Senior Technical Product Manager, API Traffic and Enforcement

About the role

Fastly's Core Infrastructure Product Management team is hiring a Senior Technical Product Manager to define what traffic is allowed and how it is enforced. The role covers the API surface end to end: discovery and inventory of APIs, their schemas, the API gateway, and enforcement primitives such as ACLs, allowlists, rate limiting and request-path controls. It reports to the Director of Core Infrastructure Product Management and has latitude to set direction.

Key responsibilities

• Drive the strategy and roadmap for defining what traffic is allowed, taking customers from not knowing what APIs they run to enforcing it in the request path.
• Own API discovery and inventory across the APIs customers actually operate.
• Own schema definition, generation and validation, producing specs worth enforcing even when customers cannot provide accurate ones.
• Own enforcement in the request path: ACLs, allowlists, rate limiting, and the gateway that applies them, as reusable primitives.
• Define how agents calling APIs and MCP servers are identified, authorized and held to allowed behavior.
• Take evidence-based positions on how traffic should be described and constrained, driving decisions across engineering, product and partner teams.

Required profile

• 5+ years in product management or technical product leadership, ideally on API, security or platform infrastructure products.
• Fluency in how API traffic is described, validated and constrained, and understanding of allowlist versus detection-based models.
• Track record of building capabilities shared across products or teams.
• Bias for shipping, hands-on ownership of outcomes in ambiguous, fast-moving situations.
• Ability to form and defend clear positions and communicate clearly with engineers, customers and executives.

Preferred experience

• API gateways and OpenAPI-driven validation, including schema generation and drift detection.
• Agentic traffic stack: workload and agent identity (SPIFFE/WIMSE, mTLS), OAuth 2.1, and agent protocols such as MCP.
• Request-path enforcement at scale: WASM filters, eBPF or policy engines like OPA and Rego.
• Startup or 0-to-1 experience building API, security or infrastructure products.

What we offer

• Estimated salary of $181,220 to $217,464, with possible equity and discretionary bonus participation.
• Medical, dental and vision insurance, family planning and mental health support, Employee Assistance Program, and life, disability and accident insurance.
• Flexible vacation policy, up to 18 days of accrued paid sick leave, 12 paid local holidays and 12 paid wellness days.
• 401(k) with company match and an employee stock purchase program.
• Hybrid and remote options, with a strong preference for hybrid near a local office; travel as required by the role.