Service Delivery Center - Apigee Platform Engineer - Senior

About the role

Organizations are modernizing how they connect applications, data and digital services, and reliable API platforms are central to that transformation. As an APIGEE Platform Engineer, you will help create the secure, automated and resilient platform foundation that enables enterprise APIs to perform at scale across cloud, hybrid and on-premises environments. You will join a multidisciplinary team supporting the build, operation and continuous improvement of enterprise Apigee environments. This role brings together API management, Kubernetes, cloud infrastructure, DevOps automation, security and production operations. You will collaborate with platform architects, API developers, cloud engineers, network and security teams, and operations support teams to maintain stable runtimes, reliable deployments, strong observability and effective support across platform growth and migration programs. The role is designed for professionals with four to eight years of relevant experience, with the scope and level of ownership aligned to individual experience.

Responsibilities

• Build and configure Apigee organizations, environments, environment groups, hostnames, target servers, KVMs, shared flows, products, developers, apps and runtime settings in line with approved platform designs.
• Support Apigee X, Apigee hybrid and other approved enterprise deployment patterns, including environment setup across development, testing, UAT, performance, production and disaster recovery environments.
• Operate and troubleshoot Apigee hybrid runtimes on Kubernetes platforms such as GKE, EKS and AKS, including namespaces, pods, deployments, services, ingress, secrets, config maps, RBAC, autoscaling and health monitoring.
• Build and maintain CI/CD and APIOps pipelines for proxies, shared flows, environment configuration and platform promotion using management APIs, Maven, scripting, Git-based workflows and approved DevOps tools.
• Support networking and connectivity requirements, including DNS, hostnames, load balancers, routing, firewall rules, private connectivity, TLS and mTLS certificate configuration and validation.
• Apply security and access controls across Apigee, cloud IAM, Kubernetes RBAC, CI/CD service accounts, secrets management and gateway policies such as OAuth, JWT, API key validation, quota, spike arrest and threat protection.
• Configure logs, metrics, alerts, dashboards and analytics; troubleshoot deployment, runtime, traffic, certificate and backend connectivity issues; and contribute to incident response, root-cause analysis and production readiness.
• Support IBM API Connect and DataPower to Apigee migration waves through environment readiness, policy availability, routing, cutover, rollback validation, release support and hypercare.
• Maintain platform documentation, deployment evidence, validation checklists, SOPs, runbooks, known-error articles and support transition materials.

Requirements

• A minimum of four years of relevant experience in Apigee platform administration, implementation, API gateway operations, DevOps or related platform engineering work.
• Hands-on experience with Apigee proxies, shared flows, products, apps, environments, policies, analytics and management APIs.
• Kubernetes operations experience covering pods, deployments, services, ingress, namespaces, secrets, config maps, RBAC, autoscaling, logging and troubleshooting.
• Cloud platform exposure in GCP, AWS, Azure or hybrid/on-premises environments, including networking, IAM, load balancing, DNS and security fundamentals.
• CI/CD implementation experience using tools such as Azure DevOps, GitHub Actions, Jenkins, GitLab CI, Maven, shell scripting, Python or equivalent automation technologies.
• Knowledge of API security, TLS/mTLS, certificates, OAuth2, JWT, API keys, rate limiting, quota, spike arrest and threat protection.
• Experience with observability, production support, Linux, networking, YAML/JSON, Git, REST APIs, troubleshooting and technical documentation.

Qualifications

• Experience installing, upgrading or troubleshooting Apigee hybrid runtimes.
• Exposure to Terraform, Helm, Kustomize, Ansible or GitOps for platform provisioning and configuration management.
• Awareness of IBM API Connect or DataPower migration patterns, including API products, catalogs, policies, GatewayScript, XSLT and SOAP/XML.
• Experience with DevSecOps or vulnerability scanning tools, regulated or multi-cloud environments, disaster recovery validation, capacity planning or platform resiliency testing.
• A relevant Apigee, Google Cloud, Kubernetes, Terraform, cloud, DevOps, security or Linux certification. Equivalent practical experience will also be valued.

Skills and attributes for success

You will succeed in this role by combining hands-on platform engineering with disciplined troubleshooting, automation and documentation. You should be comfortable working across development and operations teams, translating technical dependencies into practical actions, and maintaining quality during releases, incidents and migration activity.

What we look for

We are looking for a practical, collaborative engineer who takes ownership, works methodically and remains composed when resolving complex platform issues. Top performers bring curiosity, sound judgment and a continuous-improvement mindset. They communicate clearly across technical and nontechnical teams, document their work thoughtfully, build repeatable solutions and balance delivery speed with security, stability and operational discipline. At the more senior level, they are also comfortable leading platform activities, improving automation, supporting cutovers, mentoring colleagues and contributing to architecture and readiness decisions.

Benefits

• Medical and dental coverage
• Pension and 401(k) plans
• Wide range of paid time off options
• Flexible vacation policy — you decide how much vacation time you need based on your own personal circumstances
• Designated EY Paid Holidays
• Winter/Summer breaks
• Personal/Family Care leave
• Other leaves of absence when needed to support physical, financial, and emotional well-being

Pay

The base salary range for this job is:

• New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $80,300 to $149,100
• Bay Area California offices – $83,700 to $155,300
• All other offices locations in the US, including Sacramento – $67,000 to $136,800

Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography.