Senior Principal Engineer - Applications Development

Company:

Description:

We are seeking a talented individual to join our Marsh Tech - TE2A (Enterprise Systems Engineering) team, part of our Marsh Tech business at Marsh. This role will be based in Pune/Noida. This is a hybrid role that has a requirement of working at least three days a week in the office.

Senior GCP Apigee X Administrator (API Platform & Network Engineering)

We are looking for an experienced GCP Apigee X professional with strong platform administration and cloud networking expertise to operate, secure, and scale our enterprise API management platform. The ideal candidate will own Apigee X organization and environment administration, hybrid runtime operations, network architecture and connectivity, platform security, and reliability — partnering closely with development, security, and network engineering teams across the full API platform lifecycle.

We will count on you to:

• Administer and maintain Apigee X organizations, environments, environment groups, and instances, including hybrid runtime components (message processors, routers, and Synchronizer) deployed on GKE.
• Own Apigee X platform operations: upgrades, patching, capacity planning, autoscaling, and maintenance windows with minimal service disruption.
• Configure and manage Cloud Load Balancing (external/internal HTTPS, TCP/SSL proxy) and Cloud DNS for Apigee endpoints and hybrid connectivity.
• Implement network security controls — firewall rules, Cloud Armor/WAF policies, VPC Service Controls — to protect API traffic and enforce zero-trust principles.
• Manage IAM, RBAC, and service accounts for Apigee orgs/environments and related GCP projects, following least-privilege and organization policy best practices.
• Administer TLS/mTLS certificates, keystores, and truststores, and manage credential/secret rotation for proxies and target endpoints.
• Monitor platform health, API traffic, and network performance using Cloud Monitoring, Cloud Logging, and Apigee Analytics; define SLOs/SLIs and alerting policies.
• Design and implement high-availability, multi-region deployment, and disaster recovery strategies for Apigee X.
• Troubleshoot connectivity, latency, DNS, and routing issues across Apigee, backend services, and hybrid/on-prem networks (VPN, Cloud Interconnect).
• Enforce API security policies in production — OAuth 2.0, JWT, mTLS, API key lifecycle, quota, and threat protection — in partnership with development teams.
• Manage and evolve CI/CD pipelines and Infrastructure-as-Code (Terraform preferred) for Apigee X configuration-as-code deployments.
• Collaborate with network engineering, security, and platform teams to align Apigee X deployments with enterprise network and security architecture.
• Maintain operational runbooks, network diagrams, and platform documentation; lead incident response and root-cause analysis for platform/network issues.
• Mentor engineers on Apigee X administration, GCP networking fundamentals, and platform operations best practices.

What you need to have:

• 5+ years in API/platform engineering, with 3+ years of hands-on experience administering Google Apigee X (or Apigee hybrid) in a production environment.
• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent practical experience).
• Strong working knowledge of GCP networking fundamentals: VPC design, subnets, routing, firewall rules, Private Service Connect, VPC Service Controls, Cloud NAT, and Cloud DNS.
• Hands-on experience with Cloud Load Balancing (external/internal HTTP(S), TCP/SSL proxy) and hybrid connectivity (Cloud VPN, Cloud Interconnect).
• Proven experience administering Apigee X organizations, environments, environment groups, and instances, including hybrid runtime on GKE.
• Solid understanding of GCP IAM, organization policies, and service account management across multi-project environments.
• Experience managing TLS/mTLS, keystores/truststores, and certificate lifecycle for API gateways.
• Proficiency with Cloud Monitoring, Cloud Logging, and Apigee Analytics for observability, alerting, and capacity planning.
• Working knowledge of GKE administration — node pools, autoscaling, and cluster networking — for Apigee hybrid runtime.
• Experience with Infrastructure as Code (Terraform preferred) for provisioning Apigee X and supporting GCP network resources.
• Experience with CI/CD tools (Cloud Build, GitHub Actions, Jenkins) for configuration-as-code deployment pipelines.
• Working knowledge of API security protocols (OAuth 2.0, JWT, mTLS, API key management) from an operations/enforcement standpoint.
• Basic scripting ability (Python, Bash, JavaScript) to support automation, tooling, and light policy configuration.
• Strong troubleshooting skills spanning network, platform, and application layers in high-throughput API environments.
• Excellent communication skills and ability to work with cross-functional teams (network engineering, security, architecture, and business stakeholders).

What makes you stand out: 

• Google Cloud certification(s) — Professional Cloud Network Engineer and/or Apigee API Engineer certification strongly preferred.
• Experience with hybrid/multi-cloud networking and API management (interconnecting GCP with on-prem or other cloud environments).
• Familiarity with service mesh (Anthos Service Mesh/Istio) and container networking for microservices environments.
• Prior experience migrating or co-existing with legacy API gateways (e.g., MuleSoft, IBM API Connect, Kong).
• Experience with network security tooling (Cloud Armor, VPC Service Controls, firewall policy management) in a production API platform.
• Knowledge of event-driven architectures and messaging systems (Pub/Sub, Kafka).

Why join our team:

• We help you be your best through professional development opportunities, interesting work and supportive leaders.
• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities.
• Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being.