Full Stack Developer (Java / Angular / Spring Boot)

Xcelerate Solutions seeks a Full Stack Developer (Java / Angular / Spring Boot) to play a pivotal role in the engineering, sustainment, enhancement, and secure operations of enterprise mission-critical web platforms and workflow management systems. Operating under federal technical performance guidelines and Agile methodologies, the successful candidate will design, develop, test, and deploy secure, accessible, and high-performing web applications and RESTful integration services.

This position requires a strong full-stack technical foundation in modern frontend single-page application (SPA) development using Angular (v17+) with U.S. Web Design System (USWDS) standards, paired with enterprise backend development using Java (Spring Boot 3.x) and relational database architectures (Oracle). The candidate will collaborate within a cross-functional Agile team to maintain complex state-machine workflow engines, implement secure API data synchronization feeds, enforce "Automation-First" testing standards, and ensure strict compliance with federal cybersecurity, identity management (OAuth2/OIDC/CAC), and Section 508 / WCAG 2.1 AA accessibility baselines. Come join our award-winning organization and work with some of the most talented and brightest minds in the GovCon industry.

Location: Remote

Key Responsibilities

The Full Stack Developer will perform the following duties:

1. Frontend Web Application Development (Angular)

• Maintain, enhance, and sustain public-facing and authenticated Single Page Applications (SPAs) built with Angular (v17+), leveraging standalone components, routing modules, reactive forms, and HTTP client service integrations.
• Implement and enforce U.S. Web Design System (USWDS) design standards across all user interfaces, ensuring consistent design patterns, cross-browser compatibility (Chrome, Edge, Firefox, Safari), and responsive design.
• Maintain and optimize Angular service layers, application state management, and HTTP interceptors (including JWT authentication interceptors and organizational context interceptors).
• Ensure all web interfaces strictly comply with Section 508 accessibility standards and Web Content Accessibility Guidelines (WCAG 2.1 AA).

2. Backend Engineering & Microservices (Java / Spring Boot)

• Design, build, and sustain enterprise-grade RESTful APIs and microservices using Java and Spring Boot (v3.x), implementing clean controller, service, repository, and DTO architectures (utilizing Project Lombok).
• Maintain and enhance complex multi-tier workflow engines and state machines managing multi-year agreement lifecycles, renewal cycles, administrative actions, and approval chains.
• Maintain secure electronic signature and document workflows, including the automated generation, verification, and secure archival/retrieval of legally binding, digitally signed PDF records.
• Manage API specifications adhering to OpenAPI / Swagger standards, enforcing backward compatibility, structured request/response handling, pagination, audit logging, and formal API versioning strategies.

3. Database Management & Data Synchronization

• Maintain and optimize relational database schemas, tables, views, constraints, indexes, and complex queries using Oracle Database in conjunction with JPA / Hibernate entity mappings.
• Manage and sustain automated data pipelines and synchronization processes to ingest reference datasets from federal and external partner data sources, enforcing strict data validation, canonical deduplication, and quarantine rules.
• Engineer and maintain outbound API synchronization feeds to ensure authoritative system-of-record data dissemination across downstream enterprise systems.
• Maintain scheduled job processors (Spring Scheduling) to execute time-sensitive automated notifications, status expirations, and background batch processing without duplicate execution.

4. Identity Management, Security & Compliance

• Implement and sustain modern Identity, Credential, and Access Management (ICAM) integrations, including OAuth2 / OpenID Connect (OIDC) authentication flows, PKI / CAC authentication, and Spring Security configurations.
• Maintain and enforce Role-Based Access Control (RBAC) across all secured endpoints, along with administrative impersonation capabilities backed by comprehensive audit logging.
• Implement secure coding fundamentals aligned with Open Worldwide Application Security Project (OWASP) Top 10 and DoD Application Security and Development (ASD) STIG requirements.
• Remediate code vulnerabilities identified through Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) scanning tools (e.g., Fortify, Sonatype, Burp Suite).
• Assist in assembling and maintaining Risk Management Framework (RMF) artifacts and Plans of Action and Milestones (POA&Ms) in support of continuous Authority to Operate (ATO).

