Senior Technical Product Manager, API Traffic and Enforcement

San Francisco, CA·Posted today

<div class="content-intro">Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including GitHub, Yelp, Paramount, and JetBlue. We're building a more trustworthy Internet. Come join us.</div>Posting Open Date: Sep 21st, 2026 Anticipated Posting Close Date*: Nov 30, 2026 *Job posting may close early due to the volume of applicants. Senior Technical Product Manager, API Traffic and Enforcement APIs are how software talks to software, and the volume and variety of that traffic is growing rapidly. AI agents now discover and call APIs directly, and MCP servers are a new kind of endpoint with the same questions attached: what exists, what it's supposed to do, and who is allowed to call it. Enterprises are challenged to respond to those questions. This role owns Fastly's answer. As a Senior Technical Product Manager on Fastly's Core Infrastructure Product Management team, you will own how Fastly defines what traffic is allowed and how traffic is held to that definition. That means our customers' API surface end to end – discovery and inventory of the APIs they actually run, the schemas that describe intended behavior, and the API gateway itself – and the enforcement primitives underneath it, including ACLs, allowlists, rate limiting, and the request-path controls that turn a declared model into something the platform actually enforces. Much of security is about detecting the bad. Your charter is the other half: defining what good looks like and enforcing it. Customer APIs are the first and largest surface for the positive model, and the primitives you own are the ones other products adopt as that model extends across the platform. This role reports to the Director of Core Infrastructure Product Management and has real latitude to set direction. What You'll Do: <ul> <li style="color: #000000 !important;">Own the positive model end to end: drive the strategy and roadmap for defining what traffic is allowed. You will take customers from not knowing what APIs they run, to describing intended behavior precisely, to enforcing it in the request path.</li> <li style="color: #000000 !important;">Make API discovery tell customers something they didn't know: own discovery and inventory across the API surfaces customers actually operate. Discovery is where most customers start, and how good it is determines whether they trust anything built on top of it.</li> <li style="color: #000000 !important;">Turn schemas into enforceable contracts: own schema definition, generation, and validation. When customers can't hand you an accurate spec for their own APIs, the product has to produce one worth enforcing against, then keep it accurate as their APIs change.</li> <li style="color: #000000 !important;">Own enforcement in the request path: ACLs, allowlists, rate limiting, and the controls that turn a declared model into something the platform enforces, along with the gateway that applies them. Build these as primitives other products can adopt, not features scoped to one surface.</li> <li style="color: #000000 !important;">Make agents first-class: agents calling APIs are a new kind of client, and MCP servers are a new kind of endpoint. Define how Fastly identifies them, authorizes them, and holds them to allowed behavior.</li> <li style="color: #000000 !important;">Take and defend clear positions: bring evidence-based points of view on how traffic should be described and constrained, and drive them to decisions across engineering, product, and partner teams. You will bring structure to ambiguous problems and move decisions forward earlier.</li> </ul> What We're Looking For:  <ul> <li style="color: #000000 !important;">Experience: 5+ years in product management or technical product leadership, ideally on API, security, or platform infrastructure products.</li> <li style="color: #000000 !important;">API and request-path fluency: you understand how API traffic is described, validated, and constrained — schemas and specs, gateway behavior, and the difference between allowlist models and detection-based ones. You can reason about where each fits and what it costs to run.</li> <li style="color: #000000 !important;">Platform thinking: a track record of building capabilities that serve more than one product or team. Shared primitives, enforcement points, or controls others build on, rather than features scoped to a single surface.</li> <li style="color: #000000 !important;">Execution focus: a demonstrated bias for shipping. You are hands-on and comfortable owning outcomes in ambiguous, fast-moving conditions rather than waiting for perfect clarity.</li> <li style="color: #000000 !important;">Conviction and influence: the ability to form clear, evidence-based positions and defend them across engineering and product partners, including pushing back constructively. You build alignment without relying on authority.</li> <li style="color: #000000 !important;">Communication and presentation: a clear communicator who can move between deep technical discussion with engineers and crisp framing for customers and executives, with genuine curiosity about the "why" behind a customer's problem. You can stand up in front of a room, make a case, and hold it under questioning.</li> </ul> We’ll be super impressed if you have experience in any of these:  <ul> <li style="color: #000000 !important;">Hands-on work with API gateways and OpenAPI-driven validation: schema generation from live traffic, drift detection as APIs change, and the gap between the spec a team publishes and what their API actually does.