Senior Apigee Developer

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Toronto; Hybrid; CAD 110,000 - 150,000; Full time

Job summary

Astra-North Infoteck Inc. in Toronto is seeking a Senior Developer with strong Apigee Gateway experience to design and implement API proxies, security policies, and shared flows. You will collaborate across teams to deliver robust API solutions in a hybrid work environment requiring 2 days on-site.

The role emphasizes policy development (JavaScript, Python, Java callouts), OAuth 2.0, and API security, with a focus on scalable RESTful interfaces and reliable integrations.

Qualifications

• 3–6 years of hands-on experience with Apigee Edge or Apigee X/Hybrid.
• Solid knowledge of REST API design, HTTP methods, status codes, headers, and payload formats (JSON, XML).
• Experience with OAuth 2.0, OpenID Connect, SAML, JWT, and API key-based authentication.

Responsibilities

• Custom Policy Development – Build reusable Apigee policies (JavaScript, Python, Java callouts) for authentication, authorization, payload transformation, input validation, and error handling.
• Shared Flow Design – Architect and implement shared flows to standardize cross-cutting concerns (security, logging, rate limiting, CORS, fault handling) across API proxies.
• API Proxy Development – Design and deploy API proxies with proper policy attachment, conditional flows, route rules, and target endpoint configuration.
• Security Implementation – Enforce OAuth 2.0, API key verification, JWT validation, HMAC, threat protection (JSON/XML), and IP whitelisting via policies.

Skills

Apigee Gateway

REST API Design

OAuth 2.0

OpenID Connect

JWT

SAML

API Key Auth

Job description

Job Description: Role: Sr. Developer

Hybrid: 2 days on-site

Primary Skill: Apigee Gateway

Responsibility

• Custom Policy Development – Build reusable Apigee policies (JavaScript, Python, Java callouts) for authentication, authorization, payload transformation, input validation, and error handling.
• Shared Flow Design – Architect and implement shared flows to standardize cross-cutting concerns (security, logging, rate limiting, CORS, fault handling) across API proxies.
• API Proxy Development – Design and deploy API proxies with proper policy attachment, conditional flows, route rules, and target endpoint configuration.
• Security Implementation – Enforce OAuth 2.0, API key verification, JWT validation, HMAC, threat protection (JSON/XML), and IP whitelisting via policies.

Experience

• 3–6 years of hands‑on experience with Apigee Edge or Apigee X/Hybrid.
• Solid knowledge of REST API design, HTTP methods, status codes, headers, and payload formats (JSON, XML).
• Experience with OAuth 2.0, OpenID Connect, SAML, JWT, and API key‑based authentication.