5. DevSecOps, Quality Assurance & Test Automation

• Champion an "Automation-First" quality philosophy and Test-Driven Development (TDD) approach, maintaining automated unit, integration, and end-to-end tests across every sprint.
• Integrate automated test suites directly into DevSecOps continuous integration and continuous deployment (CI/CD) pipelines (e.g., GitLab CI) prior to production deployment.
• Map technical specifications and test cases to a Requirements Traceability Matrix (RTM) to ensure comprehensive validation of functional capabilities.
• Provide Tier II and Tier III application and database engineering support, troubleshooting production defects, analyzing root causes, and deploying timely fixes.

Required Qualifications

• Education: Bachelor’s degree in Computer Science, Information Systems, Software Engineering, or a related technical field (equivalent professional experience may be considered).
• Experience:
  • Minimum of 5+ years of professional full-stack software development experience across the complete Software Development Life Cycle (SDLC).
  • 3+ years of hands-on experience developing enterprise web applications with Angular (v12+, with proficiency in modern versions such as v17+) and TypeScript.
  • 3+ years of hands-on backend development experience building secure REST APIs using Java and Spring Boot (v2.x/3.x).
• Technical Skills:
  • Strong proficiency with relational databases (Oracle), SQL query optimization, database schema design, and Object-Relational Mapping (ORM) via JPA / Hibernate.
  • Solid understanding of RESTful API architecture, OpenAPI / Swagger documentation, and HTTP client/interceptor design.
  • Experience implementing web application security, authentication protocols (OAuth2, OIDC, JWT), and Spring Security.
  • Hands-on experience with version control systems (Git) and Agile collaboration tools (Jira, GitLab).
  • Demonstrated understanding of web accessibility standards (Section 508 / WCAG 2.1 AA).
• Soft Skills:
  • Exceptional analytical, debugging, and problem-solving skills.
  • Proven ability to work collaboratively in an Agile/Scrum team environment and communicate technical designs effectively to stakeholders.

Preferred Qualifications

• Experience implementing the U.S. Web Design System (USWDS) or equivalent design system libraries.
• Experience with automated testing frameworks (e.g., JUnit, Mockito, Jasmine, Karma, Cypress, or Playwright) within DevSecOps CI/CD pipelines.
• Familiarity with PDF generation libraries, digital signature workflows, and state machine design patterns.
• Experience integrating data feeds with external governmental or educational data repositories.
• Familiarity with containerization (Docker, Kubernetes) and deploying applications to secure cloud environments (e.g., AWS GovCloud, Azure Government).
• Knowledge of DoD IT standards, DISA STIGs, and NIST SP 800-53 security control implementations.

Certifications

1. Cybersecurity Baseline Certification (Required)

Active DoD 8570.01-M / DoD 8140 Information Assurance Technical (IAT) Level II baseline certification (or higher). Acceptable certifications include:

• CompTIA Security+ CE (highly preferred)
• GIAC Security Essentials (GSEC)
• Systems Security Certified Practitioner (SSCP)
• CCNA-Security
• (Or higher IAT Level III certification, such as CISSP, CASP+ CE, CCNP Security)

2. Professional / Technical Certifications (Preferred)

• Oracle Certified Professional: Java SE Developer
• Spring Certified Professional
• Relevant Angular / Frontend Web Development Certifications
• Cloud Associate/Developer Certifications (AWS Certified Developer, Microsoft Certified: Azure Developer)

Security & Clearance Requirements

Due to the secure nature of the enterprise environment and associated federal mandates:

• Work Status Allowable: U.S. citizenship
• Minimum Clearance to Start: Public Trust or Favorably Adjudicated Secret Clearance 
• Compliance: Must strictly comply with federal cybersecurity directives, Operations Security (OPSEC) policies, and sensitive data protection requirements (PII/CUI) under the Privacy Act.