Apply now
Master'sElectronics, Embedded Systems & Telecom Applications open

Master’s in API Design Engineering

Online master's programme of 1,900 hours in API design engineering, structured in 12 modules covering REST design, OpenAPI specification, GraphQL and gRPC, asynchronous and event-driven APIs, API security, versioning, gateways and API management, implementation and testing, domain-specific APIs and API governance, with an assigned technical tutor.

Duration1900 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma
Enrol now View syllabus Ask an advisor
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Design APIs centred on the needs of their consumers.

02

Apply good REST design practice and specification with OpenAPI.

03

Select the right API style among REST, GraphQL, gRPC and events.

04

Protect APIs with standard authentication and authorisation mechanisms.

05

Manage the versioning and evolution of APIs without breaking consumers.

06

Deploy APIs behind gateways with management policies.

07

Develop a complete API with its specification, testing and governance.

Profile

Who it's for

  • API architects
  • Backend developers
  • Integration engineers
  • API product managers
  • Application security engineers
  • Platform engineers
  • Engineering or science graduates looking to move into banking and fintech
Standards & tools

What you'll work with

  • OpenAPI Specification 3.1 (HTTP API description format)
  • IETF RFC 9110 (HTTP semantics)
  • IETF RFC 6749 (OAuth 2.0 authorisation framework)
  • IETF RFC 9457 (Problem Details for HTTP APIs)
  • AsyncAPI 3.0 (event-driven API specification)
  • IETF RFC 7519 (JSON Web Token)
  • OWASP API Security Top 10 (most critical API security risks)
  • Directive (EU) 2015/2366 (PSD2, payment services)
  • Swagger Editor
  • Postman
  • Stoplight Spectral
  • Kong Gateway
  • k6
Syllabus

12 modules · 1900 h

  1. 1.1What an API is and who consumes it
  2. 1.2API styles: REST, RPC, events and queries
  3. 1.3Consumer-oriented design
  4. 1.4The API as a product
  5. 1.5The API life cycle
  6. 1.6Design-first versus code-first
  7. 1.7Corporate style guides
  8. 1.8Developer experience
  9. 1.9Adoption metrics
  10. 1.10Case study: analysis of a reference public API
  1. 2.1Resources and URI modelling
  2. 2.2HTTP methods and semantics
  3. 2.3Status codes
  4. 2.4Representations and content negotiation
  5. 2.5Pagination, filtering and sorting
  6. 2.6Idempotency and optimistic concurrency
  7. 2.7Hypermedia and HATEOAS
  8. 2.8Error handling with Problem Details
  9. 2.9HTTP caching headers
  10. 2.10Workshop: designing the API for a booking system
  1. 3.1Structure of OpenAPI 3.1
  2. 3.2Schemas with JSON Schema
  3. 3.3Components and reuse
  4. 3.4Interactive documentation with Swagger UI
  5. 3.5Linting with Spectral
  6. 3.6Client and server code generation
  7. 3.7Mocks from the specification
  8. 3.8Request validation
  9. 3.9Managing specifications in repositories
  10. 3.10Practical exercise: complete OpenAPI specification with linting
  1. 4.1Schema and types in GraphQL
  2. 4.2Queries, mutations and subscriptions
  3. 4.3The N+1 problem and DataLoader
  4. 4.4Schema federation
  5. 4.5Serialisation with Protocol Buffers
  6. 4.6gRPC services and streaming
  7. 4.7gRPC in microservices
  8. 4.8Comparison of styles
  9. 4.9Transcoding between REST and gRPC
  10. 4.10Lab: gRPC service with bidirectional streaming
  1. 5.1Fundamentals of event-driven architectures
  2. 5.2Specification with AsyncAPI 3.0
  3. 5.3Webhooks and their reliability
  4. 5.4Messaging with Kafka and RabbitMQ
  5. 5.5The CloudEvents standard format
  6. 5.6Delivery guarantees and idempotency
  7. 5.7Schemas and schema registry
  8. 5.8Transactional outbox pattern
  9. 5.9Server-Sent Events and WebSockets
  10. 5.10Practical exercise: AsyncAPI documentation for an ordering system
  1. 6.1OWASP API Security Top 10
  2. 6.2OAuth 2.0 and its flows
  3. 6.3Identity with OpenID Connect
  4. 6.4JWT tokens and their validation
  5. 6.5Object-level authorisation
  6. 6.6Rate limiting
  7. 6.7Input validation
  8. 6.8mTLS between services
  9. 6.9Secrets and key management
  10. 6.10Lab: protecting an API with OAuth 2.0
  1. 7.1Backward compatibility
  2. 7.2Versioning strategies
  3. 7.3Breaking changes and how to manage them
  4. 7.4Deprecation and retirement
  5. 7.5Contract testing with Pact
  6. 7.6Automatic change detection
  7. 7.7Communication with consumers
  8. 7.8Changelog and release notes
  9. 7.9Life cycle governance
  10. 7.10Workshop: migration plan to a major version
  1. 8.1Functions of an API gateway
  2. 8.2Kong, Apigee and Azure API Management
  3. 8.3Traffic policies
  4. 8.4Developer portals
  5. 8.5API monetisation
  6. 8.6Usage analytics
  7. 8.7Key and plan management
  8. 8.8API gateway versus service mesh
  9. 8.9Multi-cloud gateway deployment
  10. 8.10Practical exercise: configuring Kong with rate limiting
  1. 9.1FastAPI, Spring Boot and Express frameworks
  2. 9.2Schema-based validation
  3. 9.3Contract and component testing
  4. 9.4Load testing with k6
  5. 9.5Automated security testing
  6. 9.6API observability
  7. 9.7Performance and latency
  8. 9.8Documentation kept in sync with the code
  9. 9.9Integration into pipelines
  10. 9.10Lab: FastAPI API with automated tests
  1. 10.1Open banking APIs and PSD2
  2. 10.2Healthcare APIs with HL7 FHIR
  3. 10.3IoT and device APIs
  4. 10.4Industrial APIs with OPC UA
  5. 10.5Public administration APIs
  6. 10.6APIs for artificial intelligence
  7. 10.7Payment APIs
  8. 10.8Open data APIs
  9. 10.9Sector interoperability standards
  10. 10.10Case study: analysis of a FHIR API
  1. 11.1The enterprise API programme
  2. 11.2Catalogue and discovery
  3. 11.3Design review
  4. 11.4Standards and style guides
  5. 11.5API quality indicators
  6. 11.6API platform teams
  7. 11.7Partner ecosystems
  8. 11.8Legal aspects and terms of use
  9. 11.9Regulatory compliance of APIs
  10. 11.10Workshop: corporate API style guide
  1. 12.1Definition of the domain and consumers
  2. 12.2API design
  3. 12.3Formal specification in OpenAPI
  4. 12.4Security and governance
  5. 12.5Service implementation
  6. 12.6Testing and documentation
  7. 12.7Deployment behind a gateway
  8. 12.8Conclusions on the API design
  9. 12.9Thesis report
  10. 12.10Master's Thesis: defence before a panel
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: you progress at your own pace within the intake, so you can combine it with your job.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is Swagger Editor, Postman, Stoplight Spectral, Kong Gateway and k6, in free, academic or evaluation versions. Practical work is based on real procedures: designing and specifying APIs with OpenAPI and AsyncAPI, protecting APIs with OAuth 2.0 and rate limiting, and running contract and load tests on services. Assessment is continuous by module, plus the final Master's Thesis.

