Senior API Security Engineer with Security Clearance
Not Disclosed•ContractorOn-site
location_on6129, Beachway Drive, Lake Barcroft, Fairfax County, Virginia, 22041, United States
About the Team
ECS Federal LLC is the federal segment of a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow. We value attracting and developing top talent, fostering a culture that is engaging, accountable, and mission-driven.
The War Data Platform (WDP) is a key initiative within the U.S. Department of War's (DoW) AI-First strategy introduced in early 2026. The WDP focuses on operational warfighting data and aims to accelerate the deployment of artificial intelligence (AI) on the battlefield. Extending to Unclassified, Secret, and Top Secret environments, the platform supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts.
About the Role
We are seeking a Senior API Security Engineer to work in the National Capital Region, covering the Pentagon, Falls Church, and Fairfax. This position is contingent upon contract award. You will validate boundary controls for AI and machine-learning model APIs, proxy configurations, and external-model connectivity patterns within WDP Core Integration serving environments. Your work applies enterprise API security methodologies to maintain mission assurance posture and operational readiness across all classification enclaves.
In this role, you will partner with Platform One, Cloud One, multi-national engineering teams, and cross-service mission partners to strengthen operational readiness and reinforce deployment consistency. You will conduct structured assessments of external-model integrations, including Amazon Bedrock connectivity patterns, ensuring alignment with enterprise DevSecOps standards. Your efforts will directly support Tier-4 incident-response actions by providing authoritative API security evidence and remediation guidance required for operational continuity.
Hiring Process
Please note that this position is contingent upon contract award. Candidates must possess a current Secret security clearance with the ability to obtain and maintain a Top Secret (TS) clearance with Sensitive Compartmented Information (SCI).
Equal Opportunity
ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis of any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, or local jurisdiction law.
Work location
Work model: On-site
6129, Beachway Drive, Lake Barcroft, Fairfax County, Virginia, 22041, United States
Lake Barcroft, Virginia
Key Responsibilities
- check_circleValidate boundary controls for AI and machine-learning model APIs within War Data Platform environments
- check_circleApply API security methodologies using Kong Gateway, NGINX, and Kubernetes to detect misconfigurations
- check_circleConduct structured assessments of external-model integrations including Amazon Bedrock connectivity patterns
- check_circleProduce mission-critical deliverables including API boundary-control assessments and policy-compliance reports
- check_circleCollaborate with multi-national engineering teams to strengthen operational readiness and deployment consistency
- check_circleSupport Tier-4 incident-response actions by providing authoritative API security evidence and remediation guidance
- check_circleReview authentication flows, throttling configurations, and ingress/egress controls for model endpoints
- check_circlePerform change-approval activities by reviewing configuration updates and validating security impacts
Requirements
- verifiedCurrent Secret security clearance with ability to obtain Top Secret (TS) with Sensitive Compartmented Information (SCI)
- verifiedIAT II-level security certification (CompTIA Security+ CE, CompTIA CySA+, CompTIA Cloud+, Cisco CCNA Security, GIAC GSEC, GIAC GCED, or ISC² SSCP)
- verifiedMinimum 10 years of experience in API security engineering, application security, or cybersecurity engineering roles within classified or federal environments
- verifiedHands-on experience with Kong Gateway, NGINX, Envoy, OAuth2, OpenID Connect, and Kubernetes network policies
- verifiedExperience conducting structured API security assessments of external-model integrations including token exchange validation and cross-domain access control verification
Nice to Have
Active Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI) eligibility. Prior experience working within Platform One or Cloud One environments. Demonstrated experience integrating API security controls with observability platforms such as Elastic Stack and Prometheus. Familiarity with Zero Trust architecture principles, including Attribute-Based Access Control (ABAC) and micro-segmentation strategies, as applied to AI/ML model-serving API surfaces across NIPRNet, SIPRNet, and JWICS environments. Experience authoring and maintaining change-approval documentation, API policy-compliance reports, and operational risk assessments that satisfy DoW RMF and continuous authorization requirements.
Similar Job Opportunities
AI Team Lead
Openkyber • On-site
Not Disclosedarrow_forward
Senior ML Serving Engineer with Security Clearance
Episcopal Community Services of San Francisco • Mantua, Virginia
Not Disclosedarrow_forward
Senior Tier-4 Model Serving Support Lead with Security Clearance
Episcopal Community Services of San Francisco • Lake Barcroft, Virginia
Not Disclosedarrow_forward
Frequently asked questions about Senior API Security Engineer with Security Clearance at Episcopal Community Services of San Francisco
What does a Senior API Security Engineer with Security Clearance at Episcopal Community Services of San Francisco do?expand_more
In this Senior API Security Engineer with Security Clearance at Episcopal Community Services of San Francisco role, you will validate boundary controls for ai and machine-learning model apis within war data platform environments; apply api security methodologies using kong gateway, nginx, and kubernetes to detect misconfigurations; conduct structured assessments of external-model integrations including amazon bedrock connectivity patterns; and produce mission-critical deliverables including api boundary-control assessments and policy-compliance reports.
What are the requirements for this Senior API Security Engineer with Security Clearance role?expand_more
Episcopal Community Services of San Francisco is looking for candidates who meet the following requirements: Current Secret security clearance with ability to obtain Top Secret (TS) with Sensitive Compartmented Information (SCI); IAT II-level security certification (CompTIA Security+ CE, CompTIA CySA+, CompTIA Cloud+, Cisco CCNA Security, GIAC GSEC, GIAC GCED, or ISC² SSCP); Minimum 10 years of experience in API security engineering, application security, or cybersecurity engineering roles within classified or federal environments; Hands-on experience with Kong Gateway, NGINX, Envoy, OAuth2, OpenID Connect, and Kubernetes network policies; and Experience conducting structured API security assessments of external-model integrations including token exchange validation and cross-domain access control verification.
Where is the Senior API Security Engineer with Security Clearance role at Episcopal Community Services of San Francisco located?expand_more
Senior API Security Engineer with Security Clearance at Episcopal Community Services of San Francisco is based in 6129, Beachway Drive, Lake Barcroft, Fairfax County, Virginia, 22041, United States. This is a on-site role.
Is this Senior API Security Engineer with Security Clearance job remote, hybrid, or on-site?expand_more
Episcopal Community Services of San Francisco has listed this Senior API Security Engineer with Security Clearance role as on-site.
How much experience is required for this Senior API Security Engineer with Security Clearance role?expand_more
Senior API Security Engineer with Security Clearance at Episcopal Community Services of San Francisco typically requires 10+ years of relevant experience at the lead level.
What skills do you need for the Senior API Security Engineer with Security Clearance role at Episcopal Community Services of San Francisco?expand_more
Key skills for Senior API Security Engineer with Security Clearance at Episcopal Community Services of San Francisco include Api Security; Artificial Intelligence; Machine Learning; Kong Gateway; Nginx; Envoy; Oauth2; and Openid Connect.
What category does the Senior API Security Engineer with Security Clearance role belong to?expand_more
Senior API Security Engineer with Security Clearance at Episcopal Community Services of San Francisco is part of the it job category on Recrutus.