AI Gateway Engineer, Data Mesh and AI Platforms team

Nordea; Helsinki; Hybrid; EUR 80,000 - 120,000; Full time

Job summary

Nordea is modernizing its technology and data estate and seeks an engineer to design, build, and operate the enterprise AI Gateway. You will extend API platforms to support LLM, MCP, and A2A patterns, with automation to ensure reliability and production-readiness.

The role emphasizes hands-on platform engineering, Terraform, CI/CD, OpenAPI specs, IdP integration, and observability—working with architects, security, risk, and compliance in a regulated banking environment.

Qualifications

• Bachelor’s or Master’s degree in CS/Engineering or equivalent practical experience.
• Hands-on experience designing, configuring, and operating API platforms and gateways in enterprise environments.
• Experience with gateway platforms such as Kong, IBM API Connect/DataPower, cloud-native gateways, or similar API management tech.
• Solid knowledge of Terraform and infrastructure‑as‑code practices.
• Experience with Kubernetes and Helm charts for deploying gateway components.
• Strong CI/CD, source control workflows, and automated release practices.
• Solid Python and Lua skills for Kong plugin development.
• Experience with IdP integration, authentication, authorization, and access control patterns for gateways.
• Familiarity with logging/monitoring tools like Splunk, Prometheus, Grafana; FinOps concepts.
• Experience with OpenAPI specs, API contracts, gateway policies, and developer-facing docs.
• Ability to collaborate with architects, security, risk, compliance and engineering in regulated environments.

Responsibilities

• Design, build and operate AI Gateway capabilities using robust API platform practices.
• Implement secure, reusable gateway patterns for LLM access, MCP, and A2A integrations.
• Develop infrastructure-as-code with Terraform and automate provisioning of gateway components.
• Improve CI/CD pipelines, source control workflows, and release practices for gateway configurations.
• Set up and automate gateway policies to expose AI capabilities in a governed, developer-friendly way.
• Create/extend Kong plugins using Lua and Python for gateway capabilities.
• Integrate AI Gateway with enterprise IdP and support authentication/authorization/access control patterns.
• Establish logging, monitoring, and alerting with observability dashboards using Splunk, Prometheus, Grafana.
• Develop FinOps for AI Gateway including cost visibility and usage governance.
• Assist onboarding of new use cases and contribute to platform docs and templates.

Skills

Platform engineering

API gateways

Terraform

CI/CD

Source control

IdP integration

Observability

Kubernetes

Helm charts

Python/Lua

Education

BSc or MSc in CS/Engineering or related

Tools

Kong

DataPower

OpenAPI

Git

Terraform

Kubernetes

Helm

Splunk

Prometheus

Grafana

Job description

Welcome to Group Technology, where we pride ourselves on engineering solutions and leading Nordea's transformation by providing a holistic technological view and structured understanding of the bank and its surrounding environment to enable the Customer Vision and Business Strategy.

As part of Nordea's 2030 strategic direction, we are modernizing our technology and data estate while accelerating the adoption of AI-enabled capabilities across the bank. We are looking for an engineer to help design, build, and operate our enterprise AI Gateway. This is a hands‑on engineering role focused on extending our API platforms to support LLM, MCP, and A2A patterns, with the automation needed to make these capabilities reliable, reusable, and production‑ready.

About Our Team

The Data Mesh and AI Platforms team is part of the Integration and AI unit. We provide the integration platforms that connect Nordea, including Kong and Kafka, and we are now extending that same platform approach to an AI Gateway covering LLMs, MCP, and A2A. You will help engineer the gateway capabilities, infrastructure automation, and reusable patterns that allow teams to consume AI services securely and consistently in a regulated banking environment.

The team works closely with architects, cybersecurity, data governance, risk and compliance, cloud platform teams, and consuming engineering teams to ensure our solutions are pragmatic, compliant, and production‑ready. You will be expected to bring strong hands‑on engineering experience with API platforms and gateways, combined with solid knowledge of Terraform, CI/CD, OpenAPI specifications, source control practices, IdP integration, observability, monitoring, and FinOps.

This is a full‑time permanent position with a hybrid working arrangement—up to 40% remote work is possible, but full remote work is not allowed. We expect to hire in one of these cities: Gdańsk or Gdynia, Poland; Copenhagen, Denmark; or Helsinki, Finland.

