Job Description
We are currently looking for a API Authentication Developer (PIVOT) for a 100% remote position supporting a large federal government healthcare modernization project. This role will support multiple teams focused on API Management and Security, combining API design and governance, AWS and Kubernetes platform engineering, identity and access management, DevOps/GitOps automation, observability, and hands-on operational support.
The engineer will work closely with technical leads and cross-functional stakeholders to establish API and platform standards, maintain API contracts, strengthen security practices, and support reliable environment promotion, validation, and operational troubleshooting across teams.
The candidate must reside within the continental US.
Responsibilities
- Define API design standards and review APIs for consistency, usability, versioning, deprecation, and backward compatibility.
- Author, maintain, and govern OpenAPI Specification contracts and associated API configuration and validation standards.
- Build and support Kubernetes resources, including Deployments, Services, Ingress/Gateway API objects, ConfigMaps, Secrets, and NetworkPolicies.
- Implement CI/CD and GitOps practices, automated configuration and specification validation, environment promotion, rollback processes, API metering, and usage analytics.
- Implement authentication and authorization patterns, including JWT issuance and validation, claims mapping, token modification, key rotation, AD/LDAP integration, certificates, TLS/mTLS, DNS, and network security.
- Instrument and troubleshoot platform environments using logs, metrics, traces, dashboards, and operational reporting while addressing Linux, container runtime, networking, and performance issues.
- Take on additional tasks and responsibilities as needed to support team objectives and ensure the success of the project.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related technical discipline, or equivalent relevant professional experience.
- Hands-on experience with API management and API security, including AWS API Gateway, JSON-based APIs, API contracts, authentication, authorization, and accounting.
- Experience with identity and directory technologies, including Active Directory (AD), LDAP directory modeling, JWT-based authentication, claims, tokens, and access-control patterns.
- Experience supporting Kubernetes-based environments, API gateways, Linux systems, containerized workloads, networking, certificates, and SSL/TLS.
- Strong analytical and troubleshooting skills with the ability to diagnose complex API, platform, security, networking, and performance issues.
- Strong communication and collaboration skills with the ability to work across technical teams and help establish consistent API, security, and platform standards.
Additional Qualifications
- Experience with AWS workloads, GitOps technologies such as Argo CD or Flux, and gateway or service-mesh technologies such as NGINX, Envoy, or Istio.
- Experience with observability and monitoring technologies such as Datadog, Splunk, Prometheus/Grafana, ELK/OpenSearch, or OpenTelemetry.
- Knowledge of OWASP practices, TLS/mTLS, secrets management, API security, audit logging, and experience mentoring teams or establishing platform engineering standards.
Security Clearance Requirements
- U.S. Citizenship is required.
- All selected candidates must successfully complete a background check.
- Ability to obtain and maintain a Government/Public Trust clearance, including required fingerprinting, when required for the position.
Benefits
- Medical/Dental/Vision
- 401k with Employer Match
- PTO + Federal Holidays
- Corporate Laptop
- Training Opportunities
- Remote Opportunity
VetsEZ is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected veteran status.
Sorry, we are unable to offer sponsorship at this time.
