IT Expert Principal - Apigee API Governance & Security

IT Expert Principal - Apigee API Governance & Security
Location: Remote (occasional site visits) London
Contract: ASAP - June 2027

Role Overview:
We are seeking a highly experienced Principal Apigee Consultant to lead the implementation of API governance, API hub and Advanced API Security capabilities within a large-scale Google Cloud environment.
This role will focus on establishing robust API governance frameworks, improving API visibility, implementing advanced security controls and ensuring enterprise APIs meet regulatory and operational requirements.
The successful candidate will have extensive hands-on Apigee X experience, particularly across API security, life cycle management, governance and operational delivery.

Key Responsibilities

• Lead the design and implementation of API governance and security capabilities across Apigee X.
• Implement and configure API hub to provide a centralised API catalogue and governance framework.
• Define API metadata standards, ownership models, classification and life cycle management processes.
• Configure API catalogue ingestion, discovery, access controls and visibility.
• Implement Apigee Advanced API Security, including security profiles, risk assessments, API observation and abuse detection.
• Design and deploy API security policies and controls to protect enterprise applications and services.
• Implement authentication and authorisation mechanisms using OAuth 2.0, OIDC, JWT, API keys and mTLS.
• Develop reusable security policies, shared flows and standardised governance patterns.
• Identify and assess API vulnerabilities, security risks and potential abuse.
• Establish security monitoring, reporting and controlled remediation processes.
• Work closely with security, IAM, architecture, risk and compliance teams.
• Produce security evidence, governance documentation and operational procedures.
• Provide technical leadership, training and knowledge transfer to engineering and security teams.

Essential Skills and Experience

• Extensive experience delivering Apigee X solutions in enterprise production environments.
• Strong hands-on experience with Apigee API hub and Advanced API Security.
• Deep understanding of API governance, API cataloguing, metadata management and life cycle controls.
• Experience implementing API security profiles, risk assessment, abuse detection and API monitoring.
• Strong knowledge of API authentication and authorisation using OAuth 2.0, OIDC, JWT and mTLS.
• Experience with Apigee policies including VerifyAPIKey, OAuthV2, SpikeArrest, Quota and threat protection.
• Strong understanding of GCP IAM, service accounts, API security and access management.
• Experience developing API security standards, governance processes and reusable security controls.
• Ability to translate complex technical security requirements into practical operational procedures.
• Experience working with enterprise security, compliance and architecture stakeholders.
• Strong technical documentation, stakeholder management and knowledge-transfer skills.

Desirable Experience

• Experience implementing API governance within banking or financial services.
• Knowledge of Terraform and CI/CD deployment automation.
• Experience with Dynatrace, Google Cloud Operations or SIEM tooling.
• Experience supporting API migrations or platform modernisation programmes.
• Google Cloud or Apigee certification.