Senior Software Engineer at Gravitee — United States

About The Role

Recognized in Gartner’s inaugural 2026 Magic Quadrant™ for AI Agent Management Platforms and named a Leader in the Gartner® Magic Quadrant™ for API Management for three consecutive years, Gravitee brings AI agents and the APIs they rely on under one unified control plane.

We deliver the industry’s most advanced platform for Any API, Any Event, and Any AI Agent, trusted by global leaders like Michelin, Roche, and Blue Yonder.

Why join us?

The Mission: We are the first to bridge traditional API Management with the new frontier of AI Agent Security
The Momentum: A high-growth Leader - combining market credibility with startup speed
The DNA: We hire people who Hold Nothing Back - passionate builders who want to redefine digital infrastructure

Don’t just watch the AI revolution. Build the infrastructure that controls and secures it.

The Role

We are looking for a Senior Software Engineer to build product experiences and the platform capabilities behind them, across Gravitee API Management (APIM), the gateway runtime, and Gravitee Access Management (AM), including the next-generation product surface in Gamma. The work sits where API governance, identity, and AI agent management meet: configuring and securing AI Gateways, governing MCP and agent-to-agent interactions, and authenticating and authorizing the people, services, and agents that call them.

This is a new role and the first of its kind in the US. Today, AM and most core platform engineering is based in Europe. This hire establishes US-hours ownership of Level 3 and Level 4 escalations across APIM and AM, and adds delivery capacity toward AM parity in Gamma and the AI Agent Management roadmap. It is part of building sustainable L3/L4 engineering capability in the US.

You will split your time roughly 80% feature delivery and 20% L3/L4 support and bug fixing (it varies week to week), working as an embedded member of product teams based in Europe. This is a hands-on role for an engineer who is comfortable moving between frontend experiences, backend APIs, security protocols, data models, and technical design.

What You Will Be Doing

In this role, you will:

Design and deliver features end to end, from discovery and technical design through implementation, testing, release, and iteration.
Build clear, responsive interfaces and data visualizations in TypeScript and Angular, and the Java-based APIs and services behind them, so customers can configure, observe, and govern APIs, event streams, and AI agents.
Build and maintain identity and authorization features of Gravitee Access Management, across the AM runtime and the AM experience in Gamma.
Implement and support OAuth 2.0 and OIDC flows (authorization code + PKCE, client credentials, token exchange), SAML 2.0, SCIM, and FAPI/CIBA/UMA profiles, and work with token and session semantics: JWT, JWKS, key rotation, revocation, introspection, MFA and step-up, WebAuthn/FIDO2, and IdP federation.
Contribute to Gravitee's core gateway runtime, applying asynchronous and non-blocking design patterns to performance-sensitive code, including login and token endpoints.
Help customers configure and observe Gravitee's AI-related capabilities, including AI Gateways, MCP tools and servers, agent identity, and agent-to-agent interactions.
Model and transform operational data so that complex platform behavior becomes understandable and actionable.
Keep security behavior and upgrades safe: standards compliance, secure defaults, certificate and secret handling, consent, audit logs, and defenses against token replay, SSRF, and account takeover.
Own safe migrations and backward compatibility across MongoDB and JDBC, and support multi-domain, multi-region deployments.
Own US-hours Level 3 and Level 4 escalations for APIM and AM customers as part of the L3 pager duty rotation.
Contribute to both Gravitee's open-source platform and Enterprise Edition.
Use LLMs and AI-assisted development tools thoughtfully for prototyping, implementation, testing, debugging, and exploration, applying sound engineering judgment to validate AI-generated work.
Write meaningful automated tests and contribute to reliable delivery practices.
Collaborate with product managers, designers, engineers, and technical leaders, including the AM and gateway teams in Europe, to discover effective solutions and improve them through code and design reviews.
Share what you learn and help the team make practical choices as identity standards, API protocols, and agent protocols evolve.

