API Security Engineer (USC ONLY)

🚨 U.S. CITIZENS ONLY – API Security Engineer

📍 Locations: Charlotte, NC | Raleigh, NC | Atlanta, GA (In-Person / Onsite)

About the Role

We are seeking a Senior API Security Engineer with 10+ years of experience to design, implement, and manage API security across enterprise platforms. You will lead security architecture, implement authentication/authorization patterns, and ensure APIs are protected against threats. This role requires strong communication skills and the ability to work directly with stakeholders, architects, and security teams.

⚠️ This role is open to U.S. Citizens ONLY.

Required Skills & Qualifications

Experience:

• ✅ 10+ years of software engineering / security engineering experience

• ✅ 5+ years focused on API security in enterprise environments

• ✅ Proven experience implementing OAuth 2.0, JWT, mTLS, API key management

API Security Expertise:

• OAuth 2.0 (client credentials, authorization code, PKCE flows)

• OpenID Connect (OIDC)

• JWT validation, signing, and encryption

• TLS/mTLS certificate management

• API gateway security policies (Apigee, Kong, AWS API Gateway)

• Integration with enterprise identity providers (PingFederate, Okta, Azure AD)

• Threat modeling and API security best practices

• WAF/CDN integration (Akamai, Cloudflare)

Communication & Leadership:

• Strong verbal and written communication skills

• Ability to present security concepts to technical and non-technical stakeholders

• Experience leading security reviews and architecture discussions

Nice to Have:

• Experience with Apigee security policies

• Zero Trust architecture experience

• Security certifications (CISSP, CSSLP, or similar)

Visa Requirement

This position is open to U.S. CITIZENS ONLY.

• 🇺🇸 U.S. Citizens only

• ❌ No Green Card Holders

• ❌ No H1B, OPT, STEM-OPT, H4-EAD, TN, or any other visa holders

This requirement is non-negotiable due to federal/government compliance.