Software Engineer / Developer (DevSecOps / Full Stack)
Job Description
This TS/SCI-cleared software engineer role is onsite in Charlottesville, VA, focusing on designing, building, and securing modern applications within a classified cloud environment.
Responsibilities
- Architect, implement, and deploy secure cloud-native applications and services in AWS GovCloud.
- Build robust CI/CD pipelines with integrated static and dynamic security testing.
- Provision and automate infrastructure using Terraform and Infrastructure as Code (IaC) practices.
- Create and integrate RESTful APIs linking mission-critical and enterprise systems.
- Containerize workloads and manage orchestration with Docker and Kubernetes.
- Enforce secure coding standards and remediate vulnerabilities identified via code or pipeline scans.
- Participate in Agile sprints with peer reviews, backlog refinement, and sprint demos.
- Produce documentation for system design, deployment, and operation to support accreditation packages.
- Support modernization and cloud migration initiatives from on-premises to AWS architectures.
Requirements
- At least four years of experience developing, deploying, and securing applications within DoD or federal environments.
- Proficiency in JavaScript and TypeScript using frameworks such as React, Angular, and Express.js.
- Understanding of REST API design, data serialization (JSON/YAML), and API documentation (OpenAPI/Swagger).
- Hands-on experience with Terraform and AWS GovCloud services (EC2, Lambda, API Gateway, S3, IAM).
- Knowledge of containerization technologies (Docker and Podman).
- Experience with GitLab CI/CD and secure DevSecOps pipelines.
- Familiarity with OWASP Top 10, static/dynamic code analysis (SonarQube or equivalent), and secure coding principles.
- Experience with Agile development and collaboration using Jira, Confluence, and Git.
- TS/SCI Clearance.
- DoD 8140 (8570) IAT Level II Certification.
Technologies
- Microsoft Copilot
- AWS GovCloud
- EC2
- Lambda
- API Gateway
- S3
- IAM
- Terraform
- Docker
- Podman
- Kubernetes
- OpenShift
- Jira
- Confluence
- Git
- GitLab CI/CD
- Swagger
- OpenAPI
- JSON
- YAML
- React
- TypeScript
- JavaScript
- Express.js
- Angular
- PostgreSQL
- DynamoDB
- MongoDB
- SQS
- Kafka
- SonarQube