Summary
✨ AI‑Generated
Work as a WSO2 API engineer responsible for API creation, versioning, catalog management, custom interfaces, lifecycle administration, throughput controls, and enterprise identity integration. You will operate across development, testing, staging, and production environments while implementing REST-based interfaces and modern authentication and provisioning standards.
Highlights
Specialized API engineering role with responsibility for the full API lifecycle, identity integration, platform administration, and performance controls. Offers hands-on work with enterprise authentication standards, cloud infrastructure, and multiple software environments.
Description
Responsibilities:
· Perform WSO2 API Manager lifecycle work: create and version APIs, maintain the catalog, build custom APIs, guide product teams, and manage throughput and rate limits.
· Administer the WSO2 platform other than the operating system.
Current modules to keep at N or N-1: API Manager 3.2.0, Identity Server 5.10.0, and Micro Integrator 4.3, on about 40 AWS Red Hat Enterprise Linux virtual machines in Dev, Sandbox, QA, UAT, Staging, and Production.
· Test WSO2 on lower and upper environments before and after Networking’s monthly Linux patch.
Do not patch the operating system or administer the virtual machines.
· Implement authentication, authorization, and provisioning into DIAMD (OKTA and SailPoint) using SAML 2.0, OAuth2 / OpenID Connect, and SCIM 2.0, routed through WSO2.
Tokens for OAuth2 are short-lived, scoped, and logged.
User-facing clients use authorization code with PKCE.
Service calls use client credentials.
· Default new interfaces to REST.
Version, authenticate, rate-limit, observe, and catalog them before production.
Support JSON, XML, SOAP, XSLT, HTTP, HTML, and JavaScript where the source or target requires it.
Do not add ODBC, JDBC, or FTP connectors.
· Secure data in transit with TLS 1.2 or higher and data at rest with OJP-approved encryption.
· Respond to help-desk tickets for products in this family.
Tier 1 application support and Tier 3 business-rule support stay with other contracts.
· Turn Status Cake availability signals (about 220 checks) and Splunk logs for these platforms into owned work.
This is not SOC operations.
· Write the API and microservice-transfer documentation future-state products need.
Current-state documentation stays minimal.
· Cross-train with the other API Engineer so vacation or departure does not stop the catalog.
Required qualifications:
· At least 5 years building and operating APIs in production, including a gateway or manager and not only application code.
· Production experience with API lifecycle, rate limiting, cataloging, and versioning.
· Implemented SAML, OAuth2 or OpenID Connect, and SCIM, or a close equivalent you can explain at the protocol level.
· Comfortable testing application behavior around an operating-system patch that another team applies.
· Able to obtain High Risk Public Trust (Tier 4) for WSO2 production administration and identity-API access.
Preferred qualifications:
· WSO2 API Manager, Identity Server, and Micro Integrator, including a version-upgrade while staying on N or N-1.
· OKTA, SailPoint, or Entra ID integration through a gateway.
· A high-traffic public API, on the order of millions of requests a month.
· AWS-hosted API infrastructure and Red Hat Enterprise Linux application troubleshooting that stops short of owning the OS patch.
· API management certification or equivalent depth.
