Senior Principal Engineer - Applications Development

Company: Marsh Corporate Description: We are seeking a talented individual to join our Marsh Tech - TE2A (Enterprise Systems Engineering) team, part of our Marsh Tech business at Marsh.

This role will be based in Pune/Noida.

This is a hybrid role that has a requirement of working at least three days a week in the office.

Senior GCP Apigee X Administrator (API Platform & Network Engineering) We are looking for an experienced GCP Apigee X professional with strong platform administration and cloud networking expertise to operate, secure, and scale our enterprise API management platform.

The ideal candidate will own Apigee X organization and environment administration, hybrid runtime operations, network architecture and connectivity, platform security, and reliability — partnering closely with development, security, and network engineering teams across the full API platform lifecycle.

We will count on you to: Administer and maintain Apigee X organizations, environments, environment groups, and instances, including hybrid runtime components (message processors, routers, and Synchronizer) deployed on GKE.

Own Apigee X platform operations: upgrades, patching, capacity planning, autoscaling, and maintenance windows with minimal service disruption.

Configure and manage Cloud Load Balancing (external/internal HTTPS, TCP/SSL proxy) and Cloud DNS for Apigee endpoints and hybrid connectivity.

Implement network security controls — firewall rules, Cloud Armor/WAF policies, VPC Service Controls — to protect API traffic and enforce zero-trust principles.

Manage IAM, RBAC, and service accounts for Apigee orgs/environments and related GCP projects, following least-privilege and organization policy best practices.

Administer TLS/mTLS certificates, keystores, and truststores, and manage credential/secret rotation for proxies and target endpoints.

Monitor platform health, API traffic, and network performance using Cloud Monitoring, Cloud Logging, and Apigee Analytics; define SLOs/SLIs and alerting policies.

Design and implement high-availability, multi-region deployment, and disaster recovery strategies for Apigee X.

Troubleshoot connectivity, latency, DNS, and routing issues across Apigee, backend services, and hybrid/on-prem networks (VPN, Cloud Interconnect).

Enforce API security policies in production — OAuth 2.0, JWT, mTLS, API key lifecycle, quota, and threat protection — in partnership with development teams.

Manage and evolve CI/CD pipelines and Infrastructure-as-Code (Terraform preferred) for Apigee X configuration-as-code deployments.

Collaborate with network engineering, security, and platform teams to align Apigee X deployments with enterprise network and security architecture.

Maintain operational runbooks, network diagrams, and platform documentation; lead incident response and root-cause analysis for platform/network issues.

Mentor engineers on Apigee X administration, GCP networking fundamentals, and platform operations best practices.

What you need to have: 5+ years in API/platform engineering, with 3+ years of hands-on experience administering Google Apigee X (or Apigee hybrid) in a production environment.

Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent practical experience).

Strong working knowledge of GCP networking fundamentals: VPC design, subnets, routing, firewall rules, Private Service Connect, VPC Service Controls, Cloud NAT, and Cloud DNS.

Hands-on experience with Cloud Load Balancing (external/internal HTTP(S), TCP/SSL proxy) and hybrid connectivity (Cloud VPN, Cloud Interconnect).

Proven experience administering Apigee X organizations, environments, environment groups, and instances, including hybrid runtime on GKE.

Solid understanding of GCP IAM, organization policies, and service account management across multi-project environments.

Experience managing TLS/mTLS, keystores/truststores, and certificate lifecycle for API gateways.

Proficiency with Cloud Monitoring, Cloud Logging, and Apigee Analytics for observability, alerting, and capacity planning.

Working knowledge of GKE administration — node pools, autoscaling, and cluster networking — for Apigee hybrid runtime.

Experience with Infrastructure as Code (Terraform preferred) for provisioning Apigee X and supporting GCP network resources.

Experience with CI/CD tools (Cloud Build, GitHub Actions, Jenkins) for configuration-as-code deployment pipelines.

Working knowledge of API security protocols (OAuth 2.0, JWT, mTLS, API key management) from an operations/enforcement standpoint.

Basic scripting ability (Python, Bash, JavaScript) to support automation, tooling, and light policy configuration.

Strong troubleshooting skills spanning network, platform, and application layers in high-throughput API environments.

Excellent communication skills and ability to work with cross-functional teams (network engineering, security, architecture, and business stakeholders).

What makes you stand out: Google Cloud certification(s) — Professional Cloud Network Engineer and/or Apigee API Engineer certification strongly preferred.

Experience with hybrid/multi-cloud networking and API management (interconnecting GCP with on-prem or other cloud environments).

Familiarity with service mesh (Anthos Service Mesh/Istio) and container networking for microservices environments.

Prior experience migrating or co-existing with legacy API gateways (e.g., MuleSoft, IBM API Connect, Kong).

Experience with network security tooling (Cloud Armor, VPC Service Controls, firewall policy management) in a production API platform.

Knowledge of event-driven architectures and messaging systems (Pub/Sub, Kafka).

Why join our team: We help you be your best through professional development opportunities, interesting work and supportive leaders.

We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities.

Our scale enables us t