Job Requirements
Remote Charlottesville, VA
Top Secret Polygraph not specified
Senior Level Career (10+ yrs experience)
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
CLEARANCE REQUIREMENT: Active TS/SCI
LOCATION: Charlottesville, VA (Hybrid – 50% Onsite at National Ground Intelligence Center / NGIC)
POSITION SUMMARY
Seeking a Senior Full-Stack Developer with an active TS/SCI clearance to design, build, and secure modern applications within an AWS GovCloud environment. In this role, you will modernize legacy architectures, build serverless and containerized solutions, automate infrastructure provisioning, and integrate DevSecOps security practices across hybrid systems supporting the National Ground Intelligence Center (NGIC).
Operating in an Agile/Scrum environment, you will partner directly with cybersecurity, infrastructure, and mission teams to build responsive frontend interfaces, optimize backend architectures, and automate delivery pipelines from deployment to continuous monitoring.
RESPONSIBILITIES
Cloud & Serverless Development: Design, build, and deploy secure, cloud-native applications in AWS GovCloud using React, TypeScript, and Python. Optimize architectures for serverless execution and cloud scalability.
Infrastructure as Code & Automation: Develop and maintain automated IaC modules to ensure consistent, repeatable, and secure infrastructure provisioning.
API Integration & Middleware: Design, implement, and secure RESTful APIs to connect mission applications with enterprise data sources and external systems.
Containerization & Orchestration: Package, deploy, and manage containerized microservices using Docker and Kubernetes.
DevSecOps & Vulnerability Remediation: Integrate security into CI/CD pipelines, execute static/dynamic code analysis, apply secure coding standards, and remediate code and image vulnerabilities.
Agile Execution & Collaboration: Participate in sprint planning, task estimation, peer code reviews, backlog refinement, and live sprint demonstrations.
Accreditation Support: Document system designs, operational controls, and deployment workflows to support System Security Plans (SSPs) and Risk Management Framework (RMF) accreditation packages.
Modernization & Migration: Assist with the transition and refactoring of legacy, on-premises applications into modern AWS cloud architectures.
REQUIRED QUALIFICATIONS
Compliance Certification: DoD 8140 / 8570 IAT Level II baseline certification (e.g., Security+ CE, CySA+, GSEC, or equivalent).
Experience: Minimum 8 years of experience developing, securing, and deploying software within DoD or federal government environments.
Education: Bachelor’s degree in Computer Science, Software Engineering, or a related technical field (relevant professional experience may be substituted for a degree).
Frontend & Backend Engineering: Hands-on proficiency in Python, JavaScript, or TypeScript, utilizing frameworks such as React, Angular, FastAPI, or Express.js to construct responsive web applications.
AWS & CI/CD Operations: Direct experience building and deploying services within AWS GovCloud (including EC2, ECS/EKS, Lambda, S3, and IAM) alongside automated pipelines (e.g., GitLab CI/CD).
Infrastructure as Code (IaC): Applied experience using Terraform, CDK-TF, AWS CDK, or Pulumi.
Containers & API Standards: Practical working knowledge of Docker and Kubernetes, along with RESTful API design patterns, OpenAPI/Swagger specifications, and JSON/YAML data structures.
Software Security & Tooling: Familiarity with OWASP Top 10 mitigation strategies, static/dynamic security analysis tools (such as SonarQube), and Atlassian workflow tools (Jira, Confluence).
PREFERRED QUALIFICATIONS
AWS Certifications: AWS Certified Developer – Associate or AWS Certified DevOps Engineer – Professional.
Advanced IaC & Pipelines: Experience managing enterprise Terraform modules across multi-environment or hybrid-cloud deployment models.
Data & Messaging Systems: Direct work with relational or NoSQL databases (PostgreSQL, DynamoDB, MongoDB) and event-driven architectures (Amazon SQS, Apache Kafka).
Framework Integration: Experience embedding automated vulnerability scanners and compliance checks directly into CI/CD build processes.
