Target Range:$145,000.00 /Yr. - $170,000.00 /Yr
Actual starting pay will vary based on factors including, but not limited to, geographic location, experience, skills, specialty, and education.
Eligible for an Annual Discretionary Cash Bonus Target: 10%
Eligible for an Annual Discretionary Restricted Stock Units Bonus Target: 10%
These discretionary target bonuses may be awarded semi-annually based upon your achievement of performance goals and targets.
About This JobThis is an onsite position based in either San Diego, CA or Centennial, CO. Remote or hybrid work is not available.
Axos Bank is hiring a Senior API Engineer -Apigee & AI Gateway to support and grow the bank's API gateway platform. Day to day, you will assist with API setup, shared components, security policies, environments, platform administration, and the release process. You will also help set the standards other teams build to, and help extend the platform to carry AI workloads under the same controls as every other API.
This is a hands-on individual-contributor role. You will work with Infrastructure, Network, and Security, and with the engineering teams that build on the platform, contributing to the technical direction of the gateway and supporting the engineers who use it.
Responsibilities:Apigee platform ownership- Own the Apigee X platform: API proxies, shared flows, policies, environments, deployments, and day-to-day operations
- Document the platform: architecture, standards, and runbooks
- Define and enforce proxy standards: structure, naming, versioning, deprecation, error handling, and reusable shared flows
- Manage the supporting pieces with Infrastructure and Network: DNS, certificates, TLS, and environment configuration
Security and governance- Implement gateway security: OAuth 2.0 and OIDC, JWT validation, mTLS, quota and spike arrest, and threat protection
- Define risk tiers and approval gates for API changes in a regulated environment, and support audit and examination
Delivery and reliability- Build and maintain CI/CD pipelines and promotion gates for proxy and policy artifacts
- Monitor platform health and API performance; define SLOs, alerts, and runbooks; lead root-cause analysis for gateway incidents
- Onboard consuming teams and advise them on API design
AI gateway (growing scope)- Route LLM API traffic through the gateway with provider abstraction, failover, authentication, rate limiting, and logging
- Apply AI safety controls (prompt-injection defense, PII detection and redaction, response filtering) using Model Armor or an equivalent
- Establish patterns for exposing MCP servers and tools to internal agents through the gateway, with the same authentication and audit controls
Requirements:- Bachelor's degree in related field
- 5+ years in enterprise API architecture or engineering, including hands-on ownership of an enterprise API gateway: Apigee (X or Edge) preferred, or an equivalent platform. You have built proxies, shared flows, and policies, and can read and modify policy XML and JavaScript.
- LLM API integrations shipped to production (OpenAI, Anthropic, Vertex AI, AWS Bedrock, or similar).
- Deep API security experience: OAuth 2.0, OIDC, mTLS, and JWT, including delegated-access patterns for AI agents.
- Google Cloud experience (IAM, VPC, and the services Apigee X runs on).
- Experience in financial services or another regulated industry.
Preferred:- MCP server design and governance; Model Armor or comparable AI safety controls
- CI/CD and Terraform for gateway artifacts; Python, Java, or Node.js
- Apigee or Google Cloud certification
- Familiarity with GLBA and model risk guidance (SR 11-7) as they apply to AI
Axos Employee Benefits May Include:- Medical, Dental, Vision, and Life Insurance
- Paid Sick Leave, 3 weeks' Vacation, and Holidays (about 11 a year)
- HSA or FSA account and other voluntary benefits
- 401(k) Retirement Saving Plan with Employer Match Program and 529 Savings Plan
- Employee Mortgage Loan Program and free access to an Axos Bank Account with Self-Directed Trading
