Senior Apigee Engineer
axos bankDenver (CO)
About the role
Summary:
Axos Bank is hiring a Senior Apigee Engineer to support and grow the bank’s API gateway platform. Day to day, you will assist with API setup, shared components, security policies, environments, platform administration, and the release process. This is a hands-on individual-contributor role. You will work with Infrastructure, Network, and Security, and with the engineering teams that build on the platform, contributing to the technical direction of the gateway and supporting the engineers who use it. This is an onsite position that can sit at any of our Axos office locations. Remote or hybrid work is not available.
Responsibilities:
- Own the Apigee X platform: API proxies, shared flows, policies, environments, deployments, and day-to-day operations
- Document the platform: architecture, standards, and runbooks
- Define and enforce proxy standards: structure, naming, versioning, deprecation, error handling, and reusable shared flows
- Manage the supporting pieces with Infrastructure and Network: DNS, certificates, TLS, and environment configuration
- Implement gateway security: OAuth 2.0 and OIDC, JWT validation, mTLS, quota and spike arrest, and threat protection
- Define risk tiers and approval gates for API changes in a regulated environment, and support audit and examination
- Build and maintain CI/CD pipelines and promotion gates for proxy and policy artifacts
- Monitor platform health and API performance; define SLOs, alerts, and runbooks; lead root-cause analysis for gateway incidents
- Onboard consuming teams and advise them on API design
- Route LLM API traffic through the gateway with provider abstraction, failover, authentication, rate limiting, and logging
- Apply AI safety controls (prompt-injection defense, PII detection and redaction, response filtering) using Model Armor or an equivalent
- Establish patterns for exposing MCP servers and tools to internal agents through the gateway, with the same authentication and audit controls
Requirements:
Bachelor's degree in related field required 5+ years of enterprise API architecture or engineering experience, including hands-on ownership of Apigee (X or Edge) Experience working with cloud platforms, especially Google Cloud (IAM, VPC, and networking)
Preferred:
LLM API integrations shipped to production (OpenAI, Anthropic, Vertex AI, AWS Bedrock, or similar) Deep API security experience: OAuth 2.0, OIDC, mTLS, and JWT, including delegated-access patterns for AI agentsMCP server design and governance; Model Armor or comparable AI safety controlsCI/CD and Terraform for gateway artifacts; Python, Java, or Node.jsFamiliarity with GLBA and model risk guidance (SR 11-7) as they apply to AIExperience in financial services or another regulated industry Apigee or Google Cloud certification Axos Employee Benefits May Include: Medical, Dental, Vision, and Life Insurance Paid Sick Leave, 3 weeks’ Vacation, and Holidays (about 11 a year)HSA or FSA account and other voluntary benefits 401(k) Retirement Saving Plan with Employer Match Program and 529 Savings Plan Employee Mortgage Loan Program and free access to an Axos Bank Account with Self-Directed Trading
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.