API Governance Framework SMELead

The API Governance Framework Lead is responsible for establishing implementing and managing the organizations API Governance Framework to ensure secure scalable compliant and reusable APIs across the enterprise. This role will define governance policies standards best practices and controls covering API lifecycle management security compliance architecture documentation monitoring and operational excellence.
The individual will work closely with Enterprise Architecture Cyber Security Application Development DevOps Cloud Engineering Data Management and Business stakeholders to drive API standardization and enable secure digital transformation initiatives.

Key Responsibilities
API Governance Strategy
Design and maintain the enterprise-wide API Governance Framework.
Establish API policies standards principles and operating procedures.
Define API maturity models and governance KPIs.
Develop API lifecycle management standards covering design development testing deployment monitoring and retirement.
Drive API-first architecture adoption across business and technology teams.

API Architecture & Design Governance
Define API design standards and conventions.
Govern REST GraphQL SOAP and event-driven API architectures.
Review and approve API specifications and architecture designs.
Ensure consistency in versioning naming standards metadata and documentation.
Promote API reuse and discoverability across the organization.

Security & Compliance
Develop API security standards aligned with industry frameworks.
Ensure implementation of:
o OAuth 2.0
o OpenID Connect (OIDC)
o JWT
o mTLS
o API Gateway controls
o Rate limiting
o Threat protection mechanisms
Conduct API security reviews and risk assessments.
Ensure compliance with regulatory and organizational requirements.
Collaborate with Cyber Security teams to mitigate API-related risks and vulnerabilities.

API Lifecycle Management
Implement governance controls throughout the API lifecycle.
Establish API onboarding and approval workflows.
Manage API inventory cataloging and service registry.
Oversee API version management and deprecation processes.
Ensure APIs are adequately documented and maintained.
Stakeholder Management
Collaborate with business units to understand API consumption needs.
Partner with Architecture and Engineering teams to enforce governance standards.
Conduct governance reviews and reporting with leadership.
Lead API governance forums and review boards.

Required Qualifications
Education
Bachelors degree in computer science Information Technology Engineering or related field.
Masters degree preferred.

Experience
8-15 years of IT experience.
Minimum 8 years of experience in API Management Enterprise Architecture Cloud Architecture or API Governance.
Experience implementing API governance programs in large enterprises.
Experience with API security frameworks and controls.
Experience working in Agile and DevSecOps environments.

Technical Skills:
API Technologies
REST APIs
GraphQL
SOAP Services
Event-Driven Architecture
OpenAPI/Swagger
AsyncAPI
Security
OAuth 2.0
OpenID Connect
JWT
mTLS
API Threat Protection
OWASP API Security Top 10
Zero Trust Architecture
API Management Tools
Azure API Management
Apigee
MuleSoft
Akamai Noname
AWS API Gateway