Secret - Full Stack Software Engineer

Required Skills & Experience

-Minimum Interim Secret clearance -Bachelor's degree in computer science, engineering, or a related field, or four additional years of equivalent experience. -5+ years of professional software development, including 3+ years of full stack work. -Production experience building back-end services in Java (Spring Boot) or Node.js (TypeScript). -Production experience building front ends in React with TypeScript or modern JavaScript. -Designing and integrating RESTful APIs (JSON, OpenAPI). -Relational databases and SQL (PostgreSQL or similar). -Git-based workflows, code review, and automated testing (JUnit, Jest, or similar). -Containerized applications (Docker) and CI/CD pipelines. -Working on Agile/Scrum teams.

Nice to Have Skills & Experience

-Production experience with both Java and Node.js. -Identity and access: Keycloak, OpenID Connect, OAuth 2.0 (including token exchange), SAML, CAC/PIV authentication, Open Policy Agent. -Event-driven systems: Kafka, change data capture (Debezium), event schemas, and idempotent consumers. -Front-end architecture: micro-frontends, USWDS, accessibility (Section 508, WCAG 2.1 AA), and usability testing. -Business rules engines or DMN decision tables. -Kubernetes (Amazon EKS) and AWS; AWS GovCloud a plus. -Secure coding practices (OWASP Top 10) and DoW security requirements (STIGs, RMF). -End-to-end testing with Playwright or Cypress. -Experience using AI coding assistants or agentic development tools, with disciplined review and testing of generated code. -Experience on Federal or DoW programs; Top Secret clearance a plus.

Job Description

-We are seeking a Senior Full Stack Software Engineer to join a program team that builds, modernizes, and sustains mission-critical applications for a Department of War (DoW) customer. -You'll help build a new, secure web platform that brings a set of existing mission applications together. Users experience are a federated identity layer, an event-driven work-item service, and a React front end, all running as containerized services on Kubernetes in AWS GovCloud and built to Department of War security and accessibility standards. The team works in two-week sprints, demonstrates working software to the customer every sprint, and uses AI-assisted development where approved. -Design and build features end to end across React and TypeScript user interfaces and Java (Spring Boot) and Node.js (TypeScript) services. -Build single sign-on and access control: Keycloak identity brokering with OpenID Connect and SAML, CAC/PIV smart-card authentication, OAuth 2.0 token exchange for short-lived scoped tokens, and policy-based authorization with Open Policy Agent. -Build event-driven services that capture changes from existing applications (change data capture with Debezium, events on Kafka) and keep a unified work-item store in PostgreSQL current, with idempotent, replayable processing and a full change history. -Build user-facing features on the U.S. Web Design System, such as dashboards, work queues, and navigation, composed from micro-frontends and meeting Section 508 and WCAG 2.1 AA. -Design and consume REST APIs, and implement business rules (DMN decision tables) that route work to the right people. -Write automated unit, integration, and end-to-end tests (JUnit, Jest, Playwright) and keep code quality high. -Review code, mentor other developers, and help set team standards for design, security, and testing. -Work with DevSecOps and security engineers to deploy through CI/CD pipelines, fix security findings, and support production issues when needed.