You will be taken to Marsh McLennan’s own careers page to apply. Job ID R_358253.
Job description
We are seeking a talented individual to join our Marsh Tech - TE2A (Enterprise Systems Engineering) team, part of our Marsh Tech business at Marsh. This role will be based in Pune/Noida. This is a hybrid role that has a requirement of working at least three days a week in the office.
Senior GCP Apigee X Administrator (API Platform & Network Engineering)
We are looking for an experienced GCP Apigee X professional with strong platform administration and cloud networking expertise to operate, secure, and scale our enterprise API management platform. The ideal candidate will own Apigee X organization and environment administration, hybrid runtime operations, network architecture and connectivity, platform security, and reliability — partnering closely with development, security, and network engineering teams across the full API platform lifecycle.
We will count on you to
Administer and maintain Apigee X organizations, environments, environment groups, and instances, including hybrid runtime components (message processors, routers, and Synchronizer) deployed on GKE.
Own Apigee X platform operations: upgrades, patching, capacity planning, autoscaling, and maintenance windows with minimal service disruption.
Configure and manage Cloud Load Balancing (external/internal HTTPS, TCP/SSL proxy) and Cloud DNS for Apigee endpoints and hybrid connectivity.
Implement network security controls — firewall rules, Cloud Armor/WAF policies, VPC Service Controls — to protect API traffic and enforce zero-trust principles.
Manage IAM, RBAC, and service accounts for Apigee orgs/environments and related GCP projects, following least-privilege and organization policy best practices.
Administer TLS/mTLS certificates, keystores, and truststores, and manage credential/secret rotation for proxies and target endpoints.
Monitor platform health, API traffic, and network performance using Cloud Monitoring, Cloud Logging, and Apigee Analytics; define SLOs/SLIs and alerting policies.
Design and implement high-availability, multi-region deployment, and disaster recovery strategies for Apigee X.
Troubleshoot connectivity, latency, DNS, and routing issues across Apigee, backend services, and hybrid/on-prem networks (VPN, Cloud Interconnect).
Enforce API security policies in production — OAuth 2.0, JWT, mTLS, API key lifecycle, quota, and threat protection — in partnership with development teams.
Manage and evolve CI/CD pipelines and Infrastructure-as-Code (Terraform preferred) for Apigee X configuration-as-code deployments.
Collaborate with network engineering, security, and platform teams to align Apigee X deployments with enterprise network and security architecture.
Maintain operational runbooks, network diagrams, and platform documentation; lead incident response and root-cause analysis for platform/network issues.
Mentor engineers on Apigee X administration, GCP networking fundamentals, and platform operations best practices.
What you need to have
5+ years in API/platform engineering, with 3+ years of hands-on experience administering Google Apigee X (or Apigee hybrid) in a production environment.
Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent practical experience).
Strong working knowledge of GCP networking fundamentals: VPC design, subnets, routing, firewall rules, Private Service Connect, VPC Service Controls, Cloud NAT, and Cloud DNS.
Hands-on experience with Cloud Load Balancing (external/internal HTTP(S), TCP/SSL proxy) and hybrid connectivity (Cloud VPN, Cloud Interconnect).
Proven experience administering Apigee X organizations, environments, environment groups, and instances, including hybrid runtime on GKE.
Solid understanding of GCP IAM, organization policies, and service account management across multi-project environments.
Experience managing TLS/mTLS, keystores/truststores, and certificate lifecycle for API gateways.
Proficiency with Cloud Monitoring, Cloud Logging, and Apigee Analytics for observability, alerting, and capacity planning.
Working knowledge of GKE administration — node pools, autoscaling, and cluster networking — for Apigee hybrid runtime.
Experience with Infrastructure as Code (Terraform preferred) for provisioning Apigee X and supporting GCP network resources.
Experience with CI/CD tools (Cloud Build, GitHub Actions, Jenkins) for configuration-as-code deployment pipelines.
Working knowledge of API security protocols (OAuth 2.0, JWT, mTLS, API key management) from an operations/enforcement standpoint.
Basic scripting ability (Python, Bash, JavaScript) to support automation, tooling, and light policy configuration.
Strong troubleshooting skills spanning network, platform, and application layers in high-throughput API environments.
Excellent communication skills and ability to work with cross-functional teams (network engineering, security, architecture, and business stakeholders).
What makes you stand out
Google Cloud certification(s) — Professional Cloud Network Engineer and/or Apigee API Engineer certification strongly preferred.
Experience with hybrid/multi-cloud networking and API management (interconnecting GCP with on-prem or other cloud environments).
Familiarity with service mesh (Anthos Service Mesh/Istio) and container networking for microservices environments.
Prior experience migrating or co-existing with legacy API gateways (e.g., MuleSoft, IBM API Connect, Kong).
Experience with network security tooling (Cloud Armor, VPC Service Controls, firewall policy management) in a production API platform.
Knowledge of event-driven architectures and messaging systems (Pub/Sub, Kafka).
Why join our team
We help you be your best through professional development opportunities, interesting work and supportive leaders.
We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities.
Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being.
Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit marsh.com, or follow us on LinkedIn and X.
Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, caste, disability, ethnic origin, family duties, gender orientation or expression, gender reassignment, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.
Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.
Required skills
apigee x administration, google cloud platform, api security, cloud load balancing, cloud dns, network security controls, gcp iam administration, gcp vpc design, gcp subnets, gcp firewall rules, gcp private service connect, gcp vpc service controls, gcp cloud nat, gcp cloud dns, tls/mtls administration, keystore management, cloud monitoring, cloud logging, apigee analytics, gke administration, terraform, ci/cd pipelines, oauth 2.0, jwt, mtls, api key lifecycle management, api key quota management, threat protection, python, bash
