API Platform Owner

About the role

At Axos, we're building the next generation of banking technology. The API Platform Owner will lead the strategy, governance, and evolution of our enterprise API platform while expanding its capabilities as a secure AI gateway.

Responsibilities

• Design and operate a comprehensive API and AI gateway governance framework on Apigee X, covering REST/SOAP services, LLM proxies, and MCP servers under a single policy plane
• Own governance of the platforms and of the AI solutions and workloads built on them — define and enforce solution standards, risk tiering, approval and promotion gates, observability requirements, and compliance attestation, holding consuming engineering teams accountable to them
• Develop enterprise-wide API and AI consumption strategy, including model routing, token-aware rate limiting, semantic caching, and cost-attribution for LLM workloads
• Establish MCP server governance patterns — auth (OAuth/Entra ID), audit, rate limiting, and policy enforcement on every MCP tool call exposed to internal AI agents or external consumers
• Implement AI safety controls for prompt-injection defense, PII detection/redaction, jailbreak detection, and response filtering
• Create LLM API design standards covering provider abstraction (Vertex AI, Anthropic, OpenAI, Bedrock), failover, prompt/response logging, and red-team evaluation
• Design scalable microservices and AI-agent integration architectures, including agent-to-tool and agent-to-API interaction patterns through the gateway
• Partner with the Center of Excellence (CoE) to define citizen developer and AI agent enablement patterns that route all programmatic AI access through the governed gateway
• Actively contribute to technical implementation across Apigee X proxies, shared flows, Model Armor templates, and MCP server integration when team resources are constrained

Requirements

• 5+ years enterprise API architecture experience, with at least 1+ years on Apigee X or another AI-capable gateway
• Apigee platform knowledge — proxies, shared flows, policy chains, environments, and integration with Google Cloud services
• Demonstrated experience designing, deploying, or governing LLM API integrations (OpenAI, Anthropic, Vertex AI, AWS Bedrock, or equivalent) in a production environment
• Familiarity with the Model Context Protocol (MCP) — server implementation patterns, tool/resource exposure, transport options (stdio, HTTP/SSE), and authentication models
• Proven track record of cross-functional delivery
• Experience in Python, Java, or Node.js, with the ability to read and modify Apigee policy XML/JavaScript and to prototype LLM client and MCP server code
• Experience in microservices and cloud architecture, particularly on Google Cloud (Apigee X, Vertex AI, IAM, VPC)
• Advanced understanding of OAuth, OIDC, mTLS, JWT, and API security protocols, including how these apply to AI agent authentication and delegated access
• Experience with CI/CD pipeline design for API proxies and policy artifacts, with promotion gates suitable for AI-impacting changes
• Financial services technology background with familiarity in BSA, GLBA, CCPA, and model risk management (SR 11-7) considerations as they extend to GenAI
• Hands-on experience with Apigee X AI/ML proxy patterns, Model Armor configuration, and Vertex AI integration
• Experience building or deploying MCP servers in production, including governance over which tools/resources are exposed to which agent identities
• Familiarity with LLM evaluation, prompt management, and red-teaming workflows
• Advanced understanding of API management governance experience across hybrid traditional and AI workloads
• DevOps and infrastructure-as-code expertise (Terraform, Apigee deployment tooling, GitHub Actions or equivalent)

Preferred Skills

• Financial services technology background with familiarity in BSA, GLBA, CCPA, and model risk management (SR 11-7) considerations as they extend to GenAI
• Hands-on experience with Apigee X AI/ML proxy patterns, Model Armor configuration, and Vertex AI integration
• Experience building or deploying MCP servers in production, including governance over which tools/resources are exposed to which agent identities
• Familiarity with LLM evaluation, prompt management, and red-teaming workflows
• Advanced understanding of API management governance experience across hybrid traditional and AI workloads
• DevOps and infrastructure-as-code expertise (Terraform, Apigee deployment tooling, GitHub Actions or equivalent)