Lead Gateway Engineer

Who we are: Halcyon Labs is a comprehensive professional and technical solutions provider for the Federal government. We combine functional and technical expertise in cloud engineering, data management, cybersecurity and emerging technologies to deliver mission success. We build the right IT solution for government clients by partnering with them to understand their WHAT, WHY, and HOW. Using our signature consulting methodology that we call “The Halcyon Labs Way,” we help agencies navigate the ongoing changes in the Federal technology landscape. We succeed where others fail because of our connected and engaged workforce are dedicated to delivering success for our clients and the American people. Our Mission: We solve complex problems for the Federal government to accelerate access to citizen services. When it comes to excellence, we deliver. Learn more about our employer brand at makpar.com/careers . Halcyon Labs has an exciting opportunity for a Lead Gateway Engineer. In this role, the Lead Gateway Engineer will provide senior technical execution for enterprise API gateway engineering, modernization, migration, configuration, and production-readiness activities under an IRS program. This role guides gateway implementation patterns, migration approaches, configuration standards, validation evidence, and technical coordination across legacy IBM webMethods and target API gateway environments while staying within Government-approved architecture, cybersecurity, infrastructure, and CI/CD boundaries. Key Responsibilities Lead product-specific API gateway engineering for one or more enterprise gateway platforms, including legacy IBM webMethods and the Government-authorized target platform. Configure or guide gateway configuration for routes, services, consumers, policies/plugins, certificates, authentication/authorization patterns, rate limits, logging, telemetry, and environment promotion. Support API migration planning and execution, including API inventory review, migration wave sequencing, dual-run support, rollback planning, cutover readiness, and validation evidence. Implement gateway-side Zero Trust, OAuth2/OIDC/SAML/JWT/mTLS, RBAC, token validation, and policy-enforcement patterns within IRS-approved cybersecurity boundaries. Provide technical direction to Gateway Engineers on implementation, troubleshooting, documentation, release evidence, and validation tasks. Coordinate with Government-designated architecture, cybersecurity, infrastructure, network, identity, ServiceNow, monitoring, and CI/CD teams. Produce and review configuration baselines, migration packages, release evidence, operational runbooks, implementation steps, rollback plans, and knowledge-transfer materials. Required Qualifications 7+ years of experience in API management, integration engineering, middleware engineering, platform engineering, or related enterprise systems work. 4+ years of hands-on experience with enterprise API gateway products such as Google Apigee, Kong, MuleSoft Anypoint API Manager, Microsoft Azure API Management, AWS API Gateway, IBM API Connect, Red Hat 3scale, Axway Amplify, WSO2 API Manager, Tyk, IBM webMethods API Gateway, or comparable products. Demonstrated experience implementing or sustaining secure API gateway capabilities in production or mission-critical environments. Experience with API security patterns including OAuth2/OIDC, SAML, JWT, mTLS, API keys, RBAC, certificates, token validation, scopes/claims, secrets handling, and least-privilege access concepts. Experience with REST APIs, OpenAPI/Swagger, JSON/XML, HTTP/S, TLS, routing, policy enforcement, and API lifecycle management. Experience supporting production releases through change management, validation, rollback readiness, and operational acceptance. Strong documentation and technical communication skills. Preferred Qualifications Active IRS MBI or recent IRS suitability Experience with IBM webMethods API Gateway and at least one modern target gateway such as Kong, Apigee, MuleSoft, Azure API Management, AWS API Gateway, IBM API Connect, or WSO2. Experience supporting API migration from legacy gateway/middleware platforms to modern gateway platforms. Experience with Ping Access, Ping Federate, OAuth2/OIDC/SAML identity integrations, custom adapters, token transformation, protected application routing, or identity-provider integration. Experience with OpenShift, Kubernetes, containers, hybrid cloud, GitOps/configuration-as-code, AppDynamics, ELK/Splunk, OpenTelemetry, or comparable observability tooling. FedRAMP, FISMA, NIST SP 1000-53 IRS IRM 10.8, IRS Publication 4812, or comparable federal security-control experience. Relevant API gateway, cloud, Kubernetes/OpenShift, or security certifications. Benefits: At Halcyon Labs Corporation we understand that we all need to balance work and life – that is why we have a great benefits package, excellent training and career development opportunities, flexible work schedules along with a generous compensation package. At Makpa