Architecture Trends: Operational familiarity with Zero Trust Architecture, DevSecOps governance frameworks, or large-scale DoD cloud migration programs.
LOCATION: Charlottesville, VA (Hybrid – 50% Onsite at National Ground Intelligence Center / NGIC)
POSITION SUMMARY
Seeking a Senior Full-Stack Developer with an active TS/SCI clearance to design, build, and secure modern applications within an AWS GovCloud environment. In this role, you will modernize legacy architectures, build serverless and containerized solutions, automate infrastructure provisioning, and integrate DevSecOps security practices across hybrid systems supporting the National Ground Intelligence Center (NGIC).
Operating in an Agile/Scrum environment, you will partner directly with cybersecurity, infrastructure, and mission teams to build responsive frontend interfaces, optimize backend architectures, and automate delivery pipelines from deployment to continuous monitoring.
RESPONSIBILITIES
Cloud & Serverless Development: Design, build, and deploy secure, cloud-native applications in AWS GovCloud using React, TypeScript, and Python. Optimize architectures for serverless execution and cloud scalability.
Infrastructure as Code & Automation: Develop and maintain automated IaC modules to ensure consistent, repeatable, and secure infrastructure provisioning.
API Integration & Middleware: Design, implement, and secure RESTful APIs to connect mission applications with enterprise data sources and external systems.
Containerization & Orchestration: Package, deploy, and manage containerized microservices using Docker and Kubernetes.
DevSecOps & Vulnerability Remediation: Integrate security into CI/CD pipelines, execute static/dynamic code analysis, apply secure coding standards, and remediate code and image vulnerabilities.
Agile Execution & Collaboration: Participate in sprint planning, task estimation, peer code reviews, backlog refinement, and live sprint demonstrations.
Accreditation Support: Document system designs, operational controls, and deployment workflows to support System Security Plans (SSPs) and Risk Management Framework (RMF) accreditation packages.
Modernization & Migration: Assist with the transition and refactoring of legacy, on-premises applications into modern AWS cloud architectures.
REQUIRED QUALIFICATIONS
Compliance Certification: DoD 8140 / 8570 IAT Level II baseline certification (e.g., Security+ CE, CySA+, GSEC, or equivalent).
Experience: Minimum 8 years of experience developing, securing, and deploying software within DoD or federal government environments.
Education: Bachelor’s degree in Computer Science, Software Engineering, or a related technical field (relevant professional experience may be substituted for a degree).
Frontend & Backend Engineering: Hands-on proficiency in Python, JavaScript, or TypeScript, utilizing frameworks such as React, Angular, FastAPI, or Express.js to construct responsive web applications.
AWS & CI/CD Operations: Direct experience building and deploying services within AWS GovCloud (including EC2, ECS/EKS, Lambda, S3, and IAM) alongside automated pipelines (e.g., GitLab CI/CD).
Infrastructure as Code (IaC): Applied experience using Terraform, CDK-TF, AWS CDK, or Pulumi.
Containers & API Standards: Practical working knowledge of Docker and Kubernetes, along with RESTful API design patterns, OpenAPI/Swagger specifications, and JSON/YAML data structures.
Software Security & Tooling: Familiarity with OWASP Top 10 mitigation strategies, static/dynamic security analysis tools (such as SonarQube), and Atlassian workflow tools (Jira, Confluence).
PREFERRED QUALIFICATIONS
AWS Certifications: AWS Certified Developer – Associate or AWS Certified DevOps Engineer – Professional.
Advanced IaC & Pipelines: Experience managing enterprise Terraform modules across multi-environment or hybrid-cloud deployment models.
Data & Messaging Systems: Direct work with relational or NoSQL databases (PostgreSQL, DynamoDB, MongoDB) and event-driven architectures (Amazon SQS, Apache Kafka).
Framework Integration: Experience embedding automated vulnerability scanners and compliance checks directly into CI/CD build processes.
Architecture Trends: Operational familiarity with Zero Trust Architecture, DevSecOps governance frameworks, or large-scale DoD cloud migration programs.
group id: 10202776