Senior Zero-Trust Security Engineer (AWS IL6+)

Catapult Federal Services; Reston (VA); On-site; USD 152,000 - 215,000; Full time

Job summary

Catapult Federal Services seeks a Sr. Cybersecurity Engineer III to design and implement zero-trust authentication and authorization components, collaborating with application teams and security architects to accelerate enterprise adoption in AWS IL6+ environments.

The role requires expert knowledge of OAuth 2.0, OIDC, SAML, ABAC, and hands-on coding in Java, Go, or Python, plus experience with ForgeRock, Okta, Keycloak, or Ping Identity. You will develop reusable frameworks and documentation.

Qualifications

• 10+ years of professional experience in software or security engineering.
• Degree may be substituted by equivalent work experience.
• Extensive AWS experience in IL6+ classified environments.
• Expert knowledge of authentication/authorization frameworks (OAuth 2.0, OIDC, SAML).
• Experience with IAM platforms (ForgeRock/Okta/Keycloak/Ping).
• Strong programming skills in Java, Go, or Python.
• Knowledge of zero-trust architecture and SDLC security.

Responsibilities

• Design, develop, and maintain frameworks and APIs for zero-trust auth.
• Create developer guides and best practices for secure integration.
• Implement fine-grained access controls (entitlements, RLS, ABAC).
• Collaborate with architects to meet performance, usability, and compliance needs.
• Conduct code reviews and guide teams on secure coding.
• Research evolving identity/access tech to drive improvements.

Skills

Zero trust

OAuth 2.0

OIDC

SAML

ABAC

Fine-grained access

IAM platforms

AWS IL6+

Secure coding

SDLC security

Java

Go

Python

Education

Bachelor's degree

Tools

ForgeRock

Okta

Keycloak

Ping Identity

Job description

Catapult Federal Services seeks a Sr. Cybersecurity Engineer III to design and implement zero-trust authentication and authorization components, collaborating with application teams and security architects to accelerate enterprise adoption in AWS IL6+ environments.

The role requires expert knowledge of OAuth 2.0, OIDC, SAML, ABAC, and hands-on coding in Java, Go, or Python, plus experience with ForgeRock, Okta, Keycloak, or Ping Identity. You will develop reusable frameworks and documentation.