Apigee API Engineer - Secure Proxies & Shared Flows

Pacer Group; Toronto; On-site; CAD 95,000 - 150,000; Full time

Job summary

Pacer Group is seeking an API-focused engineer to design, develop, and deploy API Proxies using Apigee Edge/X/Hybrid. You will build shared flows for logging, security, rate limiting, CORS, and fault handling across enterprise APIs, ensuring scalable, secure access.

The role requires implementing robust API security with OAuth 2.0, JWT, OIDC, SAML and API keys, plus crafting REST APIs with solid knowledge of HTTP methods, headers, status codes, and JSON/XML payloads.

Qualifications

• Experience designing, developing, and deploying API proxies using Apigee Edge/X/Hybrid.
• Experience creating shared flows for logging, security, rate limiting, CORS, and fault handling.
• Knowledge of API security protocols including OAuth 2.0, JWT, OIDC, SAML, API keys, and HMAC.
• Strong understanding of REST APIs, HTTP methods, headers, status codes, and JSON/XML payloads.
• Experience with API lifecycle management and ensuring high availability and performance.

Responsibilities

• Design, develop, and deploy API Proxies using Apigee Edge/X/Hybrid.
• Develop and maintain Shared Flows for logging, security, rate limiting, CORS, and fault handling.
• Implement API security using OAuth 2.0, JWT, OIDC, SAML, API Keys, HMAC, and Threat Protection.
• Design and consume REST APIs with knowledge of HTTP methods, headers, status codes, and payloads.
• Configure routing, conditional flows, and API lifecycle management for high availability and performance.
• Collaborate with cross-functional teams to deliver secure, reliable, enterprise-grade API solutions.

Skills

API design

API security

OAuth 2.0

JWT

OIDC

SAML

API keys

Threat protection

REST APIs

HTTP/JSON/XML

High availability

Tools

Apigee Edge/X/Hybrid

Job description

Pacer Group is seeking an API-focused engineer to design, develop, and deploy API Proxies using Apigee Edge/X/Hybrid. You will build shared flows for logging, security, rate limiting, CORS, and fault handling across enterprise APIs, ensuring scalable, secure access.

The role requires implementing robust API security with OAuth 2.0, JWT, OIDC, SAML and API keys, plus crafting REST APIs with solid knowledge of HTTP methods, headers, status codes, and JSON/XML payloads.