APIM Engineer

The Role

Our financial services client is in the midst of an enterprise-wide migration to Azure cloud, and this role sits on the team responsible for onboarding internal application teams onto Azure API Management (APIM). This is a hands-on engineering role, not a platform-architecture role: the day-to-day is centered on taking onboarding tickets, working directly with requesting teams, configuring Terraform, and coordinating with security and networking to get APIs live across environments.

Key Responsibilities

Onboard internal teams to Azure APIM: review OpenAPI/Swagger specifications, manually configure and submit Terraform, validate connectivity, and troubleshoot issues.

Manage the full onboarding lifecycle across environments (development, cert/QA, and production), picking up a new onboarding ticket once the prior one is live.

Configure and troubleshoot authentication/authorization at the gateway layer using OAuth 2.0, OpenID Connect, and JWTs (currently supporting OIDC and Entra, with Azure AD/Entra onboarding underway).

Submit and manage networking and firewall requests through ServiceNow (source/destination IP configuration, etc.) in support of onboarding work.

Monitor, debug, and optimize API performance using Azure Monitor, Application Insights, and Log Analytics.

Escalate and coordinate with dedicated security and networking teams when onboarding issues require specialist support.

Collaborate with architects, developers, business analysts, and stakeholders throughout the onboarding process.

Work within a Kanban-based Agile process, tracking work in Jira and documenting in Confluence.

Requirements

5+ years of experience designing, developing, or supporting APIs in enterprise environments, with strong Azure networking and API gateway fundamentals.

Strong knowledge of RESTful APIs, OpenAPI/Swagger specifications, and API design best practices.

Practical, working knowledge of OAuth 2.0, OpenID Connect, and JWTs specifically how tokens are validated and enforced at the API gateway (deep identity/cryptography engineering is not required).

Hands-on experience with Terraform for infrastructure configuration and deployment (required).

Experience with GitLab CI/CD pipelines and Git for source control (required).

Working knowledge of enterprise networking concepts, including firewall/access requests (e.g., source/destination IP configuration).

Experience with Azure Monitor, Application Insights, and Log Analytics for monitoring, troubleshooting, and performance optimization.

Comfortable operating in a Kanban-based Agile environment; experience with Jira and Confluence.

Strong analytical, problem-solving, and communication skills, with the ability to work directly with application teams, security, and networking.

Mid-to-senior level candidate who can operate independently from day one this is not a role for a junior developer/engineer or someone expected to learn the stack on the job.

Preferred Qualifications

Hands-on experience with Azure API Management (APIM) itself API publishing, policy management (authentication, transformation, throttling, caching, routing), versioning, product management, and developer portals.

Familiarity with microservices architecture and container-based deployments (Docker, Kubernetes, Helm).