Benefits:

401(k) matching

Bonus based on performance

Competitive salary

Dental insurance

Health insurance

Paid time off

Parental leave

Training & development

Vision insurance

POSITION OVERVIEW The Senior Web Developer/Engineer ensures the stable operation, security, and continued development of the Defense Logistics Agency (DLA) Financial Website — an Oracle-backed financial reporting and audit-metrics intranet application — in support of the DoD. This role is responsible for developing and maintaining the Java/J2EE web application; administering the Oracle WebLogic (14.x+) application server on Red Hat Enterprise Linux; coding to Section 508 accessibility standards; and performing vulnerability management and STIG/RMF maintenance to keep the application secure and available. This is an off-site position with periodic on-site support Fort Belvoir, VA or the Washington, DC metropolitan area.

DUTIES AND RESPONSIBILITIES

Develop and maintain the DLA Finance Website application in Java (J2EE, Struts 2/MVC, JDBC, JSP, Servlets, JMS/MQ) to support DLA's financial reporting needs

Install, configure, monitor, and service Oracle WebLogic Application Server (14.x+); create diagnostic modules and configure alerts/notifications using the WebLogic Diagnostic Framework and WLST scripting; manage security realms, authentication providers, and connections to Oracle Identity Management

Develop PL/SQL code, SQL stored procedures, and database scripts supporting the web-based reporting tool; provide performance tuning and technical documentation for that code

Maintain a web-based Finance and Audit Metrics tool that enables senior leadership and the J8 community to assess monthly financial metrics against defined performance targets

Build and maintain reports using data visualization and business intelligence tools to meet DLA Distribution J8/J6 budget and J62FB/SFA reporting needs

Code to Section 508 (29 U.S.C. 794d) accessibility standards using assistive technology tools such as JAWS, ZoomText, Dragon, and Axe monitoring tools

Perform vulnerability management — review WebInspect and ACAS (via CyberSWAT) scan reports, interpret results, and mitigate vulnerabilities; prepare remediation plans in accordance with the Plan of Action and Milestones (POA&M); and monitor software libraries and announcements for newly disclosed vulnerabilities

Maintain and document all STIG items (remediations, work-corrections, security checklists) and other Risk Management Framework (RMF) documentation; create and maintain a Threat Model for the web application

Manage application log communication between ArcSight and Splunk (and the DLA log-collection solution) with the Oracle WebLogic Server

Manage SSL certificates using Oracle Wallet Manager, OpenSSL, and Java Keytool, and configure WebLogic to use certificates

Support and maintain servers for the DLA Financial Web (DFW) solution across RHEL and Windows, including command-line administration, shell scripting, and scheduled tasks; perform monthly and weekly data imports

Participate in migration of the DLA Financial Web application to Military and Government Azure development and production environments

Analyze business information requirements and translate them into logical database designs; consult with users to determine information-management requirements and to design and implement small-to-large projects

Provide second-level diagnosis and resolution of database problems, working with Oracle as needed and escalating to the COR; develop and submit performance/tuning evaluation reports

Produce required deliverables — web application source code, security documentation, and design/coding-standards, disaster-recovery, and threat-mitigation documentation

Attend and participate in DLA Information Operations status meetings and meetings with DLA Financial Management Office personnel

REQUIREDQUALIFICATIONS

Active Secret Clearance

Minimum five (5) years relevant experience

Relevant certification from a nationally recognized technical authority

DoD 8570.01-M / 8140 IAT Level I baseline certification (e.g., CompTIA A+ CE, Network+ CE, SSCP, or another DoD-approved IAT Level I baseline)

Appropriate Computing Environment (CE) certification as outlined by the Cybersecurity Computing Environment Certification Working Group, applicable to the platform administered (Oracle WebLogic / Linux)

Proficiency in Java, Python, WebLogic scripting, Linux shell scripting, C#, and HTML/JavaScript

Hands-on experience administering Oracle WebLogic Application Server (14.x+) — install, configure, monitor, service; diagnostic modules; WLST scripting; security realms and authentication providers

Java development experience — J2EE, Struts 2/MVC, JDBC, JSP, Servlets, Swing, JMS/MQ Series; JDeveloper and Eclipse (OEPE) IDEs; building and deploying .WAR and .jar files with Apache Ant/Maven and GIT

Web programming experience — HTML, CSS, JavaScript, jQuery, Material CSS, AngularJS, Ajax

Experience with Red Hat Enterprise Linux (RHEL) development and production environments, including command-line administration, SSH, and shell scripting

Experience with PL/SQL, SQL, SQLPlus, TOAD, and Oracle Database server

Experience with IBM MQ Series / WebSphere MQ and Java Messaging Service

Experience with security tooling — ArcSight and Splunk — and SSL certificate management (Oracle Wallet Manager, OpenSSL, Java Keytool)

Experience with application security testing software (running code scans, interpreting reports, mitigating findings) and Oracle Enterprise Manager

Demonstrated experience migrating servers and applications to Military and Government Azure development and production environments

Extensive understanding of assistive technology tools (JAWS, ZoomText, Dragon, Axe) and ability to code to Section 508 standards

Demonstrated technical writing — disaster recovery, threat mitigation, design documents, and coding standards and practices

Strong problem-solving, documentation, and customer-communication skills

Preferred: experience with source control tools such as GIT

This is a remote position.