Developer Support Specialist

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, develop, and maintain enterprise web applications for a federal government client, including the modernization of legacy Classic ASP modules to .NET Core MVC.

• Operate within a DevSecOps/Agile framework throughout the complete Software Development Life Cycle (SDLC), incorporating two-week sprint cycles.

• Construct and sustain both front-end and back-end components using C# and JavaScript, interfacing with an Oracle 19c database.

• Conduct code reviews, perform security scans, and address vulnerabilities through tools like ACAS/SCAP, DISA STIG Viewer, and eMASS.

• Create, update, and maintain Risk Management Framework (RMF) authorization package documentation, including System Security Plans (SSP), Continuity of Operations Plans (COOP), Incident Response Plans (IRP), and System Design Documents.

• Oversee the system authorization boundary.

• Formulate and manage Plans of Action and Milestones (POA&Ms) for identified vulnerabilities, ensuring compliance with remediation timelines.

• Assist in the migration of applications to the USACE CWBI Cloud environment using secure images and microservices where appropriate.

• Aid in the inventory, documentation, and governance of AI/ML systems and datasets in alignment with DoD principles.

• Develop and maintain Department of Defense Architecture Framework (DoDAF)-compliant System Architecture Diagrams and technical documentation.

• Engage in requirements analysis, sprint planning, and professional demonstrations of releases to government stakeholders.

⛳️ Requirements

• U.S. Citizenship is required.

• A minimum of an active Tier 1 (or higher) federal background investigation, favorably adjudicated, is necessary prior to commencement.

• Bachelor’s degree in Computer Science, Software Engineering, or a related field, or equivalent experience is required.

• At least 5 years of full-stack or application development experience is mandatory.

• Proficiency in C# and JavaScript, with experience in .NET Core MVC is essential.

• Previous experience in modernizing legacy code, such as Classic ASP to modern frameworks, is required.

• Expert-level knowledge of Oracle database administration, tuning, and complex query development is needed.

• Familiarity with Agile/DevSecOps methodologies is essential.

• Knowledge of secure coding practices and DoD Security Technical Implementation Guides (STIGs) is mandatory.

• Proven experience with RMF authorization packages and the eMASS system is necessary.

• CompTIA Security+ or a DoD-approved equivalent is required within six months of contract start, as per DoD Manual 8140.03.

• Experience with cloud architecture and migration, preferably within AWS GovCloud, is essential.

• A background in federal government or DoD application development is preferred.

• Experience in implementing or documenting AI/ML solutions within DoD governance frameworks is beneficial.

• Familiarity with GitHub Enterprise and modern DevSecOps toolchains is required.

• (ISC)² CISSP or EC-Council Certified DevSecOps Engineer (ECDE) is preferred for senior/lead roles.

🏝️ Benefits

• Full-Time, Non-Personal Services employment.

• Opportunity to obtain a Common Access Card (CAC) if required by duties.

• Support for obtaining CompTIA Security+ or a DoD-approved equivalent within six months of contract start.