Additional Information
FactSet creates flexible, open data and software solutions for over 200,000 investment professionals worldwide, providing instant access to financial data and analytics that investors use to make crucial decisions.
At FactSet, our values are the foundation of everything we do. They express how we act and operate , serve as a compass in our decision-making, and play a big role in how we treat each other, our clients, and our communities. We believe that the best ideas can come from anyone, anywhere, at any time, and that curiosity is the key to anticipating our clients' needs and exceeding their expectations.
About FactSet
FactSet's product suite of smart analytics and unique data empower the world's leading financial service professionals to make more informed decisions every day. At our heart is an inclusive community unified by the spirit of going above and beyond. Our philosophy is to embrace diversity, and that our best ideas can come from anyone, anywhere, at any time. We continuously look ahead to advance the future and technology of our industry, by rolling up our sleeves to solve tough problems together, and by learning from our successes, as well as our failures.
In this role, you will work with team of engineers who are responsible for the design, development and maintenance of our API Gateway. This team powers centralized routing, service discovery, rate limiting, and policy enforcement for MCP traffic and other internal APIs. You will design, implement, and operate dual‑authentication and token‑exchange capabilities, evolve gateway policies, drive multi‑region reliability, and automate delivery on AWS. This role spans design through operations with a strong focus on performance, security, and developer experience.
JOB REQUIREMENTS:
Bachelor's degree, or higher, in Computer Science or a related technical field
7+ years' experience of building backend/platform systems , with substantial experience in traffic management or API platforms.
Strong GO development and Lua experience on NGINXX/OpenResty
Deep hands‑on experience with Docker/Kubernetes and AWS (EKS, EC2, ALB/NLB, Route 53, VPC/private networking; CloudWatch/CloudTrail).
Infrastructure‑as‑code and CI/CD pipelines
Strong Linux fundamentals and scripting (Bash/Python); excellent debugging and performance tuning skills.
Clear communication, ownership mindset, and a security‑first approach.
Address production issues in a timely manner
JOB RESPONSIBILITIES:
Design, implement, and operate gateway capabilities: routing, service discovery, rate limiting/quotas, and policy enforcement.
Build gateway extensions and filters in Lua (NGINX/OpenResty) and GO for authN/Z, token exchange, request shaping, and telemetry.
Implement dual‑auth support and seamless token exchange (OAuth2/OIDC, RFC 8693), including validation, caching, replay protection, and robust trust store management.
Establish mTLS to backends and standardize API registration and onboarding patterns; integrate with discovery (Kubernetes/EKS, Consul).
Automate deployments with IaC and CI/CD (Terraform/CloudFormation, Helm, GitHub Actions/Jenkins); use blue/green and canary releases with signed artifacts.
Plan and run hybrid/multi‑region topologies on AWS (active‑active or active‑standby), including global routing (Route 53/GLB), health checks, failover, and DR/chaos drills.
Lead patching and upgrades with minimal downtime; define autoscaling policies, capacity plans, and incident response playbooks.
Create onboarding guides, example configurations, and self‑service workflows to accelerate adoption by MCP servers/agents and other internal services.
Participate in code-reviews and proactively take ownership of PR's and make sure to catch all security vulnerabilities
Proper collaboration and interaction with multiple teams across FactSet and respond to stakeholder queries in a timely manner