Full Stack Developer (Java / Angular / Spring Boot)

"Xcelerate Solutions seeks a Full Stack Developer (Java / Angular / Spring Boot) to play a pivotal role in the engineering sustainment enhancement and secure operations of enterprise mission-critical web platforms and workflow management systems. Operating under federal technical performance guidelines and Agile methodologies the successful candidate will design develop test and deploy secure accessible and high-performing web applications and RESTful integration services. This position requires a strong full-stack technical foundation in modern frontend single-page application (SPA) development using Angular (v17+) with U.S. Web Design System (USWDS) standards paired with enterprise backend development using Java (Spring Boot 3.x) and relational database architectures (Oracle). The candidate will collaborate within a cross-functional Agile team to maintain complex state-machine workflow engines implement secure API data synchronization feeds enforce ""Automation-First"" testing standards and ensure strict compliance with federal cybersecurity identity management (OAuth2/OIDC/CAC) and Section 508 / WCAG 2.1 AA accessibility baselines. Come join our award-winning organization and work with some of the most talented and brightest minds in the GovCon industry.

Location

Remote

Key Responsibilities

The Full Stack Developer will perform the following duties Frontend Web Application Development (Angular) Maintain enhance and sustain public-facing and authenticated Single Page Applications (SPAs) built with Angular (v17+) leveraging standalone components routing modules reactive forms and HTTP client service integrations. Implement and enforce U.S. Web Design System (USWDS) design standards across all user interfaces ensuring consistent design patterns cross-browser compatibility (Chrome Edge Firefox Safari) and responsive design. Maintain and optimize Angular service layers application state management and HTTP interceptors (including JWT authentication interceptors and organizational context interceptors). Ensure all web interfaces strictly comply with Section 508 accessibility standards and Web Content Accessibility Guidelines (WCAG 2.1 AA). Backend Engineering & Microservices (Java / Spring Boot) Design build and sustain enterprise-grade RESTful APIs and microservices using Java and Spring Boot (v3.x) implementing clean controller service repository and DTO architectures (utilizing Project Lombok). Maintain and enhance complex multi-tier workflow engines and state machines managing multi-year agreement lifecycles renewal cycles administrative actions and approval chains. Maintain secure electronic signature and document workflows including the automated generation verification and secure archival/retrieval of legally binding digitally signed PDF records. Manage API specifications adhering to OpenAPI / Swagger standards enforcing backward compatibility structured request/response handling pagination audit logging and formal API versioning strategies. Database Management & Data Synchronization Maintain and optimize relational database schemas tables views constraints indexes and complex queries using Oracle Database in conjunction with JPA / Hibernate entity mappings. Manage and sustain automated data pipelines and synchronization processes to ingest reference datasets from federal and external partner data sources enforcing strict data validation canonical deduplication and quarantine rules. Engineer and maintain outbound API synchronization feeds to ensure authoritative system-of-record data dissemination across downstream enterprise systems. Maintain scheduled job processors (Spring Scheduling) to execute time-sensitive automated notifications status expirations and background batch processing without duplicate execution. Identity Management Security & Compliance Implement and sustain modern Identity Credential and Access Management (ICAM) integrations including OAuth2 / OpenID Connect (OIDC) authentication flows PKI / CAC authentication and Spring Security configurations. Maintain and enforce Role-Based Access Control (RBAC) across all secured endpoints along with administrative impersonation capabilities backed by comprehensive audit logging. Implement secure coding fundamentals aligned with Open Worldwide Application Security Project (OWASP) Top 10 and DoD Application Security and Development (ASD) STIG requirements. Remediate code vulnerabilities identified through Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA) scanning tools (e.g. Fortify Sonatype Burp Suite). Assist in assembling and maintaining Risk Management Framework (RMF) artifacts and Plans of Action and Milestones (POA&Ms) in support of continuous Authority to Operate (ATO). DevSecOps Quality Assurance & Test Automation Champion an ""Automation-First"" quality philosophy and Test-Driven Development (TDD) approach maintaining automated unit integration and end-to-end tests across every sprint. Integrate automated test suites directly into DevSecOps continuous integration and continuous deployment (CI/CD) pipelines (e.g. GitLab CI) prior to production deployment. Map technical specifications and test cases to a

Requirements

Traceability Matrix (RTM) to ensure comprehensive validation of functional capabilities. Provide Tier II and Tier III application and database engineering support troubleshooting production defects analyzing root causes and deploying timely fixes.

