API Security Engineer (USC ONLY)

S3B Global; Charlotte (NC); On-site; USD 150,000 - 190,000; Full time

Job summary

S3B Global is seeking a Senior API Security Engineer to design, implement, and manage API security across enterprise platforms in a leadership capacity.

You will drive security architecture, implement OAuth 2.0, JWT, and mTLS, and ensure robust protection of APIs while collaborating with architects and security teams. This role requires strong communication with stakeholders and security colleagues.

Qualifications

• 10+ years of software/security engineering experience.
• 5+ years focused on API security in enterprise environments.
• Experience implementing OAuth 2.0, JWT, mTLS, API key management.

Responsibilities

• Design, implement, and manage API security across enterprise platforms.
• Lead security architecture and authentication/authorization patterns.
• Ensure APIs are protected against threats and maintain security posture.
• Communicate security concepts to stakeholders and security teams.

Skills

10+ years security/engineering

API security

OAuth 2.0

JWT

mTLS

API key management

OpenID Connect

TLS/mTLS management

Threat modeling

Tools

Apigee

Kong

AWS API Gateway

PingFederate

Okta

Azure AD

Job description

U.S. CITIZENS ONLY – API Security Engineer

Locations: Charlotte, NC | Raleigh, NC | Atlanta, GA (In-Person / Onsite)

About the Role

We are seeking a Senior API Security Engineer with 10+ years of experience to design, implement, and manage API security across enterprise platforms. You will lead security architecture, implement authentication/authorization patterns, and ensure APIs are protected against threats. This role requires strong communication skills and the ability to work directly with stakeholders, architects, and security teams.

This role is open to U.S. Citizens ONLY.

Required Skills & Qualifications

Experience:

• 10+ years of software engineering / security engineering experience


• 5+ years focused on API security in enterprise environments


• Proven experience implementing OAuth 2.0, JWT, mTLS, API key management

API Security Expertise:

• OAuth 2.0 (client credentials, authorization code, PKCE flows)


• OpenID Connect (OIDC)


• JWT validation, signing, and encryption


• TLS/mTLS certificate management


• API gateway security policies (Apigee, Kong, AWS API Gateway)


• Integration with enterprise identity providers (PingFederate, Okta, Azure AD)


• Threat modeling and API security best practices


• WAF/CDN integration (Akamai, Cloudflare)

Communication & Leadership:

• Strong verbal and written communication skills


• Ability to present security concepts to technical and non-technical stakeholders


• Experience leading security reviews and architecture discussions

Nice to Have:

• Experience with Apigee security policies


• Zero Trust architecture experience


• Security certifications (CISSP, CSSLP, or similar)

Visa Requirement

This position is open to U.S. CITIZENS ONLY.

• U.S. Citizens only


• No Green Card Holders


• No H1B, OPT, STEM-OPT, H4-EAD, TN, or any other visa holders

This requirement is non-negotiable due to federal/government compliance.