Senior Java & Axway API Gateway Developer

trinity consulting services pte. ltd.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Trinity Consulting Services Pte. Ltd. is seeking an experienced Java/API security specialist with 6+ years in Java development and API design.

The role focuses on building and securing APIs using Axway API Gateway, Policy Studio, and API Manager, with strong knowledge of OAuth 2.0, JWT, and PKI. You will contribute to production deployments and incident response. The ideal candidate will have hands-on experience with API security policies, OAuth/OpenID Connect, and modern threat

Qualifications

• 6+ years of experience in Java development and API technologies.
• OAuth 2.0 and API security expertise mandatory.
• JWT token generation, validation, claims, signing, and encryption.
• Hands-on with API security policies and Axway API Gateway deployments.

Skills

Java development

API technologies

Microservices

REST APIs

CI/CD pipelines

Tools

Axway API Gateway

Policy Studio

API Manager

Maven

Git/Bitbucket

Job description

KeySkills & Experience

• 6+ years of experience in Java development and API technologies.
• Strong hands-on experience with Axway API Gateway, Policy Studio, API Manager, and .FED deployments.
• Proficient in Java, Microservices, REST APIs, Maven, Git/Bitbucket, and CI/CD pipelines.
• Experience in API design, development, deployment, and production support.
• Strong troubleshooting and incident management skills.

APISecurity Expertise (Mandatory)

• Deep understanding of OAuth 2.0, including Client Credentials, Authorization Code, JWT Bearer, and Refresh Token flows.
• Strong knowledge of JWT token generation, validation, claims, signing, and encryption.
• Hands-on experience implementing and managing API security policies within Axway API Gateway.
• Experience with PGP encryption/decryption, digital signatures, key management, and certificate handling.
• Good understanding of SSL/TLS, mTLS, PKI, OAuth, OpenID Connect, and API threat protection.
• Knowledge of OWASP API Security Top 10 and enterprise API security best practices.