Sr. Cybersecurity Engineer

Catapult Federal Services; Reston (VA); On-site; USD 152,000 - 215,000; Full time

Job summary

Catapult Federal Services seeks a Sr. Cybersecurity Engineer III to design and implement zero-trust authentication and authorization components, collaborating with application teams and security architects to accelerate enterprise adoption in AWS IL6+ environments.

The role requires expert knowledge of OAuth 2.0, OIDC, SAML, ABAC, and hands-on coding in Java, Go, or Python, plus experience with ForgeRock, Okta, Keycloak, or Ping Identity. You will develop reusable frameworks and documentation.

Qualifications

• 10+ years of professional experience in software or security engineering.
• Degree may be substituted by equivalent work experience.
• Extensive AWS experience in IL6+ classified environments.
• Expert knowledge of authentication/authorization frameworks (OAuth 2.0, OIDC, SAML).
• Experience with IAM platforms (ForgeRock/Okta/Keycloak/Ping).
• Strong programming skills in Java, Go, or Python.
• Knowledge of zero-trust architecture and SDLC security.

Responsibilities

• Design, develop, and maintain frameworks and APIs for zero-trust auth.
• Create developer guides and best practices for secure integration.
• Implement fine-grained access controls (entitlements, RLS, ABAC).
• Collaborate with architects to meet performance, usability, and compliance needs.
• Conduct code reviews and guide teams on secure coding.
• Research evolving identity/access tech to drive improvements.

Skills

Zero trust

OAuth 2.0

OIDC

SAML

ABAC

Fine-grained access

IAM platforms

AWS IL6+

Secure coding

SDLC security

Java

Go

Python

Education

Bachelor's degree

Tools

ForgeRock

Okta

Keycloak

Ping Identity

Job description

*NOT OPEN TO C2C OR W2 REFERRALS AT THIS TIME*

Sr. Cybersecurity Engineer III

Work Sites: Washington, DC | Herndon, VA | Tysons, VA | Reston, VA

Note: While candidates are encouraged to be open to any of the listed locations, will make effort to accommodate location preferences based on availability.

Clearance Required: Active TS/SCI security clearance with a CI Polygraph

As a Sr. Cybersecurity Engineer II, you’ll design and develop technical architecture components enabling application teams to integrate with zero trust authentication and authorization services. You will work closely with application developers, security architects, and infrastructure teams to build secure-by-design integration patterns and accelerate adoption of zero trust principles across the enterprise.

What you’ll do:

• Design, develop, and maintain reusable frameworks, libraries, APIs, and reference implementations for zero trust authentication and authorization.
• Create developer guides, documentation, and best practices to enable smooth integration with security services.
• Implement and support fine-grained authorization patterns (entitlements, row-level security, ABAC).
• Collaborate with architects and engineers to ensure security services meet performance, usability, and compliance requirements.
• Conduct code reviews and provide guidance to development teams on secure coding and integration practices.
• Research emerging zero trust and identity/access management technologies to recommend improvements.

What you’ll need to succeed:

• Minimum 10 years professional experience in software engineering, security engineering, or related roles.
• Bachelors degree OR experience may used in lieu of degree.
• Strong experience designing, developing, and deploying application components leveraging AWS cloud services in IL6+ classified environments.
• Expert-level experience implementing authentication and authorization frameworks (e.g., OAuth 2.0, OIDC, SAML).
• Strong, repeat experience with commercial or open-source identity and access management platforms (e.g., ForgeRock, Okta, Keycloak, Ping Identity).
• Strong expertise with fine-grained access control models (entitlements, row-level security, ABAC).
• Expert proficiency in at least one programming language (e.g., Java, Go, Python) for building frameworks and libraries.
• Solid experience with zero trust architecture and principles.
• Experience creating developer documentation and integration guides.
• Strong grasp of secure coding practices and software development lifecycle (SDLC) security.

SALARY RANGE: $152,000 - $215,000

The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including:

• The candidate's professional background and relevant work experience
• The specific responsibilities of the role and organizational needs
• Internal equity and alignment with current team compensation

This role is also eligible for additional compensation, subject to the terms and policies, which may include:

• Performance-based bonuses
• Company-paid training and/or certifications