Job Description
Summary:
Axos Bank is hiring a Senior Apigee Engineer to support and grow the bank's API gateway platform. Day to day, you will assist with API setup, shared components, security policies, environments, platform administration, and the release process.
This is a hands-on individual-contributor role. You will work with Infrastructure, Network, and Security, and with the engineering teams that build on the platform, contributing to the technical direction of the gateway and supporting the engineers who use it.
This is an onsite position that can sit at any of our Axos office locations. Remote or hybrid work is not available.
Responsibilities:
- Own the Apigee X platform: API proxies, shared flows, policies, environments, deployments, and day-to-day operations
- Document the platform: architecture, standards, and runbooks
- Define and enforce proxy standards: structure, naming, versioning, deprecation, error handling, and reusable shared flows
- Manage the supporting pieces with Infrastructure and Network: DNS, certificates, TLS, and environment configuration
- Implement gateway security: OAuth 2.0 and OIDC, JWT validation, mTLS, quota and spike arrest, and threat protection
- Define risk tiers and approval gates for API changes in a regulated environment, and support audit and examination
- Build and maintain CI/CD pipelines and promotion gates for proxy and policy artifacts
- Monitor platform health and API performance; define SLOs, alerts, and runbooks; lead root-cause analysis for gateway incidents
- Onboard consuming teams and advise them on API design
- Route LLM API traffic through the gateway with provider abstraction, failover, authentication, rate limiting, and logging
- Apply AI safety controls (prompt-injection defense, PII detection and redaction, response filtering) using Model Armor or an equivalent
- Establish patterns for exposing MCP servers and tools to internal agents through the gateway, with the same authentication and audit controls
Requirements:
- Bachelor's degree in related field required
- 5+ years of enterprise API architecture or engineering experience, including hands-on ownership of Apigee (X or Edge)
- Experience working with cloud platforms, especially Google Cloud (IAM, VPC, and networking)
Preferred:
- LLM API integrations shipped to production (OpenAI, Anthropic, Vertex AI, AWS Bedrock, or similar)
- Deep API security experience: OAuth 2.0, OIDC, mTLS, and JWT, including delegated-access patterns for AI agents
- MCP server design and governance; Model Armor or comparable AI safety controls
- CI/CD and Terraform for gateway artifacts; Python, Java, or Node.js
- Familiarity with GLBA and model risk guidance (SR 11-7) as they apply to AI
- Experience in financial services or another regulated industry
- Apigee or Google Cloud certification
Axos Employee Benefits May Include:
- Medical, Dental, Vision, and Life Insurance
- Paid Sick Leave, 3 weeks' Vacation, and Holidays (about 11 a year)
- HSA or FSA account and other voluntary benefits
- 401(k) Retirement Saving Plan with Employer Match Program and 529 Savings Plan
- Employee Mortgage Loan Program and free access to an Axos Bank Account with Self-Directed Trading