About FactSet
FactSet’s product suite of smart analytics and unique data empower the world’s leading financial service professionals to make more informed decisions every day. At our heart is an inclusive community unified by the spirit of going above and beyond. Our philosophy is to embrace diversity, and that our best ideas can come from anyone, anywhere, at any time. We continuously look ahead to advance the future and technology of our industry, by rolling up our sleeves to solve tough problems together, and by learning from our successes, as well as our failures.
In this role, you will work with team of engineers who are responsible for the design, development and maintenance of our API Gateway. This team powers centralized routing, service discovery, rate limiting, and policy enforcement for MCP traffic and other internal APIs. You will design, implement, and operate dual‑authentication and token‑exchange capabilities, evolve gateway policies, drive multi‑region reliability, and automate delivery on AWS. This role spans design through operations with a strong focus on performance, security, and developer experience.
JOB REQUIREMENTS:
- Bachelor’s degree, or higher, in Computer Science or a related technical field
- 7+ years’ experience of building backend/platform systems , with substantial experience in traffic management or API platforms.
- Strong GO development and Lua experience on NGINXX/OpenResty
- Deep hands‑on experience with Docker/Kubernetes and AWS (EKS, EC2, ALB/NLB, Route 53, VPC/private networking; CloudWatch/CloudTrail).
- Infrastructure‑as‑code and CI/CD pipelines
- Strong Linux fundamentals and scripting (Bash/Python); excellent debugging and performance tuning skills.
- Clear communication, ownership mindset, and a security‑first approach.
- Address production issues in a timely manner
JOB RESPONSIBILITIES:
- Design, implement, and operate gateway capabilities: routing, service discovery, rate limiting/quotas, and policy enforcement.
- Build gateway extensions and filters in Lua (NGINX/OpenResty) and GO for authN/Z, token exchange, request shaping, and telemetry.
- Implement dual‑auth support and seamless token exchange (OAuth2/OIDC, RFC 8693), including validation, caching, replay protection, and robust trust store management.
- Establish mTLS to backends and standardize API registration and onboarding patterns; integrate with discovery (Kubernetes/EKS, Consul).
- Automate deployments with IaC and CI/CD (Terraform/CloudFormation, Helm, GitHub Actions/Jenkins); use blue/green and canary releases with signed artifacts.
- Plan and run hybrid/multi‑region topologies on AWS (active‑active or active‑standby), including global routing (Route 53/GLB), health checks, failover, and DR/chaos drills.
- Lead patching and upgrades with minimal downtime; define autoscaling policies, capacity plans, and incident response playbooks.
- Create onboarding guides, example configurations, and self‑service workflows to accelerate adoption by MCP servers/agents and other internal services.
- Participate in code-reviews and proactively take ownership of PR’s and make sure to catch all security vulnerabilities
- Proper collaboration and interaction with multiple teams across FactSet and respond to stakeholder queries in a timely manner
Nice to have:
- Kong Gateway experience (configuration, plugin development) — a strong plus.
- Envoy or NGINX expertise
- Multi‑region traffic management (Global Accelerator/CloudFront), resilience patterns, and DR playbooks.
- Data stores for counters and policies (Redis/KeyDB, DynamoDB including Global Tables).
- Observability stacks (OpenTelemetry, Prometheus, Grafana, Loki/ELK) and SLO/error budget practices.
What's In It For You
At FactSet, our people are our greatest asset, and our culture is our biggest competitive advantage. Being a FactSetter means:
Support for your total well-being. This includes health, life, and disability insurance, as well as retirement savings plans and a discounted employee stock purchase program, plus paid time off for holidays, family leave, and company-wide wellness days.
Salary is just one component of our compensation package and is based on several factors including but not limited to education, work experience, and certifications.
