[Remote] Full Stack Developer (Java / Angular / Spring Boot)

Note: The job is a remote job and is open to candidates in USA. Xcelerate Solutions is seeking a Full Stack Developer to support enterprise mission-critical web platforms and workflow management systems. The role focuses on designing, developing, testing, deploying, and sustaining secure Angular and Java/Spring Boot applications, RESTful services, databases, integrations, and automated testing within Agile and federal compliance environments.

Responsibilities

• Maintain, enhance, and sustain public-facing and authenticated Single Page Applications (SPAs) built with Angular (v17+), leveraging standalone components, routing modules, reactive forms, and HTTP client service integrations
• Implement and enforce U.S. Web Design System (USWDS) design standards across all user interfaces, ensuring consistent design patterns, cross-browser compatibility (Chrome, Edge, Firefox, Safari), and responsive design
• Maintain and optimize Angular service layers, application state management, and HTTP interceptors (including JWT authentication interceptors and organizational context interceptors)
• Ensure all web interfaces strictly comply with Section 508 accessibility standards and Web Content Accessibility Guidelines (WCAG 2.1 AA)
• Design, build, and sustain enterprise-grade RESTful APIs and microservices using Java and Spring Boot (v3.x), implementing clean controller, service, repository, and DTO architectures (utilizing Project Lombok)
• Maintain and enhance complex multi-tier workflow engines and state machines managing multi-year agreement lifecycles, renewal cycles, administrative actions, and approval chains
• Maintain secure electronic signature and document workflows, including the automated generation, verification, and secure archival/retrieval of legally binding, digitally signed PDF records
• Manage API specifications adhering to OpenAPI / Swagger standards, enforcing backward compatibility, structured request/response handling, pagination, audit logging, and formal API versioning strategies
• Maintain and optimize relational database schemas, tables, views, constraints, indexes, and complex queries using Oracle Database in conjunction with JPA / Hibernate entity mappings
• Manage and sustain automated data pipelines and synchronization processes to ingest reference datasets from federal and external partner data sources, enforcing strict data validation, canonical deduplication, and quarantine rules
• Engineer and maintain outbound API synchronization feeds to ensure authoritative system-of-record data dissemination across downstream enterprise systems
• Maintain scheduled job processors (Spring Scheduling) to execute time-sensitive automated notifications, status expirations, and background batch processing without duplicate execution
• Implement and sustain modern Identity, Credential, and Access Management (ICAM) integrations, including OAuth2 / OpenID Connect (OIDC) authentication flows, PKI / CAC authentication, and Spring Security configurations
• Maintain and enforce Role-Based Access Control (RBAC) across all secured endpoints, along with administrative impersonation capabilities backed by comprehensive audit logging
• Implement secure coding fundamentals aligned with Open Worldwide Application Security Project (OWASP) Top 10 and DoD Application Security and Development (ASD) STIG requirements
• Remediate code vulnerabilities identified through Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) scanning tools (e.g., Fortify, Sonatype, Burp Suite)
• Assist in assembling and maintaining Risk Management Framework (RMF) artifacts and Plans of Action and Milestones (POA&Ms) in support of continuous Authority to Operate (ATO)
• Champion an "Automation-First" quality philosophy and Test-Driven Development (TDD) approach, maintaining automated unit, integration, and end-to-end tests across every sprint
• Integrate automated test suites directly into DevSecOps continuous integration and continuous deployment (CI/CD) pipelines (e.g., GitLab CI) prior to production deployment
• Map technical specifications and test cases to a Requirements Traceability Matrix (RTM) to ensure comprehensive validation of functional capabilities
• Provide Tier II and Tier III application and database engineering support, troubleshooting production defects, analyzing root causes, and deploying timely fixes

Skills

• Bachelor's degree in Computer Science, Information Systems, Software Engineering, or a related technical field (equivalent professional experience may be considered)
• Minimum of 5+ years of professional full-stack software development experience across the complete Software Development Life Cycle (SDLC)
• 3+ years of hands-on experience developing enterprise web applications with Angular (v12+, with proficiency in modern versions such as v17+) and TypeScript
• 3+ years of hands-on backend development experience building secure REST APIs using Java and Spring Boot (v2.x/3.x)
• Strong proficiency with relational databases (Oracle), SQL query optimization, database schema design, and Object-Relational Mapping (ORM) via JPA / Hibernate
• Solid understanding of RESTful API architecture, OpenAPI / Swagger documentation, and HTTP client/interceptor design
• Experience implementing web application security, authentication protocols (OAuth2, OIDC, JWT), and Spring Security
• Hands-on experience with version control systems (Git) and Agile collaboration tools (Jira, GitLab)
• Demonstrated understanding of web accessibility standards (Section 508 / WCAG 2.1 AA)
• Exceptional analytical, debugging, and problem-solving skills
• Proven ability to work collaboratively in an Agile/Scrum team environment and communicate technical designs effectively to stakeholders
• Active DoD 8570.01-M / DoD 8140 Information Assurance Technical (IAT) Level II baseline certification (or higher)
• Work Status Allowable: U.S. citizenship
• Minimum Clearance to Start: Public Trust or Favorably Adjudicated Secret Clearance
• Experience implementing the U.S. Web Design System (USWDS) or equivalent design system libraries
• Experience with automated testing frameworks (e.g., JUnit, Mockito, Jasmine, Karma, Cypress, or Playwright) within DevSecOps CI/CD pipelines
• Familiarity with PDF generation libraries, digital signature workflows, and state machine design patterns
• Experience integrating data feeds with external governmental or educational data repositories
• Familiarity with containerization (Docker, Kubernetes) and deploying applications to secure cloud environments (e.g., AWS GovCloud, Azure Government)
• Knowledge of DoD IT standards, DISA STIGs, and NIST SP 800-53 security control implementations
• CompTIA Security+ CE (highly preferred)
• Oracle Certified Professional: Java SE Developer
• Spring Certified Professional
• Relevant Angular / Frontend Web Development Certifications
• Cloud Associate/Developer Certifications (AWS Certified Developer, Microsoft Certified: Azure Developer)

Benefits

• Remote work
• Growth and development opportunities

Company Overview