Kong API Gateway Specialist
.png)
Role overview
eTelligent Group (eTel) is supporting a federal customer that runs mission-critical tax systems and needs its enterprise APIs modernised and hardened. The Kong API Gateway Specialist designs, builds and maintains the Kong layer that fronts those services, keeping it aligned with federal compliance mandates while giving developers a workable experience and absorbing the heavy API traffic that arrives during filing season.
The work spans both Kong Enterprise and open-source deployments, including hybrid and DB-less modes, and reaches into IAM and Zero Trust integration, configuration automation, observability and DevOps pipeline support. The specialist also writes the documentation, SOPs and training material that keep the platform supportable by the wider team.
What you will do
- Architect, set up and keep running Kong API Gateway, in both its Enterprise and open-source editions, for enterprise services.
- Set up plugins for authn/authz, throttling, caching, logging and payload transformation.
- Connect Kong to IAM and Zero Trust programmes, supporting OAuth2 and OIDC flows as well as mutual TLS.
- Automate Kong configuration with decK, Terraform or Ansible.
- Keep the platform within federal security requirements, including FISMA, FedRAMP and the NIST 800-53 control set.
- Track and tune API performance using dashboards built in Prometheus, Grafana and Splunk.
- Support DevOps pipelines that move APIs through test, staging and production.
- Work with development, integration and operations teams so APIs ship smoothly and code-freeze windows are respected.
- Produce documentation, SOPs and training content for staff.
What the employer is looking for
- An active security clearance is mandatory (applicants without one are not considered), and US citizenship is required.
- 5+ years' experience across API management, integration or middleware, including 2+ years administering Kong Gateway.
- Hands-on expertise with Kong Enterprise and decK, including hybrid and DB-less deployment modes.
- Knowledge of containers and orchestration: Docker, Kubernetes and OpenShift.
- Strong scripting ability in Python, Lua and shell.
- Familiarity with observability tooling at federal scale: Prometheus, Grafana and Splunk.
- Proven experience delivering secure API deployments within a Zero Trust architecture.
- A Bachelor's or Master's degree in Computer Science, in Data Engineering, or in a comparable discipline.
Good to have
- Prior work in federal environments such as the IRS, Treasury or DHS is strongly preferred.
- Being based in the DMV (DC, Maryland, Virginia) area is preferred, though the role is remote.
About eTelligent Group
eTelligent Group (eTel) has spent 15 years delivering technology solutions to the US federal government, spanning data security and management, scalable identity and access, legacy modernisation and high-performance platforms. Its customers include the Treasury, Commerce and State Departments. The company runs CMMI Level 3 processes, is certified to ISO 9001:2015, ISO/IEC 27001:2013 and ISO/IEC 20000-1:2018, and fields subject-matter experts who know federal environments closely.
Quick answers
Is the Kong API Gateway Specialist role at eTelligent Group remote?
Yes, the position is remote, with a preference for candidates in the DMV (Washington DC, Maryland, Virginia) area.
Do I need a security clearance to apply?
Yes. An active security clearance is mandatory and candidates without one will not be considered. US citizenship is also required.
What Kong experience is expected?
At least 2 years administering Kong Gateway as part of 5+ years spent on API management, integration or middleware. Hands-on knowledge of Kong Enterprise, decK, and hybrid and DB-less modes, plus the plugin set for auth, throttling, caching, logging and transformation.

DigitalAPI's read on this role
Why a federal Kong Gateway Specialist role matters for public-sector API programmes
DigitalAPI's leadership team has run API programmes for Fortune 100 companies and now builds the platform behind them. Here is their take on what this opening really asks for.
What this role says about the market
Government API estates face the same gateway-operations pressures as banks and insurers, with the added weight of FISMA, FedRAMP and NIST 800-53 controls and predictable traffic spikes such as tax filing season. This posting shows a federal programme treating the gateway as a governed, automated platform: configuration lives in decK, Terraform or Ansible rather than in a console, identity is enforced through OAuth2, OIDC and mutual TLS as part of a Zero Trust push, and observability via Prometheus, Grafana and Splunk is a core requirement rather than a nice-to-have. That is governance in the pipeline, and it is the direction DigitalAPI's leadership team sees every serious API programme moving.
What to emphasise in your application
- Running Kong Enterprise in production, including hybrid and DB-less deployments and the plugin set for auth, throttling, caching, logging and transformation.
- Declarative configuration and automation with decK, Terraform or Ansible, ideally wired into CI/CD across test, staging and production.
- Zero Trust and IAM integration: OAuth2, OpenID Connect and mutual TLS at the gateway.
- Compliance work against FISMA, FedRAMP or NIST 800-53, and any experience in IRS, Treasury or DHS environments.
- Observability and capacity work under peak load, with Prometheus, Grafana and Splunk, plus scripting in Python, Lua or shell.
For hiring managers
DigitalAPI's leadership team would recommend screening beyond clearance and Kong version knowledge. Ask candidates how they made gateway configuration reproducible and auditable, how they proved compliance controls were actually enforced at the gateway, and how they prepared for a filing-season peak. Those who can also describe how developers discovered and onboarded to the APIs they secured will strengthen the developer experience this posting calls for.
In our view, a gateway is only as valuable as the governance, observability and developer access built around it, whichever vendor it comes from. Federal API programmes that automate policy and treat their catalogue as a product will be best placed as agent-driven consumers start calling public-sector APIs.
About DigitalAPI
DigitalAPI is the gateway-agnostic command centre for APIs and AI agents. It connects to the gateways an enterprise already runs, Apigee, Kong, AWS API Gateway and Azure API Management, and turns everything behind them into one governed, self-serve catalogue for developers, partners and AI agents. API Gateway, API Portal, API Catalog, API Marketplace, MCP Gateway and MCP Portal ship as one platform.
The company grew out of an API consultancy founded in Bangalore in 2015 that became an Apigee-Google partner in 2017, then built its own cloud-agnostic, AI-powered platform in 2020 after seeing how fragmented gateways and duplicate APIs blocked its clients. More than 240 API teams now use it, with customers such as Zurich, Canara Bank, HSBC, Fiserv and Mahindra Finance. DigitalAPI has offices in the USA, UK and India, 130+ people, and recognition from Gartner and Deloitte.









.avif)
