USAF - Software Developer

Develop automation supporting assigned Security Technical Implementation Guide (STIG) requirements and secure configurations; coordinate implementation with cybersecurity personnel. Provide technical evidence, documentation, and monitoring data supporting Risk Management Framework (RMF), Authority to Operate (ATO), and continuous ATO activities.

cFocus Software seeks a Software Developer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.Qualifications:

• Active TS/SCI clearance
• B.S. Computer Science, Information Technology, or a related field
• Experience developing, integrating, testing, and maintaining enterprise application software.
• Proficiency in programming and scripting technologies applicable to the assigned application environment.
• Ability to translate requirements and designs into maintainable code and documented interfaces.
• Experience with API development, data exchange, version control, debugging, and automated testing.
• Understanding of DevSecOps, CI/CD, deployment automation, IaC, CaC, and configuration control.
• Knowledge of secure coding, access controls, vulnerability remediation, and application monitoring.
• Ability to troubleshoot application and integration issues and maintain technical documentation.
• Strong collaboration and communication skills for coordinating architects, developers, operations, and cybersecurity teams

Duties:

• Analyze approved requirements and technical designs; develop application features, services, and integration components aligned with DC3 enterprise architecture.
• Write, review, test, debug, and maintain code and scripts using approved technologies.
• Develop, document, test, and maintain Application Programming Interfaces (APIs) and data-sharing interfaces under approved requirements and interagency agreements.
• Integrate applications and data services across cloud and on-premises environments; coordinate interfaces and dependencies with architecture, infrastructure, and data teams.
• Create and maintain Continuous Integration/Continuous Deployment (CI/CD) pipelines and versioned artifacts for applications, incorporating Government-specified security controls and guardrails.
• Implement application deployment and configuration automation using Infrastructure as Code (IaC) and Configuration as Code (CaC), consistent with approved designs.
• Conduct software integration and testing, document results, resolve defects, and prepare solutions for Government review and authorized deployment.
• Maintain lifecycle traceability among requirements, code changes, configurations, tests, and releases.
• Develop automation supporting assigned Security Technical Implementation Guide (STIG) requirements and secure configurations; coordinate implementation with cybersecurity personnel.
• Support automated vulnerability scanning through CI/CD pipelines, analyze findings, recommend remediation, and implement approved code fixes, patches, and configuration changes.
• Implement logging, monitoring, observability, alerts, and error handling; troubleshoot application performance, availability, and integration issues.
• Maintain application baselines and change records under the approved Configuration Management Plan. Use centralized repositories and required cybersecurity evaluation before production changes.
• Provide technical evidence, documentation, and monitoring data supporting Risk Management Framework (RMF), Authority to Operate (ATO), and continuous ATO activities.
• Support technical debt assessment and approved remediation through modular sprints; document legacy code and data-schema issues and contribute to engineering alternatives.
• Research and test approved opportunities for agentic AI or other AI capabilities in CI/CD; recommend options and integrate them following Government approval.
• Prepare design and as-built records, deployment instructions, and support documentation; assist incident response by supplying logs and implementing directed corrective actions.

Powered by JazzHR