Essential Skills

We are looking for evidence that you can succeed in the role, whether gained through employment, open-source work, or equivalent practical experience:

5+ years building and operating production software, on a team that ships and supports its own product; you have personally resolved production incidents.
Strong Java experience, including designing maintainable REST APIs and backend services, with Maven and a reactive stack such as Vert.x, RxJava, or Netty.
Strong TypeScript and modern frontend development experience using a component-based framework, including data-rich interfaces and visualizations that turn complex data into clear customer-facing insights.
Working knowledge of identity and API security standards: OAuth 2.0 and OIDC flows (authorization code + PKCE, client credentials, token exchange), JWT and JWKS, and token lifecycle (rotation, revocation, introspection), with familiarity across SAML 2.0, SCIM, MFA/step-up, and WebAuthn/FIDO2.
A security-first mindset: secure defaults, certificate and secret handling, audit logging, and awareness of token replay, SSRF, and account-takeover risks.
A solid understanding of API design, data modeling, distributed systems, and asynchronous workflows.
Experience with persistent data stores such as MongoDB or JDBC-backed relational databases, including safe migrations and backward compatibility, and with search or analytics technologies such as Elasticsearch or OpenSearch.
Experience with automated testing, Git-based development, code review, and iterative product delivery.
Hands-on experience using LLMs or AI coding assistants as part of an engineering workflow, combined with the judgment to review and improve their output.
Clear communication, collaborative problem-solving, and the ability to take an ambiguous problem through to production.Desired Skills

You do not need to match every item. We would be especially interested in experience with:

Angular specifically, or deep experience in another modern component-based frontend framework.
Deeper identity work: FAPI, CIBA, or UMA profiles; SAML 2.0 as both IdP and SP; IdP federation and social login.
An API gateway, proxy, or service-mesh vendor, or the API platform team of a large company (e.g., Kong, Google Apigee, MuleSoft, Tyk, Solo.io, Traefik, WSO2).
Kubernetes operators and CRDs, OpenAPI tooling, service mesh or Envoy.
Docker, Kubernetes, and cloud-native application delivery.
Event-streaming platforms such as Kafka.
Model Context Protocol (MCP), Agent2Agent (A2A), tool calling, LLM proxies, or other emerging AI protocols and standards. Prior production experience is not required.
Building or operating LLM-powered applications, RAG systems, or agentic workflows, especially their security, governance, and observability needs.
Open-source software or enterprise developer platforms.

Who Thrives at Gravitee

Our growth is powered by people who bring passion to what they build, professionalism to how they work, and a commitment to doing things well.

You will thrive here if you:

Bring energy and a constructive attitude to the team.

Adapt quickly and enjoy learning unfamiliar technologies and domains.

Take ownership, communicate clearly, and follow through with urgency.

Balance delivery speed with thoughtful engineering judgment.

Start with the customer problem and care about the quality of the experience you create.

Enjoy working in a fast-moving, collaborative, international environment.

Life at Gravitee

At Gravitee, we invest in humans, not just roles.

You’ll get:

• Salary of $160,000

Competitive medical coverage.

Pension / 401(k) program options.

Stock options - you build it, you own it.

25 days of holiday plus in-country national holidays.

Three mental health days and a wellness allowance.

Your birthday off. 🎉

A professional development budget to support your growth.

A hybrid work culture with hubs across regions.

Quarterly team events and an annual company offsite.

A collaborative, international company culture.

Opportunities to grow your scope and career as Gravitee grows.

At Gravitee, we believe diverse perspectives make better products and stronger teams.

No employee or applicant will be treated less favorably on the grounds of sex, marital status, race, color, nationality, ethnic or national origin, disability, gender, sexual orientation, gender identity, age, pregnancy or maternity, marital or civil partner status, religion, or belief.

By applying, you consent to Gravitee storing and processing the personal information you submit as part of the recruitment process.