INTEGRATION ENGINEER

Job Responsibilities

• Define integration patterns (API, event, file/MFT, messaging), reference architectures, and reusable components on WSO2 MI/Devant and WSO2 APIM/Bijira.
• Build Ballerina services and mediation flows; configure APIs, products, and policies in WSO2 APIM; implement connectors, retries, and error handling in WSO2 MI/Devant.
• Diagnose and resolve issues across gateway, runtime, network, and backend; implement observability, alerting, dashboards, and runbooks.
• Design and evolve APIM gateways and MI/Devant runtimes (HA, autoscaling, DR); plan control-plane and private data plane topologies; optimize ingress patterns on Kubernetes.
• Implement OAuth2/OIDC with Microsoft Entra, API key/HMAC, mTLS, JWKS caching; enforce data protection, secrets management (e.g., Key Vault/HashiCorp), and zero-trust principles.
• Define service principles, app registrations, token lifecycles, scopes/claims, key rotation, and least-privilege IAM models.
• Design REST/gRPC/GraphQL APIs; govern versioning, throttling, quotas, and developer portal configuration in WSO2 APIM.
• Align with Enterprise Architecture standards and define guardrails for performance, resiliency, security, and cost efficiency.
• Create Technology Impact Assessment (TIA) and design documents for integrations and API designs, review with internal stakeholders for approvals.
• Develop and maintain a high-level technical vision for API and integration systems.
• Implement WAF/rate limiting, DLP/masking, logging, and SIEM integration; ensure compliance with SOC2, PCI, GLBA, and internal InfoSec controls.
• Evaluate and manage WSO2 vendor capabilities, conduct POCs, and coordinate with vendor support and engineering teams.
• Collaborate with business and product owners to align solutions to requirements and obtain approvals.

Skills And Training

• WSO2: APIM (API Manager) / Bijira, MI (Micro Integrator) / Devant, Ballerina.
• Runtime/Platform: Kubernetes, containers, ingress/controllers, service mesh (optional).
• OS/Infra: Linux administration (networking, systemd, filesystems), container registries (ACR/ECR/GCR/Harbor) required for the middleware platform deployment and maintenance.
• Identity: Microsoft Entra (Azure AD) for OAuth2/OIDC/SAML, JWKS, app registrations.
• Messaging & Data: JMS/Kafka/RabbitMQ, MFT/SFTP, SQL/NoSQL.
• Observability & Security: LogicMonitor, Prometheus-Grafana, SecureWorks Taegis or equivalent SIEM, logs/metrics/traces.