WSO2 Implementation Engineer – CIAM / API Management / Ballerina

Qualifications & Experience

• Bachelor’s degree in Software Engineering, Computer Science, Information Technology, or a related field.
  
• 3–7+ years of hands-on experience implementing WSO2 middleware (API Manager, Micro Integrator, Identity Server) in production environments.
  
• Demonstrated experience delivering CIAM solutions, including SSO, MFA, self-service, and federation.
  
• Strong background in API Management, including lifecycle management, security policies, and rate limiting.
  
• Strong Java development experience, with hands-on skill in XML (XSLT, XPath, XML Schema).
  
• Hands-on experience deploying and operating platforms on Kubernetes and/or OpenShift.
  
• Experience with SWIFT connectors or similar interbank/payment messaging integrations.
  
• Prior delivery experience in Telco or Banking environments is highly preferred.
  
• Solid relational database experience with PostgreSQL, MySQL, or Oracle DB.
  
• Working knowledge of Ballerina is a plus.
  

Key Responsibilities

Solution Design & Implementation

• Gather and analyze functional and non-functional requirements from stakeholders to design orchestration, API, and identity solutions.
  
• Design, install, and configure WSO2 API Manager, WSO2 Micro Integrator, and WSO2 Identity Server (CIAM) across all environments (DEV, UAT, Production, DR).
  
• Architect and build APIs and integration flows connecting core banking systems, ERPs, payment switches, billers, and third-party systems.
  
• Develop and deploy APIs using Java, Kubernetes/OpenShift, and XML-based message processing (XSLT, XPath).
  
• Own the end-to-end platform deployment, including containerizing and deploying WSO2 and custom components onto Kubernetes/OpenShift.
  
• Develop and expose secure services/APIs using REST, SOAP, and event-driven patterns, applying OAuth2/JWT and SSO.
  
• Build microservices and backend components using Ballerina and/or Java/Spring Boot.
  
• Design, build, and support SWIFT connectors and messaging integrations (e.g., MT/MX message formats).
  

CIAM & Identity

• Implement Customer Identity and Access Management capabilities, including single sign-on (SSO), multi-factor authentication (MFA), and self-service registration.
  
• Configure federation, custom identity protocols, and adaptive authentication/authorization flows using WSO2 Identity Server.
  
• Ensure CIAM implementations comply with data protection standards such as GDPR and ISO 27001.
  

Platform Engineering & DevOps

• Set up and maintain CI/CD pipelines using Jenkins, GitLab, Docker, Kubernetes/OpenShift, and Helm.
  
• Configure high availability (HA) and disaster recovery (DR) for hybrid deployments.
  
• Implement monitoring, logging, and auditing capabilities using the ELK stack.
  

Quality, Documentation & Training

• Write and execute test cases (e.g., using Cucumber) to validate APIs.
  
• Produce solution architecture documents, technical specifications, and administration guides.
  
• Deliver training and workshops to client technical teams and provide post-go-live support.