Senior Technical Product Manager, API Traffic and Enforcement

San Francisco · USD 181,220-217,464 · 5+ years experience · Hybrid · Posted Sep 22, 2026

At a glance

As a Senior Technical Product Manager on Fastly's Core Infrastructure Product Management team, you will own how Fastly defines what traffic is allowed and how traffic is held to that definition.
This role owns Fastly's answer to the challenges enterprises face with rapid API traffic growth, AI agents discovering and calling APIs directly, and new endpoint types like MCP servers.
You will report to the Director of Core Infrastructure Product Management and have real latitude to set direction.

Own the positive model end to end: drive the strategy and roadmap for defining what traffic is allowed, taking customers from discovery to describing intended behavior precisely and enforcing it in the request path.
Make API discovery tell customers something they didn't know by owning discovery and inventory across the API surfaces customers actually operate.
Turn schemas into enforceable contracts by owning schema definition, generation, and validation, producing a spec worth enforcing against and keeping it accurate as APIs change.
Own enforcement in the request path including ACLs, allowlists, rate limiting, request-path controls, and the gateway that applies them as primitives other products can adopt.
Make agents first-class by defining how Fastly identifies, authorizes, and holds AI agents and MCP servers to allowed behavior.
Take and defend clear positions with evidence-based points of view on how traffic should be described and constrained, driving decisions across engineering, product, and partner teams.

5+ years in product management or technical product leadership, ideally on API, security, or platform infrastructure products.
API and request-path fluency, understanding how API traffic is described, validated, and constrained including schemas, specs, gateway behavior, and allowlist models versus detection-based ones.
Platform thinking with a track record of building capabilities that serve more than one product or team such as shared primitives, enforcement points, or controls.
Execution focus with a demonstrated bias for shipping, being hands-on, and comfortable owning outcomes in ambiguous, fast-moving conditions.
Conviction and influence to form clear, evidence-based positions and defend them across engineering and product partners while building alignment.
Communication and presentation skills to move between deep technical discussion with engineers and crisp framing for customers and executives.

Hands-on work with API gateways and OpenAPI-driven validation, schema generation from live traffic, and drift detection.
Experience with the agentic traffic stack including workload and agent identity (SPIFFE/WIMSE, mTLS), OAuth 2.1 for delegated agent authorization, and agent protocols like MCP and its authorization spec.
Request-path enforcement at scale using WASM filters, eBPF, or policy engines like OPA and Rego.
Startup or 0-to-1 experience building API, security, or infrastructure products in a fast-moving environment.

Open to Hybrid and Remote Work Locations within the US.
Strong preference for Hybrid near a local office.
Position may require travel as required by your role or requested by your manager.

Show all 14 skills