Standards covered: OpenAPI Specification 3.1, IETF RFC 9110, IETF RFC 6749, IETF RFC 9457, AsyncAPI 3.0, IETF RFC 7519, OWASP API Security Top 10, Directive (EU) 2015/2366.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of OpenAPI Specification 3.1, IETF RFC 9110 and IETF RFC 6749 applied to real cases, not as a theoretical annex.
Industry software:Swagger Editor, Postman, Stoplight Spectral, Kong Gateway and k6, in free, academic or evaluation versions.
Master's Thesis with defence:A complete API with its specification, implementation, testing and governance, defended before a panel.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Domain and API design
Define the domain and its consumers and design the API.
OpenAPI specification
Write the formal specification in OpenAPI with linting.
Security and governance
Protect the API with OAuth 2.0 and apply governance rules.
Implementation and gateway
Implement and test the service and deploy it behind a gateway.
Master's Thesis
Document the API design and conclusions, defended before a panel.
Career opportunities

Where this takes you

API architectBackend developerIntegration engineerAPI product managerApplication security engineerPlatform engineer
Admissions & scholarships

Requirements

  • University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
  • Internet connection and a computer capable of running the programme's software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

Apply now Scholarships
FAQ

Frequently asked questions

The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with Swagger Editor, Postman, Stoplight Spectral, Kong Gateway and k6, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.

A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the software and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Keep exploring

Related programmes

See all in Electronics, Embedded Systems & Telecom
Master's9,970 $

Master’s in RF, Antennas and Communications Engineering

Online master's programme of 1,900 hours in RF, antennas and communications engineering: 12 modules covering propagation, transmission lines and microwave networks, antenna theory and arrays, RF…

1900 hOnlineElectronics, Embedded Systems & Telecom
Master's8,850 $

Master’s in Aerospace/Defence Compliance

Online master's programme of 1,900 hours in aerospace and defence compliance. 12 modules covering the aerospace and defence regulatory framework, systems engineering, certifiable software, sector quality,…

12–14 monthsOnlineElectronics, Embedded Systems & Telecom
Master's7,730 $

Master’s in Digital Twins for Devices

Online master's programme of 1,900 hours in digital twins for devices (edge-cloud sync, simulation and continuous testing). 12 modules covering digital twin concepts, physical and data-driven…

12–14 monthsOnlineElectronics, Embedded Systems & Telecom
Master’s in API Design EngineeringEnrol
Related programmes

More in Electronics, Embedded Systems & Telecom

Master’s in Reliability, Derating and Design for ManufacturingView programme →Master’s in IoT/OT Cybersecurity (IEC 62443)View programme →Master’s in Railway ElectronicsView programme →Master’s in Security, Safety and Compliance EngineeringView programme →Master’s in Real-Time Middleware and Communication EngineeringView programme →Master’s in Marine Electronics EngineeringView programme →

All Electronics, Embedded Systems & Telecom programmes → · How to apply · Fees & financing · Scholarships

Scroll to Top
SEIUM – Institute of Advanced Engineering
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.