Mid-Level Full Stack Developer

Technical requirements:

• Strong Python development is the cornerstone of this role. You should be deeply comfortable with Django or equivalent frameworks, API design patterns including Backend-for-Frontend architectures, Pydantic-driven validation, and async Python in production. This is where the majority of your backend work lives.
• Equally important is your ability to build real frontend experiences. We need developers who can deliver polished, responsive interfaces in React or Next.js. Complete applications with thoughtful component design, effective state management, and the kind of attention to user experience that turns a functional tool into something people actually want to use. If you consider yourself “backend with some frontend,” this role will stretch you.
• You should bring solid relational database skills centered on PostgreSQL, including schema design, performance tuning, and data migration.

with Aurora is a plus.

You will periodically work with data loading and transformation tasks; bringing structured and unstructured sources into clean, well-modeled relational schemas.

• Familiarity with Keycloak, OIDC, SAML, JWT-based sessions, and certificate-based authentication (CAC/PIV) is important. You should understand how to implement role-based access control and secure token handling in applications where trust boundaries are non-negotiable.
• You need practical AWS experience deploying, operating, and troubleshooting applications across classified partitions. Core services like EKS, Aurora, S3, IAM, VPC, and KMS should be familiar territory. Everything runs in AWS. Infrastructure is managed through Terraform, and you should be comfortable reading, writing, and maintaining modules.
• You should understand secure development practices, secrets management, least-privilege patterns, and the fundamentals of building applications that operate in STIG-hardened, FIPS-validated environments. You will work with DevSecOps scanning outputs across static analysis, dependency scanning, container scanning, and SBOM verification. The platform manages the toolchain; you are responsible for understanding the results and incorporating them into your development cycle.
• AI-assisted development is a required competency. The team leverages these tools extensively for velocity, consistency, and quality. You should already be using them in your daily work and understand both their capabilities and their limitations.

The professional qualities that matter as much as the technical ones:

• In a team this small, there is nowhere to hide and no room for passive contributors. We need people who take ownership of their code, their commitments, and their mistakes. People who communicate clearly, ask questions early, and push back when something does not make sense.
• Attention to detail is critical. When you are writing applications that operate in classified environments, a missed edge case in an auth flow or a carelessly scoped IAM policy has real consequences. We want engineers who are meticulous by nature, not by mandate.
• Work ethic matters. This is a small team with significant delivery expectations. We need people who are self-directed, who do not wait to be told what to do next, and who take pride in shipping clean, well-tested, well-documented work.
• Familiarity with intelligence community environments and the operational context of DoD mission systems is valuable, though the platform abstracts much of the domain-specific complexity. What matters more is intellectual curiosity about the problem space and the adaptability to work across unfamiliar domains without needing everything spelled out.

• Active TS/SCI clearance
• Python backend development (Django, FastAPI, or equivalent; async/ASGI; modern Python 3.13+)
• Frontend development with React, Next.js, or equivalent (production UIs, not prototypes)
• RESTful API design including BFF patterns and schema validation
• PostgreSQL — schema design, query optimization, migrations, data loading
• AWS — deploying and operating applications across classified partitions and regions
• Terraform for infrastructure-as-code
• Keycloak, OIDC, SAML, or CAC/PIV authentication integration
• Secure application development for STIG-hardened, FIPS-validated environments
• GitLab CI/CD pipelines and Git-based workflows
• DevSecOps scan interpretation and remediation (SAST, DAST, SCA, SBOM, container scanning)
• AI-assisted development tooling in daily practice
• 5+ years hands-on development (or equivalent demonstrated capability)
• B.S. degree in a STEM field

• Incorporating generative AI capabilities into applications (RAG pipelines, LLM integration, or embedding-based search)
• Migrating legacy systems and data sources into modern cloud-native architectures
• Container orchestration with Kubernetes/EKS and Helm
• Hardened container supply chains and FIPS-validated image pipelines
• NIST 800-53 security controls and their practical application to software design
• Multi-classification or cross-partition deployment architectures
• Familiarity with intelligence community environments and DoD mission systems