Senior Java & Axway API Gateway Developer

Trinity-Consulting-Services-Pte.-Ltd.; Singapore; On-site; SGD 120,000 - 170,000; Full time

Job summary

Trinity-Consulting-Services-Pte.-Ltd. is seeking a seasoned API security expert with hands-on experience in Axway API Gateway and related tools. The role focuses on securing API ecosystems, implementing OAuth 2.0 flows, JWT handling, and threat protection. The candidate will contribute to design, deployment, and ongoing security operations.

Expertise in SSL/TLS, mTLS, PKI, and OWASP API Security Top 10 is essential, with strong OT/Incident management skills to maintain resilient API services.

Qualifications

• 6+ years of experience in Java development and API technologies.
• Proficient in Java, Microservices, REST APIs, Maven, Git/Bitbucket, and CI/CD pipelines.
• Experience in API design, development, deployment, and production support.
• Strong troubleshooting and incident management skills.

Skills

Java development

API technologies

Troubleshooting

Incident management

Production support

Tools

Axway API Gateway

Policy Studio

API Manager

Maven

Git/Bitbucket

CI/CD pipelines

Job description

KeySkills & Experience

• 6+ years of experience in Java development and API technologies.
• Strong hands-on experience with Axway API Gateway, Policy Studio, API Manager, and .FED deployments.
• Proficient in Java, Microservices, REST APIs, Maven, Git/Bitbucket, and CI/CD pipelines.
• Experience in API design, development, deployment, and production support.
• Strong troubleshooting and incident management skills.

APISecurity Expertise (Mandatory)

• Deep understanding of OAuth 2.0, including Client Credentials, Authorization Code, JWT Bearer, and Refresh Token flows.
• Strong knowledge of JWT token generation, validation, claims, signing, and encryption.
• Hands-on experience implementing and managing API security policies within Axway API Gateway.
• Experience with PGP encryption/decryption, digital signatures, key management, and certificate handling.
• Good understanding of SSL/TLS, mTLS, PKI, OAuth, OpenID Connect, and API threat protection.
• Knowledge of OWASP API Security Top 10 and enterprise API security best practices.