</li> <li style="color: #000000 !important;">The agentic traffic stack — workload and agent identity (SPIFFE/WIMSE, mTLS), OAuth 2.1 for delegated agent authorization, and agent protocols like MCP and its authorization spec.</li> <li style="color: #000000 !important;">Request-path enforcement at scale: WASM filters, eBPF, or policy engines like OPA and Rego.</li> <li style="color: #000000 !important;">Startup or 0-to-1 experience building API, security, or infrastructure products in a fast-moving environment.</li> </ul> Work Hours: This position will require you to be available during core business hours.  Work Location(s) & Travel Requirements:  This position is open to Hybrid And Remote Work Locations. The preferred locations for this position are: <ul> <li style="color: #000000 !important;">San Francisco, CA</li> <li style="color: #000000 !important;">New York, NY</li> <li style="color: #000000 !important;">Denver, CO</li> </ul> Fastly currently embraces a largely hybrid model for most roles which allows employees flexibility to split their time between the office and home.   There is a strong preference for Hybrid near a local office.  However, we may be willing to consider remote candidates within the US. This position may require travel as required by your role or requested by your manager. SF / LA Fair Chance Ordinance Statement Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Salary: The estimated salary range for this position is $181,220.00 to $217,464.00. Starting salary may vary based on permissible, non-discriminatory factors such as experience, skills, qualifications, and location. This role may be eligible to participate in Fastly’s equity and discretionary bonus programs. Benefits: We care about you. Fastly works hard to create a positive environment for our employees, and we think your life outside of work is important too. We support our teams with great benefits that start on the first day of your employment with Fastly. Curious about our offerings?  We offer a comprehensive benefits package including medical, dental, and vision insurance. Family planning, mental health support along with Employee Assistance Program, Insurance (Life, Disability, and Accident), a Flexible Vacation policy and up to 18 days of accrued paid sick leave are there to help support our employees. We also offer 401(k) (including company match) and an Employee Stock Purchase Program. For 2026, we offer 12 paid local holidays, 12 paid company wellness days.  <div class="content-conclusion">Why Fastly? <ul> <li> We have a huge impact. Fastly is a small company with a big reach. Not only do<a class="external-link" href="https://www.fastly.com/customers" target="_blank"> our customers</a> have a tremendous user base, but we also support a growing number of<a class="external-link" href="https://www.fastly.com/open-source/" target="_blank"> open source projects and initiatives</a>. Outside of code, employees are encouraged to share causes close to their heart with others so we can help lend a supportive hand. </li> <li> We value diversity. Growing and maintaining our inclusive and diverse team matters to us. We are committed to being a company where our employees feel comfortable bringing their authentic selves to work and have the ability to be successful -- every day. </li> <li> We are passionate. Fastly is chock full of passionate people and we’re not ‘one size fits all’. Fastly employs authors, pilots, skiers, parents (of humans and animals), makeup geeks, coffee connoisseurs, and more. We love employees for who they are and what they are passionate about. </li> </ul> We’re always looking for humble, sharp, and creative folks to join the Fastly team. If you think you might be a fit please apply! A fully completed application and resume or CV are required when applying. All job applications must be submitted through our official careers site at <a href="http://www.fastly.com/careers">www.fastly.com/about/careers</a>. We will never request sensitive information, such as your Social Security number, bank account or credit card information during the application process. All official communication will come from an @<a href="http://fastly.com">fastly.com</a> or @<a href="http://recruiting.fastly.com">recruiting.fastly.com</a> email address. Fastly is committed to ensuring equal employment opportunity and to providing employees with a safe and welcoming work environment free of discrimination and harassment. Our employment decisions are based on business needs, job requirements and individual qualifications. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, family or parental status, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. Consistent with the Americans with Disabilities Act (ADA) and federal or state disability laws, Fastly will provide reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact your Recruiter, or the Fastly Employee Relations team at <a href="mailto:candidateaccommodations@fastly.com">candidateaccommodations@fastly.com</a> or 501-287-4901.  Fastly collects and processes personal data submitted by job applicants in accordance with our<a class="external-link" href="https://www.fastly.com/privacy" target="_blank"> Privacy Policy</a>. Please see our<a class="external-link" href="https://www.fastly.com/privacy-job-applicants" target="_blank"> privacy notice for job applicants</a>.</div>

Apply for this role