Staff Engineer - Fabric Gateway

Overview

Staff Engineer to join the Fabric Gateway team, building Postman's protocol-agnostic control plane that routes, governs, and observes how AI agents, LLMs, MCP servers, CLIs, and internal APIs interact, deployed in Postman's cloud, the customer's VPC, or a hybrid of both.

What you'll do

• Drive the technical vision and architecture for Fabric Gateway across its registry, control plane, data plane, and SDKs and connectors.
• Design and build a high-performance, horizontally scalable data plane that routes HTTP, gRPC, MCP, and A2A traffic with minimal added latency.
• Build the policy engine that authenticates, authorizes, classifies, and logs every agent interaction before it happens, with fail-closed behavior when policy cannot be verified.
• Own reliability features on the hot path: fallback chains, circuit breakers, health-aware routing, rate limiting, and weighted traffic distribution across LLM and API providers.
• Design secure credential brokering so upstream secrets are injected by the gateway and never exposed to agents.
• Shape the extensibility model (plugins, policy instances, and connectors) so customers and internal teams can extend the gateway safely.
• Make the gateway operable at enterprise scale across Postman-hosted, self-hosted (Kubernetes or VM), and hybrid deployments, including upgrades, configuration distribution, and multi-region data planes.
• Partner with Observability and Data teams on real-time token metering, cost controls, traces, analytics, and audit-ready logs.
• Investigate complex production and customer issues, identify root causes, and drive long-term corrective actions.
• Mentor senior engineers, lead design reviews, and help raise the technical bar across the organization.

What you'll need

• 10+ years of software engineering experience with significant exposure to distributed systems and cloud-native architectures.
• Deep experience building or operating API gateways, reverse proxies, service meshes, or other latency-sensitive networking infrastructure (for example Envoy, NGINX, Kong, Apigee, Istio, or custom proxies).
• Strong understanding of networking and protocols, including HTTP/1.1, HTTP/2, gRPC, WebSockets, streaming responses, TLS, and connection management.
• Hands-on expertise in authentication and authorization at scale: OAuth 2.0, OIDC, JWT, mTLS, API keys, secrets management, and fine-grained policy (for example OPA or Cedar).
• Experience designing multi-tenant SaaS systems with strong isolation, and shipping software that customers run in their own environments.
• Strong programming experience in Go, Rust, Java, C++, Node.js, or similar, with a track record of performance profiling and optimization.
• Experience with Kubernetes, containers, and at least one major cloud provider (AWS, GCP, or Azure).
• Ability to influence technical direction across teams without direct authority.
• Strong communication skills and a data-driven approach to problem-solving.

Nice to have

• Hands-on experience with Model Context Protocol (MCP), agent-to-agent (A2A) protocols, or LLM provider APIs and their streaming, token, and rate-limit semantics.
• Experience building AI gateways, LLM routers, or agent infrastructure, including token metering, cost controls, prompt or response guardrails, and PII classification.
• Background in building control planes and configuration distribution systems (for example xDS-style APIs) for fleets of data-plane nodes.
• Experience with plugin or extension runtimes such as WebAssembly, Lua, or sandboxed scripting.
• Experience in security-sensitive domains: zero-trust architectures, least-privilege access, audit logging, and compliance programs such as SOC 2, ISO 27001, or HIPAA.
• Contributions to open-source networking, gateway, or AI infrastructure projects.

Details

• Location: Bangalore, India.
• Work mode: office-based; employees currently work in the office three days a week and will transition to five days per week by the end of the year.