Your main responsibilities will include, but are not limited to:

• Design, build and operate AI Gateway capabilities based on strong API platform and gateway engineering practices.
• Implement secure and reusable gateway patterns for LLM access, MCP servers, and A2A agent‑to‑agent integrations.
• Develop and maintain infrastructure‑as‑code using Terraform and support automated provisioning of gateway components.
• Build and improve CI/CD pipelines, source control workflows, and release practices for gateway configuration and platform changes.
• Set up and automate gateway policies to expose AI capabilities in a consistent, governed, and developer‑friendly way.
• Create and extend Kong plugins using languages such as Lua and Python to support custom gateway capabilities and integrations.
• Integrate the AI Gateway with enterprise identity providers and support authentication, authorization, and access control patterns.
• Set up logging, monitoring and alerting for gateway services, including observability dashboards & operational insights using tools such as Splunk, Prometheus, and Grafana.
• Establish FinOps capabilities for AI Gateway usage, including cost visibility, consumption tracking, and support for cost control mechanisms.
• Support onboarding of new use cases onto the AI Gateway and contribute to platform documentation, reusable templates, and engineering standards.

Who You Are

This is the right role for you if you:

• Are a strong platform engineer: You have hands‑on experience designing, configuring, and operating API platforms and gateways in enterprise environments.
• Are comfortable with modern engineering and operational practices: You have solid knowledge of Terraform, CI/CD, source control, IdP integration, monitoring, alerting, and automated deployment patterns.
• Understand AI integration patterns: You have, or are motivated to build, knowledge of LLM access patterns, MCP, A2A, and how these can be secured and governed through gateway capabilities across cloud‑native AI stacks.

What w're looking for:

• Education and Experience:
  • A BSc or MSc in Computer Science, Engineering, Business Informatics, or a related discipline, or equivalent practical experience.
  • Professional experience as a Platform Engineer, API Gateway Engineer, DevOps Engineer, Platform Architect, or similar hands‑on engineering role.
• Required qualifications:
  • Strong hands‑on experience with API platforms and gateway technologies in enterprise environments.
  • Experience with gateway platforms such as Kong, IBM API Connect/DataPower, cloud‑native gateways, or similar API management technologies.
  • Solid knowledge of Terraform and infrastructure‑as‑code practices.
  • Experience with Kubernetes and Helm charts for deploying and managing platform or gateway components.
  • Solid knowledge of CI/CD pipelines, source control workflows, and automated release practices.
  • Solid knowledge of Python and Lua for creating, extending, and maintaining Kong plugins.
  • Solid knowledge of IdP integration, authentication, authorization, and access control patterns for gateways.
  • Experience setting up logging, monitoring, and alerting, including work with observability tools such as Splunk, Prometheus, and Grafana.
  • Understanding of FinOps practices, including cost visibility, consumption tracking, and guardrails for platform usage.
  • Experience working with OpenAPI specifications, API contracts, gateway policies, and developer‑facing platform documentation.
  • Ability to work closely with architects, security, risk, compliance, and engineering teams in a regulated environment.
• Preferred qualifications:
  • Experience with Kong API/AI Gateway specifically.
  • Experience deploying gateways to cloud platforms such as AWS, Azure, or GCP.
  • Familiarity with cloud platforms such as AWS, GCP, or Azure and cloud‑native AI services such as Bedrock, AWS Agent Core, Google Gemini AI, or Azure AI Foundry.

Next steps

We reserve the right to reply only to selected applications.

Only for candidates in Finland:

A security clearance will be performed for the person selected for this position.

Only for candidates in Poland:

In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp.
The administrator of your personal data is: Nordea Bank Abp operating in Poland through its Branch, address: Aleja Edwarda Rydza Śmiglego 20, 93-281 Łodź. Your personal data will be processed for the recruitment processes in Nordea Bank Abp. You have a right to access your personal data, right to rectify and right to delete. Disclosing the personal data in the scope specified by the provisions of Polish Labour Code from 26 June 1974 and executive acts are mandatory. Providing personal data is necessary to conduct the recruitment processes. The request for the deletion of your personal data means resignation from further participation in recruitment processes and causes the immediate removal of your application. Detailed information concerning processing of your personal data can be found at: nordea.com/en/doc/nordea-privacy-policy-for-applicants.pdf.