Makpar Corporation

• Coordinate day-to-day production O&M execution for an IRS opportunity. • Support 24x7 operational continuity, incident response, monitoring, RCA, patch/vulnerability remediation support, backup/restore validation, DR support, operational reporting, and production-readiness coordination. • Lead operational support for production API gateway environments, including monitoring, incident response, triage, restoration coordination, and service continuity. • Ensure incidents and service requests are logged, tracked, updated, and closed in ServiceNow or equivalent IRS-approved ITSM tooling. • Support P1/P2 response processes, escalation, communications, restoration tracking, post-incident review, and RCA development. • Coordinate with gateway engineers, Government technical leads, cybersecurity, infrastructure, network, identity, CI/CD, database, and monitoring teams for issue resolution. • Track and support patching, vulnerability remediation, certificate updates, configuration changes, backup/restore validation, DR exercises, and production-readiness checks. • Maintain operational runbooks, incident playbooks, knowledge articles, dashboard evidence, SLA metrics, and monthly/quarterly operational reporting inputs. • Support operational continuity across IBM webMethods, the modernized gateway product, and any approved dual-run period.

• Provide senior technical execution for enterprise API gateway engineering, modernization, migration, configuration, and production-readiness activities under an IRS program. • Guide gateway implementation patterns, migration approaches, configuration standards, validation evidence, and technical coordination across legacy IBM webMethods and target API gateway environments. • Configure or guide gateway configuration for routes, services, consumers, policies/plugins, certificates, authentication/authorization patterns, rate limits, logging, telemetry, and environment promotion. • Support API migration planning and execution, including API inventory review, migration wave sequencing, dual-run support, rollback planning, cutover readiness, and validation evidence. • Implement gateway-side Zero Trust, OAuth2/OIDC/SAML/JWT/mTLS, RBAC, token validation, and policy-enforcement patterns within IRS-approved cybersecurity boundaries. • Provide technical direction to Gateway Engineers on implementation, troubleshooting, documentation, release evidence, and validation tasks. • Coordinate with Government-designated architecture, cybersecurity, infrastructure, network, identity, ServiceNow, monitoring, and CI/CD teams. • Produce and review configuration baselines, migration packages, release evidence, operational runbooks, implementation steps, rollback plans, and knowledge-transfer materials.

• Design, develop, validate, and maintain API gateway automation workflows. • Create configuration-as-code artifacts and developer portal integrations. • Build reusable onboarding patterns and API lifecycle capabilities. • Ensure gateway-side implementation components function effectively. • Hands-on engineering focused on API lifecycle modernization and developer self-service enablement.

• Develop and maintain EAG/API-gateway automation components that integrate with Government-approved CI/CD pipelines. • Create and validate configuration-as-code, pipeline-compatible deployment artifacts, gateway promotion workflows, API validation gates, and migration automation components. • Support automated checks for API specification quality, governance compliance, Zero Trust controls, telemetry, configuration drift, and production-readiness evidence. • Build automation and validation evidence that supports PWS automation outcomes, including 75 percent manual onboarding reduction, 90 percent automated onboarding success rate, and 100 percent Zero Trust/governance compliance prior to production deployment. • Troubleshoot gateway-side CI/CD integration issues, including deployment failures, configuration errors, credential/certificate dependencies, environment promotion issues, and validation gate failures. • Support Git-based version control, branching, pull/merge request workflows, artifact repositories, and release evidence. • Coordinate with Government CI/CD, DevSecOps, cybersecurity, identity, network, and release teams for platform-owned dependencies. • Produce pipeline documentation, automation runbooks, validation logs, deployment evidence, rollback steps, and knowledge-transfer materials.

• Support the Safeguards risk-based review selection process. • Maintain and enhance risk models, health score calculations, data fields, scripts, macros, dashboards, and analytics. • Identify the most at-risk agency partners and support review prioritization.

• Support organizational studies, process evaluation, systems and procedure design, work simplification, measurement studies, and procedure manual development. • Help improve program operations, methodology, documentation, and management efficiency in a government environment.

• Support Federal PKI and DHS PKI policy-aligned implementation. • Manage certificate lifecycle processes, including issuance, rekey, modification, revocation, and reissuance. • Support device certificate request processing through digital workflows. • Support DHS CA4 and external CA processes according to agency guidelines. • Support Non-Person Entity certificate authority for workstations and mobile/Apple devices. • Support person-centric PKI certificate authority and certificate lifecycle management systems. • Automate certificate management processes to reduce manual error and approval delays. • Support modernization of PIV-based PKI certificate AuthN/AuthZ in USCIS applications. • Research, design, and implement PKI/cloud/certificate solutions using COTS, open-source, and cloud-native tools. • Create SOPs, how-to videos, KB articles, process documentation, presentations, and release documentation. • Provide recommendations for optimizing cloud resource performance and security.

• Support USCIS privileged access management modernization • CyberArk/vaulting • Secrets management • Privileged session controls • Least privilege • Zero Trust • Just-in-time access • Privileged account discovery • Privileged access governance across cloud, hybrid, and on-prem environments

• Support technical writing, report preparation, document formatting, and information transmission. • Assist with MSR materials, dashboards, meeting materials, and deliverable tracking. • Support financial, accounting, or business analysis tasks. • Help prepare or maintain templates, spreadsheets, tracking tools, and structured documentation. • Support upload, organization, and tracking of correspondence and documentation in case management or SharePoint-style systems. • Assist senior staff with status reporting, metrics, formatting, and quality checks.

• Support PIV-based authentication and Single Sign-On for enterprise applications.**• Register new applications for SSO across multiple environments.**• Support major and minor enhancements requested by application teams.**• Implement and maintain ABAC and RBAC capabilities during user SSO sessions.**• Support least privilege enforcement, inactivity tracking, and just-in-time provisioning patterns.**• Schedule and support rotation of credentials, keys, tokens, and certificates.**• Troubleshoot SSO issues during and after application integration.**• Support mobile authentication for GFE mobile devices.**• Develop logging, safeguards, alerting, and dashboards for on-prem and cloud environments.**• Create and maintain procedural documents, knowledge base articles, and training materials for users, system owners, requesters, and ServiceNow operators.**• Develop automated access control audits and alerts.**• Enhance dashboards using Splunk, New Relic, AWS CloudWatch, or similar data sources.