Gravitee API Management Engineer

Kairos Technologies Inc.; India; Hybrid; INR 1,200,000 - 2,100,000; Full time

Job summary

Kairos Technologies Inc. is seeking a Gravitee API Management Engineer to implement and maintain Gravitee APIM in a hybrid control-plane / on-prem gateway model.

You will debug policy chains, author Groovy and JavaScript policies, and manage dictionaries with shared policy groups. You will own API environment promotion across dev, test, and production using GitOps pipelines, including manifest management, branch controls, and rollback procedures, while working within a governed GitOps process

Qualifications

• Experience implementing Gravitee APIM in hybrid or on-prem environments.
• Hands-on policy authoring with Groovy/JavaScript and policy debugging.
• Strong knowledge of GitOps, ArgoCD, and Kubernetes-based deployments.

Responsibilities

• Implement and maintain Gravitee APIM in a hybrid control-plane / on-prem gateway model.
• Debug policy-chain, flow-matching, and promotion failures.
• Author Groovy/JavaScript policies; manage dictionaries and shared policy groups.
• Own API environment promotion across dev, test, prod using GitOps pipelines.
• Work within a governed GitOps process with no direct portal edits.
• Manage ArgoCD sync/reconciliation and Gravitee Kubernetes Operator lifecycle.
• Troubleshoot Kubernetes/OpenShift gateway runtime and resource tuning.
• Configure and troubleshoot API security: OAuth2, OIDC, JWT, TLS/certificates.
• Support GitHub Actions-based promotion pipelines and Kustomize/CRD management.

Skills

Gravitee APIM

GitOps

ArgoCD

Kubernetes

OpenShift

OAuth2

OIDC

JWT

Groovy scripting

JavaScript

Tools

Kustomize

CRD management

Gravitee APIM

Job description

Role & responsibilities

Gravitee API Management Engineer

• Implement and maintain Gravitee API Management in a hybrid control-plane / on-prem gateway model
• Debug Gravitee policy-chain, flow-matching, shared policy group, dictionary/configuration, and promotion failures
• Reconstruct and author Groovy and JavaScript policies; manage dictionaries and shared policy groups
• Own API environment promotion across dev, test, and production using GitOps pipelines, including manifest management, branch controls, and rollback/recovery procedures
• Work strictly within an existing governed GitOps process no direct portal edits
• Manage ArgoCD sync/reconciliation and GKO (Gravitee Kubernetes Operator) lifecycle
• Handle Kubernetes/OpenShift gateway runtime troubleshooting, pod-level diagnosis, and resource tuning
• Configure and troubleshoot API security: OAuth2, OIDC, JWT, IDCS/IAM integration, TLS/certificates
• Support GitHub Actions-based promotion pipelines and Kustomize/CRD management
• Follow shared-component ownership, review, and change-control expectations
• Gravitee APIM
  • Hands-on Gravitee APIM: API V4 definitions, plans, subscriptions, shared policy groups, dictionaries
  • Policy authoring and debugging: Groovy, JavaScript, flow-matching, policy-chain, dictionary/configuration, and promotion failures
  • Configuration-as-code patterns; promotion manifest management
• CI/CD & GitOps
  • ArgoCD sync/reconciliation; GKO lifecycle management
  • GitHub Actions-based API promotion pipelines (delta-aware)
  • Customize overlays and CRD management in multi-environment clusters
  • Branch controls, rollback/recovery expectations, and GitOps-only change discipline
• API Security
  • OAuth2, OIDC, JWT within Gravitee plan/subscription security schemes
  • IDCS/IAM integration; TLS certificate configuration and troubleshooting
• Kubernetes / OpenShift
  • Gateway runtime behaviour, pod-level and control-plane troubleshooting, and resource tuning
  • Hybrid Gravitee architecture: cloud control plane + on-prem gateways
  • Environment-specific deployment diagnosis across dev, test, prod

Preferred (Nice-to-Have)

• HashiCorp Vault: KV v2, AppRole auth, dynamic secret paths, CyberArk-to-Vault sync
• OpenTelemetry + Grafana observability; migration from Splunk-based logging
• Apigee-to-Gravitee migration experience (enterprise scale)
• Production support combining Gravitee, GitOps, Vault, Kubernetes/OpenShift, and shared platform dependencies