Required Qualifications

Education Bachelor’s degree in Computer Science Information Systems Software Engineering or a related technical field (equivalent professional experience may be considered). Experience + Minimum of 5+ years of professional full-stack software development experience across the complete Software Development Life Cycle (SDLC). + 3+ years of hands-on experience developing enterprise web applications with Angular (v12+ with proficiency in modern versions such as v17+) and TypeScript. + 3+ years of hands-on backend development experience building secure REST APIs using Java and Spring Boot (v2.x/3.x).

Technical Skills

+ Strong proficiency with relational databases (Oracle) SQL query optimization database schema design and Object-Relational Mapping (ORM) via JPA / Hibernate. + Solid understanding of RESTful API architecture OpenAPI / Swagger documentation and HTTP client/interceptor design. + Experience implementing web application security authentication protocols (OAuth2 OIDC JWT) and Spring Security. + Hands-on experience with version control systems (Git) and Agile collaboration tools (Jira GitLab). + Demonstrated understanding of web accessibility standards (Section 508 / WCAG 2.1 AA). Soft

Skills

+ Exceptional analytical debugging and problem-solving skills. + Proven ability to work collaboratively in an Agile/Scrum team environment and communicate technical designs effectively to stakeholders.

Preferred Qualifications

Experience implementing the U.S. Web Design System (USWDS) or equivalent design system libraries. Experience with automated testing frameworks (e.g. JUnit Mockito Jasmine Karma Cypress or Playwright) within DevSecOps CI/CD pipelines. Familiarity with PDF generation libraries digital signature workflows and state machine design patterns. Experience integrating data feeds with external governmental or educational data repositories. Familiarity with containerization (Docker Kubernetes) and deploying applications to secure cloud environments (e.g. AWS GovCloud Azure Government). Knowledge of DoD IT standards DISA STIGs and NIST SP 800-53 security control implementations. Certifications Cybersecurity Baseline Certification (Required) Active DoD 8570.01-M / DoD 8140 Information Assurance Technical (IAT) Level II baseline certification (or higher). Acceptable certifications include CompTIA Security+ CE (highly preferred) GIAC Security Essentials (GSEC) Systems Security Certified Practitioner (SSCP) CCNA-Security (Or higher IAT Level III certification such as CISSP CASP+ CE CCNP Security) Professional / Technical Certifications (Preferred) Oracle Certified Professional Java SE Developer Spring Certified Professional Relevant Angular / Frontend Web Development Certifications Cloud Associate/Developer Certifications (AWS Certified Developer Microsoft Certified Azure Developer) Security & Clearance

Requirements

Due to the secure nature of the enterprise environment and associated federal mandates Work Status Allowable U.S. citizenship Minimum Clearance to Start Public Trust or Favorably Adjudicated Secret Clearance Compliance Must strictly comply with federal cybersecurity directives Operations Security (OPSEC) policies and sensitive data protection requirements (PII/CUI) under the Privacy Act. About Xcelerate Solutions Founded in 2009 and headquartered in McLean VA Xcelerate Solutions (www.xceleratesolutions.com) is one of America's fastest-growing companies. Xcelerate’s culture is defined by our diversified workforce of dynamic and versatile professionals supported with growth and development opportunities that contribute to individual and company growth. This strong commitment to our employees has been recognized by our inclusion on the Washington Business Journal’s “50 Best Places to Work” list as well as being a “Great Place to Work” certified company with a 4.6 star and a 99% CEO approval Glassdoor rating. Come find out why Xcelerate Solutions is one of the top DC Metro employers! Xcelerate Solutions is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race color national origin religion age equal pay disability veteran status sex sexual orientation gender identity genetic information or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals Xcelerate Solutions provides reasonable accommodation if needed because of an applicant's or an employee's disability. Pay Transparency Notice Xcelerate Solutions will not discharge or in any other manner discriminate against employees or applicants because they have inquired about discussed or disclosed their own pay or the pay of another employee or applicant."