Middleware WSO2 API Management Services Engineer, AVP

About the role

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

Responsibilities

• Utilize the software development skillsets in a unique way to deliver stable and strategic automation solutions, enabling software capabilities across MUFG Bank N.A.
• Deliver a world-class API Platform for commercial and transaction banking to enable the bank's competitive market position.
• Participate in the Resetting the technology backbone 'R' effort, a multi-year initiative that implements a scalable, secure, compliant, and efficient technology platform; enables the Technology organization to be 'fit for growth'; drives a step-change reduction in technology operating costs; increases speed-to-market; minimizes residual risk; and ensures security and compliance.
• Be accountable for Software development, R&D and operations in support of the Enterprise Integration Platform at MUFG.
• Work closely across the Cloud Transformation Organization, Enterprise Architecture, Security, Engineering and Operations organizations to deliver next generation capabilities in an operationally stable software defined ecosystem to MUFG and its customers.
• Serve as a point of escalation for all operational issues and critical events related to the Enterprise Integration Platform.
• Train the staff, develop standard operating procedures and write knowledge articles.
• Contribute to the automation roadmap and strategy to improve policy driven automated operations while adhering to the industry best practices and infrastructure-as-code principles.
• Provide architecture guidance, best practices, and technology recommendations to ensure a resilient, secure, and cost-effective enterprise API ecosystem on AWS.
• Automate API platform provisioning and policy enforcement using infrastructure as code tools such as CloudFormation, Terraform, and CI/CD pipelines.
• Integrate AWS API solutions with enterprise identity providers and access management platforms such as PingFederate, PingID, and similar SSO technologies.
• Mentor and train the current team on AWS API Gateway, AWS integration patterns, API security, observability, and related platform engineering practices.

Requirements

• A minimum of 5 years of experience with large scale mission critical and production scale platforms at an Enterprise or service provider.
• Strong hands-on experience designing, implementing, and operating AWS API Gateway-based enterprise API platforms; familiarity with WSO2 API Manager is a plus.
• Independent judgment, technical problem solving, analytical and decision-making strength.
• Excellent interpersonal, oral and written communication skills.
• Self-starter with strong teamwork abilities and customer service skills.
• Experience working in a Scrum methodology including the Atlassian stack (Jira/Confluence).

Qualifications

• A minimum of 5 years of experience with large scale mission critical and production scale platforms at an Enterprise or service provider.
• Deep expertise in AWS API Gateway including REST APIs, HTTP APIs, WebSocket APIs, custom domains, usage plans, stages, throttling, caching, and deployment strategies.
• Strong experience designing secure, scalable API architectures on AWS using API Gateway, Lambda, ECS/EKS, ALB/NLB, and private integrations.
• Hands-on expertise with API authentication and authorization patterns in AWS including IAM, Cognito, Lambda authorizers, OAuth2, JWT, and mutual TLS.
• Experience implementing API lifecycle controls such as throttling, quota management, rate limiting, access policies, WAF integration, and multi-environment promotion on AWS.
• Strong troubleshooting skills across AWS API Gateway, CloudWatch, X-Ray, networking, integrations, and downstream services in production environments.
• Experience with API logging, telemetry, and operational data management using CloudWatch, S3, and related AWS observability services.
• Familiarity with data classification, API governance, secrets handling, and secure management of sensitive data across AWS services.
• Experience with multi-account and multi-region AWS deployment models with best practices for resiliency, failover, disaster recovery, and infrastructure standardization.
• Experience automating API platform provisioning and policy enforcement using infrastructure as code tools such as CloudFormation, Terraform, and CI/CD pipelines.
• Experience integrating AWS API solutions with enterprise identity providers and access management platforms such as PingFederate, PingID, and similar SSO technologies.
• In-depth knowledge of OAuth2, various grant types, JWT/OAuth tokens, API threat protection, and API security best practices.
• In-depth knowledge of distributed tracing and observability, including setup and configuration of tools such as AWS X-Ray, Dynatrace, and CloudWatch for end-to-end API tracing.
• Strong experience with AWS integration services such as Lambda, Step Functions, EventBridge, SQS, and SNS to build scalable integration patterns and event-driven workflows.
• Expertise in translating business requirements into well-governed API products, backend integrations, and transformation patterns across cloud-native services.
• Expertise in working with container platforms such as OpenShift 4.x, Kubernetes 1.17 or higher, and AWS-native deployment environments.
• Familiarity with Splunk and its integrations, including ingestion of AWS platform and API telemetry.
• Experience working with Spring Boot, Java, microservices, Docker, REST, SOAP, Postgres, CI/CD, Bitbucket, Azure DevOps, and cloud-native API delivery patterns.
• Deep hands-on experience with AWS services including API Gateway, Lambda, EC2, S3, EFS, IAM, VPC, Security Groups, Availability Zones, Route 53, CloudWatch, WAF, and related networking and security constructs.

Skills

• AWS certifications related to architecture, networking, or security are strongly preferred.
• WSO2 certifications are nice to have.

Benefits

The typical base pay range for this role is between $112K - $137K depending on job-related knowledge, skills, experience and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below. MUFG Benefits Summary