Note: The job is a remote job and is open to candidates in USA. Xcelerate Solutions is an organization serving the GovCon industry. The Full Stack Developer will engineer, sustain, enhance, and securely operate enterprise web platforms and workflow management systems using Angular, Java, Spring Boot, Oracle, and RESTful services. The role also supports identity management, cybersecurity compliance, DevSecOps, test automation, data synchronization, and production application support.
Responsibilities
- Maintain, enhance, and sustain public-facing and authenticated Single Page Applications (SPAs) built with Angular (v17+), leveraging standalone components, routing modules, reactive forms, and HTTP client service integrations
- Implement and enforce U.S. Web Design System (USWDS) design standards across all user interfaces, ensuring consistent design patterns, cross-browser compatibility (Chrome, Edge, Firefox, Safari), and responsive design
- Maintain and optimize Angular service layers, application state management, and HTTP interceptors (including JWT authentication interceptors and organizational context interceptors)
- Ensure all web interfaces strictly comply with Section 508 accessibility standards and Web Content Accessibility Guidelines (WCAG 2.1 AA)
- Design, build, and sustain enterprise-grade RESTful APIs and microservices using Java and Spring Boot (v3.x), implementing clean controller, service, repository, and DTO architectures (utilizing Project Lombok)
- Maintain and enhance complex multi-tier workflow engines and state machines managing multi-year agreement lifecycles, renewal cycles, administrative actions, and approval chains
- Maintain secure electronic signature and document workflows, including the automated generation, verification, and secure archival/retrieval of legally binding, digitally signed PDF records
- Manage API specifications adhering to OpenAPI / Swagger standards, enforcing backward compatibility, structured request/response handling, pagination, audit logging, and formal API versioning strategies
- Maintain and optimize relational database schemas, tables, views, constraints, indexes, and complex queries using Oracle Database in conjunction with JPA / Hibernate entity mappings
- Manage and sustain automated data pipelines and synchronization processes to ingest reference datasets from federal and external partner data sources, enforcing strict data validation, canonical deduplication, and quarantine rules
- Engineer and maintain outbound API synchronization feeds to ensure authoritative system-of-record data dissemination across downstream enterprise systems
- Maintain scheduled job processors (Spring Scheduling) to execute time-sensitive automated notifications, status expirations, and background batch processing without duplicate execution
- Implement and sustain modern Identity, Credential, and Access Management (ICAM) integrations, including OAuth2 / OpenID Connect (OIDC) authentication flows, PKI / CAC authentication, and Spring Security configurations
- Maintain and enforce Role-Based Access Control (RBAC) across all secured endpoints, along with administrative impersonation capabilities backed by comprehensive audit logging
- Implement secure coding fundamentals aligned with Open Worldwide Application Security Project (OWASP) Top 10 and DoD Application Security and Development (ASD) STIG requirements
- Remediate code vulnerabilities identified through Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) scanning tools (e.g., Fortify, Sonatype, Burp Suite)
- Assist in assembling and maintaining Risk Management Framework (RMF) artifacts and Plans of Action and Milestones (POA&Ms) in support of continuous Authority to Operate (ATO)
- Champion an "Automation-First" quality philosophy and Test-Driven Development (TDD) approach, maintaining automated unit, integration, and end-to-end tests across every sprint
- Integrate automated test suites directly into DevSecOps continuous integration and continuous deployment (CI/CD) pipelines (e.g., GitLab CI) prior to production deployment
- Map technical specifications and test cases to a Requirements Traceability Matrix (RTM) to ensure comprehensive validation of functional capabilities
- Provide Tier II and Tier III application and database engineering support, troubleshooting production defects, analyzing root causes, and deploying timely fixes
Skills
- Bachelor's degree in Computer Science, Information Systems, Software Engineering, or a related technical field (equivalent professional experience may be considered)
- Minimum of 5+ years of professional full-stack software development experience across the complete Software Development Life Cycle (SDLC)
- 3+ years of hands-on experience developing enterprise web applications with Angular (v12+, with proficiency in modern versions such as v17+) and TypeScript
- 3+ years of hands-on backend development experience building secure REST APIs using Java and Spring Boot (v2.x/3.x)
- Strong proficiency with relational databases (Oracle), SQL query optimization, database schema design, and Object-Relational Mapping (ORM) via JPA / Hibernate
- Solid understanding of RESTful API architecture, OpenAPI / Swagger documentation, and HTTP client/interceptor design
- Experience implementing web application security, authentication protocols (OAuth2, OIDC, JWT), and Spring Security
- Hands-on experience with version control systems (Git) and Agile collaboration tools (Jira, GitLab)
- Demonstrated understanding of web accessibility standards (Section 508 / WCAG 2.1 AA)
- Exceptional analytical, debugging, and problem-solving skills
- Proven ability to work collaboratively in an Agile/Scrum team environment and communicate technical designs effectively to stakeholders
- Active DoD 8570.01-M / DoD 8140 Information Assurance Technical (IAT) Level II baseline certification (or higher)
- Work Status Allowable: U.S. citizenship
- Minimum Clearance to Start: Public Trust or Favorably Adjudicated Secret Clearance
- Compliance: Must strictly comply with federal cybersecurity directives, Operations Security (OPSEC) policies, and sensitive data protection requirements (PII/CUI) under the Privacy Act
- Experience implementing the U.S. Web Design System (USWDS) or equivalent design system libraries
- Experience with automated testing frameworks (e.g., JUnit, Mockito, Jasmine, Karma, Cypress, or Playwright) within DevSecOps CI/CD pipelines
- Familiarity with PDF generation libraries, digital signature workflows, and state machine design patterns
- Experience integrating data feeds with external governmental or educational data repositories
- Familiarity with containerization (Docker, Kubernetes) and deploying applications to secure cloud environments (e.g., AWS GovCloud, Azure Government)
- Knowledge of DoD IT standards, DISA STIGs, and NIST SP 800-53 security control implementations
- CompTIA Security+ CE (highly preferred)
- Oracle Certified Professional: Java SE Developer
- Spring Certified Professional
- Relevant Angular / Frontend Web Development Certifications
- Cloud Associate/Developer Certifications (AWS Certified Developer, Microsoft Certified: Azure Developer)
Benefits
- Remote work arrangement
- Growth and development opportunities
Company Overview