Senior API Security & RMF Engineer — Remote

Basecamp Consulting and Solutions LLC; Reston (VA); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

401(k) matching

Bonus based on performance

Competitive salary

Dental insurance

Health insurance

Paid time off

Parental leave

Tuition assistance

Vision insurance

Flexible work from home

Job summary

Basecamp Consulting and Solutions LLC seeks a Senior Cybersecurity Integration Engineer to secure and integrate the customer’s enterprise API gateway, drive RMF processes to an Authority to Operate (ATO), and sustain continuous monitoring. You will own the System Security Plan and coordinate security controls across environments.

The role requires hands-on security engineering at the API boundary, an active Moderate Background Investigation, and collaboration with cross-functional teams to

Qualifications

• Eight years of hands-on cybersecurity or integration engineering on enterprise API gateways, IAM, or boundary security platforms.
• Experience in a Federal FISMA environment.
• Authorship of a System Security Plan for a Federal system and RMF to ATO.

Responsibilities

• Design and enforce API security policy: authentication, authorization, token validation, rate limiting, payload validation, threat protection.
• Onboard applications, vendors, and SaaS services; coordinate firewall, proxy, DNS, and load balancer changes.
• Integrate gateway with enterprise identity and federation services; sustain RMF/ConMon and POA&M closure.

Skills

API security

RMF/SSP

Vulnerability management

Linux administration

SIEM/Splunk

Education

Bachelor's degree in Engineering/CS/C cybersecurity

Tools

eMASS/Xacta/CSAM

PKI/certificate lifecycle

Job description

Basecamp Consulting and Solutions LLC seeks a Senior Cybersecurity Integration Engineer to secure and integrate the customer’s enterprise API gateway, drive RMF processes to an Authority to Operate (ATO), and sustain continuous monitoring. You will own the System Security Plan and coordinate security controls across environments.

The role requires hands-on security engineering at the API boundary, an active Moderate Background Investigation, and collaboration with cross-functional teams to