Sr API Gateway Engineer

Job Title: Sr API Gateway Engineer Location: Plano, TX Duration: Long Term About CTC: Founded in 1996, CTC is a global IT services, Consulting and Business Solutions partner dedicated to helping organizations innovate, optimize, and grow. With over 2,000 professionals worldwide, we support more than 100 clients in transforming complex challenges into lasting competitive advantages. Job Description: • Lead technology projects with support from a team of full stack developers to create solutions for integration platforms that help meet needs for the company • Utilize programming languages like JavaScript, Java, Spring boot, TypeScript, RDBMS and NoSQL databases, Container Orchestration services including Docker and Kubernetes, and a variety of AWS tools and services • Build reusable components for authentication and authorization enforcement at service layer. • Implement OAuth 2.0 with OpenID Connect (OIDC) to support web, mobile and service-service use cases. • Develop integration patterns for multiple OAuth2.0 grant types including Authorization Code (with PKCE), Client Credentials (API-API) etc • Integrate access token validation, scopes and claims-based access controls into reusable framework or gateway components. • Design and implement RBAC/ABAC/Entitlements models within the framework for granular access controls enforcement. • Deliver SDKs, documentation, sample projects and internal training for engineering teams to accelerate adoption • Expertise in software engineering with at least some experience in designing and implementing modern 12 factor, cloud native business technology solutions. • Practical knowledge of cloud platforms including leveraging AWS services. • Solid technical foundation with relevant experience in Java, Spring boot, NodeJS, Real time streaming architectures, microservices architecture and serverless architecture patterns • Deep understanding of Spring boot or NodeJS internals; understanding of dependency management and testing options; clear understanding of distributed tracing standards, resiliency and scalability patterns OR • Deep understanding and practical experience implementing OpenID Connect (OIDC) and Security Assertion Markup Language (SAML) based Customer Identity solutions. • An in-depth understanding of OAuth authorization grant types and knowledge of utilizing appropriate grant type based on specific integration use case. • Expertise in API Security patterns including gateway-level authentication, token introspection and revocation, mutual TLS • Practical experience with integration with and developing operational tools for OKTA / PING / ForgeRock will be highly regarded • Bachelor's degree in computer science or related field