs).
• Target Endpoint & TLS Configuration: Configure TLS/mTLS configurations and backend routing across diverse internal and external target endpoints.
• Automation & CI/CD Pipelines: Build and maintain automated multi-environment deployment pipelines (Dev, Staging, Prod) for Apigee artifacts using tools like Cloud Build, GitHub Actions, or GitLab CI.
• API Testing & Debugging: Perform end-to-end API testing, trace request/response execution flows, troubleshoot latency bottlenecks, and debug production proxy issues.

Qualifications

• Apigee X & GCP Networking: Proven hands-on experience with Apigee X architecture, API proxies, KVMs, and GCP networking infrastructure (VPCs, PSC, Load Balancing).
• API Security & Identity: Deep understanding of API security protocols, including OAuth 2.0 flow mechanisms, JWT token validation, and API key management.
• Secrets Management: Practical experience with credential mediation and secret management tools (GCP Secret Manager, HashiCorp Vault, or Apigee KVMs).
• Target Endpoint & TLS: Hands-on expertise configuring backend target servers, mTLS, and SSL/TLS certificate management.
• CI/CD Automation: Demonstrated ability to automate Apigee deployments across multiple environments using modern CI/CD tools (e.g., GitHub Actions, GitLab CI, Cloud Build, Terraform).
• Testing & Debugging: Proficient in API testing tools (Postman, Bruno, or curl) and native Apigee tracing/debugging tools.
• Financial & Treasury Integrations: Prior exposure to enterprise financial systems or treasury platforms (e.g., Kyriba APIs) (nice to have)
• Google Apps Script: Experience using Google Apps Script for automated operational integrations or custom workflows. (nice to have)
• Monitoring & Observability: Hands-on experience configuring GCP Cloud Monitoring, Cloud Logging, and setting up proactive operational alerting dashboards for API health. (nice to have)