At NCS Australia, we believe in doing technology services better. Our commitment to quality, focus on people, and willingness to challenge traditional thinking set us apart. Our team brings this belief to life by partnering with our clients and communities to make tomorrow together.
We are committed to creating an environment that prioritises innovation, collaboration, and purposeful work. Our diverse team is empowered to make a meaningful impact with curiosity, creativity and resilience to shape better outcomes. Join us and accept the challenge of creating a better tomorrow.
Job DescriptionWe are seeking a Senior GCP & Apigee X Engineer to join a specialized platform team building a secure, enterprise-grade AI Gateway to serve Generative AI capabilities across the organization.
In this hands-on engineering role, you will take ownership of design, build, and production-readiness across Apigee X and Google Cloud Platform. You will design API proxies and shared flows, establish secure private connectivity to GCP Vertex AI, automate platform infrastructure with Terraform and GitLab CI/CD, and build robust telemetry to support FinOps token attribution and operational observability.
We are open to a Permanent or Contract option for this role. So please apply if you are looking for either.
Qualifications1. Apigee X & AI Gateway Development
- Design, build, and maintain Apigee X API proxies, shared flows, XML policies, JavaScript callouts, API products, and key-value configurations.
- Implement core gateway capabilities: OAuth 2.0/OIDC authentication, token exchange, model-based routing, request/response transformations, rate-limiting, token quotas, and fault handling.
- Translate consumer-facing payload contracts into provider-specific schemas for Generative AI models.
2. GCP Foundation & Secure Connectivity
- Build and manage GCP platform infrastructure supporting gateway paths: IAM, Cloud KMS, Secret Manager, Cloud Run, Cloud Logging, and DNS.
- Implement private, secure networking between Apigee X, Vertex AI, and enterprise networks using Private Service Connect (PSC), Internal Load Balancers (ILB), and Service Perimeters.
- Configure Workload Identity, federated authentication (Entra ID/UAM), and least-privilege service-account mappings for machine-to-machine workloads.
3. Automation, FinOps & Observability
- Automate platform delivery using Terraform and GitLab CI/CD pipelines for repeatable promotion across Dev, Test, and Production environments.
- Generate structured telemetry for request volumes, latency, error rates, model quotas, prompt token usage, and guardrail enforcement.
- Support FinOps workflows by ensuring detailed usage data reconciles cleanly across consumer apps, model providers, and GCP billing exports.
4. Production Readiness & Operations
- Lead technical testing phases (SIT/UAT, OAT, penetration testing remediation, performance validation, and cutover execution).
- Produce comprehensive operational runbooks, service-desk knowledge base articles, and handover materials for steady-state BAU support.
Essential:
- Apigee X Expertise: Strong hands-on experience designing, engineering, and operating Apigee X (or Apigee Edge) in enterprise environments.
- GCP Infrastructure & Security: Deep experience across GCP platform services (IAM, Cloud KMS, Secret Manager, Cloud Run, Cloud Logging) and cloud networking (VPC, Private Service Connect, ILB, Private Service Access).
- Vertex AI Integration: Practical experience integrating Vertex AI or managed GCP ML services through secure enterprise platform paths.
- Identity & Security Protocols: Strong mastery of REST, OpenAPI, OAuth 2.0, OIDC, JWT validation, and federated identity integration.
- Infrastructure as Code (IaC): Deep proficiency with Terraform and modern GitLab CI/CD pipelines.
Desirable:
- Exposure to Apigee LLM policies (token quotas, prompt limits, model operation groups) or Google Cloud Model Armor / Cloud DLP.
- Experience with enterprise observability toolsets (Dynatrace, ELK, or Cortex XSIAM) or BigQuery log analytics.
- Familiarity with FinOps cost-allocation labeling, billing exports, or consumer-level chargeback models for AI workloads.
- Exposure to cross-cloud AI gateway patterns (e.g., AWS Bedrock, AWS SigV4) or Model Context Protocol (MCP) / agentic AI frameworks.
Why NCS?
This is a place for people who like to get stuck in, bring ideas to life and make things happen. You'll work alongside experienced people who care about what they do, contribute to meaningful work and have the support to keep learning and grow your career. Whether you want to deepen your expertise, explore something new or take your career in a different direction, there's room to make it your own. We value Adventure, Excellence, Integrity, Ownership and Unity - bringing curiosity, collaboration and accountability to the way we work with our clients and each other.
Ready to make extraordinary happen?
We'd love to hear from you.
We celebrate diversity and inclusion
We value different perspectives, experiences and strengths our people bring. We're committed to an inclusive workplace where everyone has the opportunity to contribute, grow and succeed, and to providing equal employment opportunities and reasonable adjustments throughout the recruitment process.
Important information
Applicants will need valid Australian work rights and may be required to undergo relevant background, probity and police checks.
Agencies: NCS accepts candidate submissions only from agencies on our preferred supplier panel through the NCS Agency Portal.
Skills Required
- Strong hands-on experience designing, engineering, and operating Apigee X or Apigee Edge in enterprise environments
- Deep experience with GCP IAM, Cloud KMS, Secret Manager, Cloud Run, Cloud Logging, VPC, Private Service Connect, Internal Load Balancers, and Private Service Access
- Practical experience integrating Vertex AI or managed GCP machine learning services through secure enterprise platform paths
- Strong mastery of REST, OpenAPI, OAuth 2.0, OIDC, JWT validation, and federated identity integration
- Deep proficiency with Terraform and modern GitLab CI/CD pipelines
- Experience with Apigee LLM policies, Google Cloud Model Armor, or Cloud DLP
- Experience with Dynatrace, ELK, Cortex XSIAM, or BigQuery log analytics
- Familiarity with FinOps cost allocation, billing exports, or consumer-level AI workload chargeback models
- Exposure to AWS Bedrock, AWS SigV4, Model Context Protocol, or agentic AI frameworks
- Valid Australian work rights
- Ability to undergo relevant background, probity, and police checks
What We Do
NCS in Australia is reinventing technology services from the inside out. We provide advisory, design, build and managed services to our clients, with unrivalled service, attention and understanding every step of the way. We understand day 1001 is just an important as day 1, and we collaborate with clients, striving to provide adaptive approaches, outcomes and thinking by keeping our eye on tomorrow and the days after tomorrow. Our diverse workforce of around 1,300 people has delivered a wealth of large-scale, mission-critical, and multi-platform outcomes for governments and businesses nationally. We are the Australian arm of the pan-APAC technology leader NCS Group, a subsidiary of Singtel Group. Combining the experience and expertise of its 13,000-strong team across 57 specialisations, NCS provides differentiated and end-to-end technology services to clients with its capabilities in digital, data, cloud and platforms, as well as core offerings in application, infrastructure, engineering and cybersecurity. NCS also believes in building a strong partner ecosystem with leading technology players, research institutions and start-ups to support open innovation and co-creation. For more information about NCS Australia, visit ncs.co/en-au or contact our team today. To learn more about NCS Group, visit ncs.co.
