POSITION OVERVIEW
The Senior Web Developer/Engineer ensures the stable operation, security, and continued development of the Defense Logistics Agency (DLA) Financial Website — an Oracle-backed financial reporting and audit-metrics intranet application — in support of the DoD. This role is responsible for developing and maintaining the Java/J2EE web application; administering the Oracle WebLogic (14.x+) application server on Red Hat Enterprise Linux; coding to Section 508 accessibility standards; and performing vulnerability management and STIG/RMF maintenance to keep the application secure and available. This is an off-site position with periodic on-site support Fort Belvoir, VA or the Washington, DC metropolitan area.
DUTIES AND RESPONSIBILITIES
- Develop and maintain the DLA Finance Website application in Java (J2EE, Struts 2/MVC, JDBC, JSP, Servlets, JMS/MQ) to support DLA's financial reporting needs
- Install, configure, monitor, and service Oracle WebLogic Application Server (14.x+); create diagnostic modules and configure alerts/notifications using the WebLogic Diagnostic Framework and WLST scripting; manage security realms, authentication providers, and connections to Oracle Identity Management
- Develop PL/SQL code, SQL stored procedures, and database scripts supporting the web-based reporting tool; provide performance tuning and technical documentation for that code
- Maintain a web-based Finance and Audit Metrics tool that enables senior leadership and the J8 community to assess monthly financial metrics against defined performance targets
- Build and maintain reports using data visualization and business intelligence tools to meet DLA Distribution J8/J6 budget and J62FB/SFA reporting needs
- Code to Section 508 (29 U.S.C. 794d) accessibility standards using assistive technology tools such as JAWS, ZoomText, Dragon, and Axe monitoring tools
- Perform vulnerability management — review WebInspect and ACAS (via CyberSWAT) scan reports, interpret results, and mitigate vulnerabilities; prepare remediation plans in accordance with the Plan of Action and Milestones (POA&M); and monitor software libraries and announcements for newly disclosed vulnerabilities
- Maintain and document all STIG items (remediations, work-corrections, security checklists) and other Risk Management Framework (RMF) documentation; create and maintain a Threat Model for the web application
- Manage application log communication between ArcSight and Splunk (and the DLA log-collection solution) with the Oracle WebLogic Server
- Manage SSL certificates using Oracle Wallet Manager, OpenSSL, and Java Keytool, and configure WebLogic to use certificates
- Support and maintain servers for the DLA Financial Web (DFW) solution across RHEL and Windows, including command-line administration, shell scripting, and scheduled tasks; perform monthly and weekly data imports
- Participate in migration of the DLA Financial Web application to Military and Government Azure development and production environments
- Analyze business information requirements and translate them into logical database designs; consult with users to determine information-management requirements and to design and implement small-to-large projects
- Provide second-level diagnosis and resolution of database problems, working with Oracle as needed and escalating to the COR; develop and submit performance/tuning evaluation reports
- Produce required deliverables — web application source code, security documentation, and design/coding-standards, disaster-recovery, and threat-mitigation documentation
- Attend and participate in DLA Information Operations status meetings and meetings with DLA Financial Management Office personnel
REQUIREDQUALIFICATIONS
- Active Secret Clearance
- Minimum five (5) years relevant experience
- Relevant certification from a nationally recognized technical authority
- DoD 8570.01-M / 8140 IAT Level I baseline certification (e.g., CompTIA A+ CE, Network+ CE, SSCP, or another DoD-approved IAT Level I baseline)
- Appropriate Computing Environment (CE) certification as outlined by the Cybersecurity Computing Environment Certification Working Group, applicable to the platform administered (Oracle WebLogic / Linux)
- Proficiency in Java, Python, WebLogic scripting, Linux shell scripting, C#, and HTML/JavaScript
- Hands-on experience administering Oracle WebLogic Application Server (14.x+) — install, configure, monitor, service; diagnostic modules; WLST scripting; security realms and authentication providers
- Java development experience — J2EE, Struts 2/MVC, JDBC, JSP, Servlets, Swing, JMS/MQ Series; JDeveloper and Eclipse (OEPE) IDEs; building and deploying .WAR and .jar files with Apache Ant/Maven and GIT
- Web programming experience — HTML, CSS, JavaScript, jQuery, Material CSS, AngularJS, Ajax
- Experience with Red Hat Enterprise Linux (RHEL) development and production environments, including command-line administration, SSH, and shell scripting
- Experience with PL/SQL, SQL, SQLPlus, TOAD, and Oracle Database server
- Experience with IBM MQ Series / WebSphere MQ and Java Messaging Service
- Experience with security tooling — ArcSight and Splunk — and SSL certificate management (Oracle Wallet Manager, OpenSSL, Java Keytool)
- Experience with application security testing software (running code scans, interpreting reports, mitigating findings) and Oracle Enterprise Manager
- Demonstrated experience migrating servers and applications to Military and Government Azure development and production environments
- Extensive understanding of assistive technology tools (JAWS, ZoomText, Dragon, Axe) and ability to code to Section 508 standards
- Demonstrated technical writing — disaster recovery, threat mitigation, design documents, and coding standards and practices
- Strong problem-solving, documentation, and customer-communication skills
- Preferred: experience with source control tools such as GIT
This is a remote position.