Job description

cFocus Software seeks a Application Software Developer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance. Qualifications: • Active TS/SCI clearance • B.S. Computer Science, Information Technology, or a related field • Experience developing, integrating, testing, and maintaining enterprise application software. • Proficiency in programming and scripting technologies applicable to the assigned application environment. • Ability to translate requirements and designs into maintainable code and documented interfaces. • Experience with API development, data exchange, version control, debugging, and automated testing. • Understanding of DevSecOps, CI/CD, deployment automation, IaC, CaC, and configuration control. • Knowledge of secure coding, access controls, vulnerability remediation, and application monitoring. • Ability to troubleshoot application and integration issues and maintain technical documentation. • Strong collaboration and communication skills for coordinating architects, developers, operations, and cybersecurity teams.. Duties: • Analyze approved requirements and technical designs; develop application features, services, and integration components aligned with DC3 enterprise architecture. • Write, review, test, debug, and maintain code and scripts using approved technologies. • Develop, document, test, and maintain Application Programming Interfaces (APIs) and data-sharing interfaces under approved requirements and interagency agreements. • Integrate applications and data services across cloud and on-premises environments; coordinate interfaces and dependencies with architecture, infrastructure, and data teams. • Create and maintain Continuous Integration/Continuous Deployment (CI/CD) pipelines and versioned artifacts for applications, incorporating Government-specified security controls and guardrails. • Implement application deployment and configuration automation using Infrastructure as Code (IaC) and Configuration as Code (CaC), consistent with approved designs. • Conduct software integration and testing, document results, resolve defects, and prepare solutions for Government review and authorized deployment. • Maintain lifecycle traceability among requirements, code changes, configurations, tests, and releases. • Develop automation supporting assigned Security Technical Implementation Guide (STIG) requirements and secure configurations; coordinate implementation with cybersecurity personnel. • Support automated vulnerability scanning through CI/CD pipelines, analyze findings, recommend remediation, and implement approved code fixes, patches, and configuration changes. • Implement logging, monitoring, observability, alerts, and error handling; troubleshoot application performance, availability, and integration issues. • Maintain application baselines and change records under the approved Configuration Management Plan. Use centralized repositories and required cybersecurity evaluation before production changes. • Provide technical evidence, documentation, and monitoring data supporting Risk Management Framework (RMF), Authorization to Operate (ATO), and continuous ATO activities. • Support technical debt assessment and approved remediation through modular sprints; document legacy code and data-schema issues and contribute to engineering alternatives. • Research and test approved opportunities for agentic AI or other AI capabilities in CI/CD; recommend options and integrate them following Government approval. • Prepare design and as-built records, deployment instructions, and support documentation; assist incident response by supplying logs and implementing directed corrective actions.

Requirements

Must-haves

Qualifications: • Active TS/SCI clearance
B.S. Computer Science, Information Technology, or a related field
Experience developing, integrating, testing, and maintaining enterprise application software.
Proficiency in programming and scripting technologies applicable to the assigned application environment.
Ability to translate requirements and designs into maintainable code and documented interfaces.
Experience with API development, data exchange, version control, debugging, and automated testing.
Understanding of DevSecOps, CI/CD, deployment automation, IaC, CaC, and configuration control.
Knowledge of secure coding, access controls, vulnerability remediation, and application monitoring.
Ability to troubleshoot application and integration issues and maintain technical documentation.
Strong collaboration and communication skills for coordinating architects, developers, operations, and cybersecurity teams..
Duties: • Analyze approved requirements and technical designs; develop application features, services, and integration components aligned with DC3 enterprise architecture.
Write, review, test, debug, and maintain code and scripts using approved technologies.
Develop, document, test, and maintain Application Programming Interfaces (APIs) and data-sharing interfaces under approved requirements and interagency agreements.
Integrate applications and data services across cloud and on-premises environments; coordinate interfaces and dependencies with architecture, infrastructure, and data teams.
Create and maintain Continuous Integration/Continuous Deployment (CI/CD) pipelines and versioned artifacts for applications, incorporating Government-specified security controls and guardrails.
Implement application deployment and configuration automation using Infrastructure as Code (IaC) and Configuration as Code (CaC), consistent with approved designs.
Conduct software integration and testing, document results, resolve defects, and prepare solutions for Government review and authorized deployment.
Maintain lifecycle traceability among requirements, code changes, configurations, tests, and releases.
Develop automation supporting assigned Security Technical Implementation Guide (STIG) requirements and secure configurations; coordinate implementation with cybersecurity personnel.
Support automated vulnerability scanning through CI/CD pipelines, analyze findings, recommend remediation, and implement approved code fixes, patches, and configuration changes.
Implement logging, monitoring, observability, alerts, and error handling; troubleshoot application performance, availability, and integration issues.
Maintain application baselines and change records under the approved Configuration Management Plan. Use centralized repositories and required cybersecurity evaluation before production changes.
Provide technical evidence, documentation, and monitoring data supporting Risk Management Framework (RMF), Authorization to Operate (ATO), and continuous ATO activities.
Support technical debt assessment and approved remediation through modular sprints; document legacy code and data-schema issues and contribute to engineering alternatives.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

apici/cdai

Platform: jazzhr
Effort: medium