Note: The job is a remote job and is open to candidates in USA. Xcelerate Solutions is a government contracting company focused on delivering mission-critical enterprise web platforms and workflow management systems. The Full Stack Developer role involves designing, developing, testing, and deploying secure, accessible, and high-performing web applications using Angular and Java Spring Boot, while ensuring compliance with federal cybersecurity and accessibility standards.
Responsibilities
- Frontend Web Application Development (Angular)
- Maintain, enhance, and sustain public-facing and authenticated Single Page Applications (SPAs) built with Angular (v17+), leveraging standalone components, routing modules, reactive forms, and HTTP client service integrations
- Implement and enforce U.S. Web Design System (USWDS) design standards across all user interfaces, ensuring consistent design patterns, cross-browser compatibility (Chrome, Edge, Firefox, Safari), and responsive design
- Maintain and optimize Angular service layers, application state management, and HTTP interceptors (including JWT authentication interceptors and organizational context interceptors)
- Ensure all web interfaces strictly comply with Section 508 accessibility standards and Web Content Accessibility Guidelines (WCAG 2.1 AA)
- Backend Engineering & Microservices (Java / Spring Boot)
- Design, build, and sustain enterprise-grade RESTful APIs and microservices using Java and Spring Boot (v3.x), implementing clean controller, service, repository, and DTO architectures (utilizing Project Lombok)
- Maintain and enhance complex multi-tier workflow engines and state machines managing multi-year agreement lifecycles, renewal cycles, administrative actions, and approval chains
- Maintain secure electronic signature and document workflows, including the automated generation, verification, and secure archival/retrieval of legally binding, digitally signed PDF records
- Manage API specifications adhering to OpenAPI / Swagger standards, enforcing backward compatibility, structured request/response handling, pagination, audit logging, and formal API versioning strategies
- Database Management & Data Synchronization
- Maintain and optimize relational database schemas, tables, views, constraints, indexes, and complex queries using Oracle Database in conjunction with JPA / Hibernate entity mappings
- Manage and sustain automated data pipelines and synchronization processes to ingest reference datasets from federal and external partner data sources, enforcing strict data validation, canonical deduplication, and quarantine rules
- Engineer and maintain outbound API synchronization feeds to ensure authoritative system-of-record data dissemination across downstream enterprise systems
- Maintain scheduled job processors (Spring Scheduling) to execute time-sensitive automated notifications, status expirations, and background batch processing without duplicate execution
- Identity Management, Security & Compliance
- Implement and sustain modern Identity, Credential, and Access Management (ICAM) integrations, including OAuth2 / OpenID Connect (OIDC) authentication flows, PKI / CAC authentication, and Spring Security configurations
- Maintain and enforce Role-Based Access Control (RBAC) across all secured endpoints, along with administrative impersonation capabilities backed by comprehensive audit logging
- Implement secure coding fundamentals aligned with Open Worldwide Application Security Project (OWASP) Top 10 and DoD Application Security and Development (ASD) STIG requirements
- Remediate code vulnerabilities identified through Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) scanning tools (e.g., Fortify, Sonatype, Burp Suite)
- Assist in assembling and maintaining Risk Management Framework (RMF) artifacts and Plans of Action and Milestones (POA&Ms) in support of continuous Authority to Operate (ATO)
- DevSecOps, Quality Assurance & Test Automation
- Champion an "Automation-First" quality philosophy and Test-Driven Development (TDD) approach, maintaining automated unit, integration, and end-to-end tests across every sprint
- Integrate automated test suites directly into DevSecOps continuous integration and continuous deployment (CI/CD) pipelines (e.g., GitLab CI) prior to production deployment
- Map technical specifications and test cases to a Requirements Traceability Matrix (RTM) to ensure comprehensive validation of functional capabilities
- Provide Tier II and Tier III application and database engineering support, troubleshooting production defects, analyzing root causes, and deploying timely fixes
Skills
- • Education: Bachelor's degree in Computer Science, Information Systems, Software Engineering, or a related technical field (equivalent professional experience may be considered)
- + Minimum of 5+ years of professional full-stack software development experience across the complete Software Development Life Cycle (SDLC)
- + 3+ years of hands-on experience developing enterprise web applications with Angular (v12+, with proficiency in modern versions such as v17+) and TypeScript
- + 3+ years of hands-on backend development experience building secure REST APIs using Java and Spring Boot (v2.x/3.x)
- + Strong proficiency with relational databases (Oracle), SQL query optimization, database schema design, and Object-Relational Mapping (ORM) via JPA / Hibernate
- + Solid understanding of RESTful API architecture, OpenAPI / Swagger documentation, and HTTP client/interceptor design
- + Experience implementing web application security, authentication protocols (OAuth2, OIDC, JWT), and Spring Security
- + Hands-on experience with version control systems (Git) and Agile collaboration tools (Jira, GitLab)
- + Demonstrated understanding of web accessibility standards (Section 508 / WCAG 2.1 AA)
- + Exceptional analytical, debugging, and problem-solving skills
- + Proven ability to work collaboratively in an Agile/Scrum team environment and communicate technical designs effectively to stakeholders
- • Cybersecurity Baseline Certification (Required)
- Active DoD 8570.01-M / DoD 8140 Information Assurance Technical (IAT) Level II baseline certification (or higher)
- • Work Status Allowable: U.S. citizenship
- • Minimum Clearance to Start: Public Trust or Favorably Adjudicated Secret Clearance
- • Experience implementing the U.S. Web Design System (USWDS) or equivalent design system libraries
- • Experience with automated testing frameworks (e.g., JUnit, Mockito, Jasmine, Karma, Cypress, or Playwright) within DevSecOps CI/CD pipelines
- • Familiarity with PDF generation libraries, digital signature workflows, and state machine design patterns
- • Experience integrating data feeds with external governmental or educational data repositories
- • Familiarity with containerization (Docker, Kubernetes) and deploying applications to secure cloud environments (e.g., AWS GovCloud, Azure Government)
- • Knowledge of DoD IT standards, DISA STIGs, and NIST SP 800-53 security control implementations
- • CompTIA Security+ CE (highly preferred)
- • Oracle Certified Professional: Java SE Developer
- • Spring Certified Professional
- • Relevant Angular / Frontend Web Development Certifications
- • Cloud Associate/Developer Certifications (AWS Certified Developer, Microsoft Certified: Azure Developer)
Benefits
- Remote work arrangement
- Growth and development opportunities
Company Overview