Azure API Management (APIM) Developer

Job Description To own the API gateway layer that connects internal services, government entities, and external consumers. The work covers policy development, security, lifecycle automation, and developer onboarding. Responsibilities • Design and implement APIs in Azure API Management, including APIs, products, subscriptions, versions, and revisions. • Develop APIM policies (XML and C# policy expressions) for: • Authentication and authorization • Rate limiting, quotas, and caching • Request and response transformation • Routing, retries, and error handling • Secure APIs with Microsoft Entra ID, OAuth 2.0 / OpenID Connect, JWT validation, client certificates (mTLS), and managed identities. • Integrate APIM with backend services such as Azure Functions, App Service, AKS, Logic Apps, Service Bus, and on-premises systems through VNet integration and self-hosted gateways. • Define API contracts with OpenAPI/Swagger and enforce design standards: naming, versioning, error models, and pagination. • Automate API deployment with APIOps practices, using Bicep, ARM, or Terraform with Azure DevOps or GitHub Actions pipelines. • Customize and maintain the APIM Developer Portal to support onboarding of internal and external consumers. • Monitor API health, performance, and usage through Application Insights, Azure Monitor, and Log Analytics. Troubleshoot production issues. • Place APIM in a secure network architecture alongside Application Gateway/WAF, Azure Front Door, private endpoints, and Key Vault. • Work with architects, backend developers, security, and infrastructure teams to meet performance, availability, and compliance targets. • Produce technical documentation, integration guides, and runbooks. Qualifications • Bachelor's degree in Computer Science, Software Engineering, or a related field. • 4+ years in software or integration development, with at least 2 years of hands-on Azure API Management experience. • Strong command of APIM policies and policy expressions. • Solid understanding of REST, HTTP, and API security standards (OAuth 2.0, OIDC, JWT, mTLS). • Experience with at least one backend language, such as C#/.NET, Java, or Node.js. • Hands-on experience with Infrastructure as Code (Bicep, ARM, or Terraform) and CI/CD pipelines. • Working knowledge of Azure networking: VNets, private endpoints, NSGs, and DNS. • Experience with Microsoft Entra ID app registrations and API permissions. • Microsoft certifications: AZ-204 (Azure Developer), AZ-305 (Solutions Architect), or AZ-500 (Security). • Experience with APIM self-hosted gateways, multi-region deployments, or the Premium/v2 tiers. • Familiarity with event-driven integration (Event Grid, Service Bus) and GraphQL or SOAP-to-REST patterns in APIM. • Experience delivering integrations for government or regulated environments, including knowledge of Qatar's National Information Assurance (NIA) standards. • Arabic language skills are a plus. • Clear communication with both technical and non-technical stakeholders. • Strong troubleshooting skills and ownership of production systems. • Ability to work in agile, multi-team delivery environments. Show more Show less

Design and implement APIs in Azure API Management, including APIs, products, subscriptions, versions, and revisions; Develop APIM policies (XML and C# policy expressions) for authentication/authorization, rate limiting, quotas, caching, request/response transformation, routing, retries, and error handling; Secure APIs with Microsoft Entra ID, OAuth 2.0 / OpenID Connect, JWT validation, client certificates (mTLS), and managed identities; Integrate APIM with backend services (Azure Functions, App Service, AKS, Logic Apps, Service Bus, on-premises via VNet/self-hosted gateways); Define API contracts with OpenAPI/Swagger and enforce design standards (naming, versioning, error models, pagination); Automate API deployment with APIOps using Bicep, ARM, or Terraform with Azure DevOps or GitHub Actions; Customize and maintain the APIM Developer Portal for onboarding internal/external consumers; Monitor API health, performance, and usage via Application Insights, Azure Monitor, Log Analytics; Troubleshoot production issues; Place APIM in secure network architecture with Application Gateway/WAF, Azure Front Door, private endpoints, Key Vault; Collaborate with architects, backend developers, security, and infrastructure teams to meet performance, availability, compliance targets; Produce technical documentation, integration guides, and runbooks.