API Standards & Compliance Lead

Insight Global; Columbus (OH); On-site; USD 100,000 - 130,000; Full time

Job summary

Insight Global in Columbus, Ohio is seeking an experienced API Standards & Compliance Lead who will be responsible for defining, implementing, and enforcing enterprise-wide API governance frameworks.

This strategic role requires collaboration across teams to create API design standards, ensuring compliance and security. Candidates should have extensive API governance experience and be well-versed in design standards and regulatory requirements.

Qualifications

• 5+ years in API governance or platform leadership roles.
• Deep familiarity with OpenAPI, REST, GraphQL, and API lifecycle management.
• Hands-on experience with security standards (OAuth2, JWT, JWKS, mTLS).

Responsibilities

• Define and maintain API design and governance policies.
• Run the API Governance Board; author standards playbooks.
• Implement governance for security patterns and regulatory standards.

Skills

API governance

OpenAPI/Swagger

REST fundamentals

GraphQL design

OAuth2

GCP

DevSecOps

CI/CD automation

Education

5+ years in API governance roles

GCP certifications

Tools

Kong

MuleSoft

AWS API Gateway

Azure APIM

Apigee X

Ping Identity

Job description

Job Description

A client of Insight Global is seeking an experienced API Standards & Compliance Lead. As the API Standards & Compliance Lead, you will define, implement, and enforce enterprise-wide API governance frameworks that ensure consistency, security, and scalability across all APIs. This strategic role focuses on establishing API design standards, lifecycle governance, and compliance policies aligned with industry best practices and regulatory requirements. You will partner closely with Enterprise Architecture, Security, Platform Engineering, and Developer Experience teams to advance an API-first strategy and enable seamless integration across the enterprise. You will shape our client’s API strategy by balancing innovation with risk management—creating clear standards, operating models, and guardrails for API design, onboarding, publishing, versioning, and retirement. This role emphasizes policy, architecture, enablement, and oversight rather than hands‑on software development.

What You’ll Do

Governance Framework & Standards

Define and maintain enterprise-wide API design and governance policies aligned with architecture principles and industry standards (OpenAPI, REST, GraphQL).

Establish naming conventions, versioning guidelines, backward compatibility expectations, deprecation/retirement policies, and documentation standards.

Run the API Governance Board (reviews, approvals, waivers) and maintain the governance operating model and RACI.

Author and maintain reference architecture, standards playbooks, and reusable policy templates.

Lifecycle Governance & Platform Integration (Apigee X)

Design and oversee API onboarding workflows via the Developer Portal, ensuring proper documentation, cataloging, and discoverability.

Define governance processes integrated with Apigee X for publishing, runtime policies (e.g., quotas, rate limiting), and analytics.

Ensure consistent use of API products, proxies, and catalogs; promote high‑quality API definitions and reusability.

Security & Regulatory Compliance

Implement governance for security patterns (OAuth2, JWT, JWKS, mTLS) using Apigee X and Ping Identity.

Align APIs to regulatory requirements (e.g., Open Banking, PSD2, HIPAA, GDPR) and enterprise security standards.

Partner with Risk, Compliance, and Security Engineering to define control objectives, evidence, and auditability (e.g., NIST, ISO 27001, SOC 2).

Developer Experience & Enablement

Collaborate with the API Gateway and DevEx teams to optimize portal usability, API discoverability, and policy adoption.

Provide training, guidance, and office hours on governance best practices and standards for internal teams.

Create artifacts (cheat sheets, checklists, sample OpenAPI specs, policy catalogs) that accelerate compliant delivery.

Analytics, Metrics & Continuous Improvement

Define and track governance KPIs (e.g., % APIs compliant, time‑to‑approve, policy adoption rates, security defect trends).

Use Apigee Analytics and GCP monitoring to identify gaps and refine standards based on data insights and evolving business needs.

Conduct periodic maturity assessments; publish roadmaps and quarterly updates to stakeholders.

Risk, Audit & Controls

Establish controls and evidence for audits (design‑time and runtime), including conformity checks against policy and standards.

Coordinate remediation plans for non‑compliant APIs; manage waivers/exceptions with clear time‑bound conditions.

Tooling & Automation

Partner with platform teams to integrate policy‑as‑code checks (linting, contract validation, auth enforcement) into CI/CD.

Evaluate governance tooling (spec linters, catalog quality checks, portal workflows) to automate compliance wherever feasible.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail]. To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: insightglobal.com/workforce-privacy-policy.

Skills and Requirements

5+ years in API governance or platform leadership roles.

Ability to write clear policies, standards, and procedures; facilitate governance forums; drive alignment across stakeholders.

Deep familiarity with OpenAPI/Swagger, REST fundamentals, GraphQL design considerations, and API lifecycle management.

Hands‑on experience with security standards (OAuth2, JWT, JWKS, mTLS).

Experience with API management platforms like Kong, MuleSoft, AWS API Gateway, Azure APIM from a governance/architecture perspective. Familiarity with regulatory frameworks (Open Banking/PSD2, HIPAA, GDPR).

Experience with Apigee X on GCP.

GCP certifications (e.g., Professional Cloud Architect); Apigee certifications a plus.

Experience with Ping Identity integration and enterprise IAM.

Familiarity with GCP services (Cloud Armor, IAM, VPC networking) and platform security controls.

Background in DevSecOps, CI/CD automation, and policy‑as‑code for API compliance.

Experience improving API portals, catalogs, and developer experience, including analytics‑driven enhancements.