Job description

Not Specified Apply for job PLEASE, NO H1B OR OPT VISA CANDIDATES NO C2C CANDIDATES YOU MUST HAVE AN ACTIVE SECRET SECURITY CLEARANCE Location: Hybrid – McLean, VA 22102 (U.S.) with International Travel Interview: 2 Video interviews One can be in person. Security Clearance: Active Secret (eligible for Top Secret) Employment Type: Full-Time/ Contract Capstone IT is helping our client to find a Senior Java Developer who will design, build, secure, and maintain enterprise applications supporting Identity, Credential, and Access Management (ICAM). The developer will use Java, Spring Boot, microservices, REST APIs, databases, and cloud technologies to create scalable applications that meet federal security requirements. This person will work with architects, business analysts, product owners, and developers to deliver secure solutions. The role includes application architecture, hands-on development, code reviews, troubleshooting, performance optimization, CI/CD, and security compliance. A particularly important aspect is building applications that support identity management, credentialing, access control, and potentially cryptographic integrations, including hardware security modules (HSMs), public key infrastructure (PKI), and certificate management. Top 4 Skills • Java 11/17+ and Spring Boot: 10+ years of Java development with Spring MVC, Spring Security, Hibernate/JPA, and enterprise application architecture. • Microservices, APIs, and cloud: RESTful services, Docker, Kubernetes, and AWS, Azure, or GCP. • Federal application security: NIST SP 800-53, FedRAMP, OWASP, SonarQube, Tenable, and secure coding. • ICAM and cryptography: Identity and access management domain experience; PKI, HSM, certificates, and cryptographic integration are especially valuable. Main Responsibilities • Design, develop, test, and deploy secure enterprise Java applications. • Lead Spring Boot and microservices development. • Build REST APIs and integrate internal and third-party services. • Work with relational and NoSQL databases. • Perform code reviews, troubleshoot incidents, and improve performance. • Implement CI/CD pipelines and containerized deployments. • Apply security controls and support compliance requirements. • Participate in architecture decisions and collaborate across technical teams. • Support ICAM-related integrations and, where applicable, cryptographic technologies. Required Qualifications • Bachelor’s degree in a relevant field. • 10+ years of hands-on Java development. • Java 11/17+, Spring Framework, Spring Boot, Spring MVC, Spring Security, and Hibernate/JPA. • Microservices, REST APIs, JSON, and web services. • SQL Server, PostgreSQL, or MySQL; MongoDB. • Cloud experience with Azure, AWS, or GCP. • Docker, Kubernetes, Kafka/RabbitMQ/ActiveMQ. • Jenkins, Azure DevOps, or GitHub Actions. • Agile/Scrum, Git, monitoring, and logging tools. • Experience building applications that meet NIST/FedRAMP security controls. • Active Secret clearance and Top Secret eligibility. Preferred: Thales Luna HSM, Azure Managed HSM, PKCS#11, Java JCE/JCA providers, PKI, certificate troubleshooting, encryption, digital signatures, key rotation, key escrow, and secure key storage. Share this job SMS Email LinkedIn Twitter Facebook Job details Recruiter: Chloe Schumaker Job type: Not Specified Location: Not Specified Reference: JOB-4875 Date posted: 20 Oct 2026 Apply for job Apply now " * " indicates required fields

Requirements

Must-haves

Not Specified
Apply for job
YOU MUST HAVE AN ACTIVE SECRET SECURITY CLEARANCE
Location: Hybrid – McLean, VA 22102 (U.S.) with International Travel
Interview: 2 Video interviews One can be in person.
Security Clearance: Active Secret (eligible for Top Secret)
Employment Type: Full-Time/ Contract
Top 4 Skills
Java 11/17+ and Spring Boot: 10+ years of Java development with Spring MVC, Spring Security, Hibernate/JPA, and enterprise application architecture.
Microservices, APIs, and cloud: RESTful services, Docker, Kubernetes, and AWS, Azure, or GCP.
Federal application security: NIST SP 800-53, FedRAMP, OWASP, SonarQube, Tenable, and secure coding.
ICAM and cryptography: Identity and access management domain experience; PKI, HSM, certificates, and cryptographic integration are especially valuable.
Design, develop, test, and deploy secure enterprise Java applications.
Lead Spring Boot and microservices development.
Build REST APIs and integrate internal and third-party services.
Work with relational and NoSQL databases.
Perform code reviews, troubleshoot incidents, and improve performance.
Implement CI/CD pipelines and containerized deployments.
Apply security controls and support compliance requirements.
Participate in architecture decisions and collaborate across technical teams.
Support ICAM-related integrations and, where applicable, cryptographic technologies.
Bachelor’s degree in a relevant field.
10+ years of hands-on Java development.

Nice-to-haves

Preferred: Thales Luna HSM, Azure Managed HSM, PKCS#11, Java JCE/JCA providers, PKI, certificate troubleshooting, encryption, digital signatures, key rotation, key escrow, and secure key storage.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

javarestci/cddockerkubernetesawsazuregcpsqlagilescrum

Platform: careers-html
Effort: medium

Benefits

Benefits detected in the listing.

Pto