Cloud Platform Engineer - API

Who We Are Looking For

• Charles River Development is looking for an experienced API Infrastructure Engineer to join the Cloud Platform Engineering team.
• In this role, you will design, build, automate, and operate secure enterprise-scale Azure API management platforms.
• You will help modernize cloud delivery through DevOps practices, reusable IaC modules, automation, and strong operational engineering discipline.

Why This Role Is Important to Us

The team you will be joining is part of Charles River Development (CRD), which became part of State Street in 2018. CRD develops enterprise investment management software solutions for leading global financial institutions across institutional investment, wealth management, and hedge funds. Together, we created the industry's first open front-to-back platform, State Street Alpha, launched in 2019.

Join us if delivering next-generation API management platform, infrastructure, cloud networking, platform automation, deployment reliability, and secure-by-default cloud services using Azure, DevOps, and Infrastructure as Code sounds like a challenge you are ready for.

What You Will Be Responsible For

As an API Engineer you will be responsible for designing, developing, securing, deploying, and managing enterprise-grade APIs on the Microsoft Azure platform. The ideal candidate will have strong expertise in enterprise grade API management solutions, RESTful APIs, cloud-native development, security, automation, and integration patterns. This role works closely with application teams, architects, security teams, and DevOps engineers to deliver scalable and secure API solutions.

What We Value

API Design and Operations

• Design, deploy, maintain and automate enterprise API management platform and infrastructure.
• Strong experience with API gateways and service mesh concepts.
• Implement API versioning, lifecycle management, and governance standards.
• Troubleshoot and optimize API performance, reliability, and scalability.
• Familiarity with API specifications using OpenAPI/Swagger standards.
• Expertise in REST APIs; experience with gRPC and event‑driven APIs a plus.
• Develop and maintain API management policies for:
• Authentication and authorization
• Rate limiting and throttling
• Request/response transformations
• Caching
• Header manipulation
• IP filtering

Security and Compliance

• Implement OAuth 2.0, OpenID Connect, JWT validation, and certificate-based authentication.
• Integrate APIs with Microsoft Entra ID (Azure AD).
• Perform API security assessments and vulnerability remediation.
• Ensure compliance with organizational security standards and governance requirements.
• Implement Zero Trust and least privileged access controls.

Automation and DevOps

• Implement CI/CD pipelines using: Azure DevOps, GitHub Actions, ARM Templates, Bicep, Terraform
• Automate API deployment, configuration, testing, and policy management.
• Manage infrastructure as code (IaC) for API platforms.

Monitoring and Operations

• Monitor API health and performance
• Develop dashboards, alerts, and automated reporting.
• Support production incidents and root cause analysis activities.

Integration and Services

• Integrate APIs with:
• Azure Entra ID
• Azure Functions
• Azure App Service
• Azure Service Bus
• Azure Event Grid
• Azure Storage
• Azure Key Vault
• Cloud / Gateway Services
• Azure API Management is big plus.
• Azure Application Gateway
• Ambassador Gateway

Education & Preferred Qualifications

• Bachelor’s degree in computer science, Information Technology, Engineering, or related field. - 10+ years of API engineering / cloud development experience
• Azure certifications such as Azure Developer Associate, Azure Administrator Associate, Azure DevOps Engineer Expert, Azure Solutions Architect Expert, or Azure Security Engineer Associate are preferred.
• Experience with financial services, regulated environments, change management, security audit processes, or large-scale enterprise cloud platforms is a plus.

Additional Requirements

• Comfortable working in a global, distributed engineering environment.
• Self-motivated, accountable, delivery-focused, and able to drive technical initiatives independently.
• Passionate about automation, cloud engineering, operational excellence, secure infrastructure, and continuous improvement.
• Ability to document engineering decisions clearly and contribute to team knowledge sharing and collaboration.

Salary Range

$90,000 - $157,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

Job Application Disclosure

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.