Senior Web Developer/Engineer

The Senior Web Developer/Engineer ensures the stable operation, security, and continued development of the Defense Logistics Agency (DLA) Financial Website - an Oracle-backed financial reporting and audit-metrics intranet application - in support of the DoD. This role is responsible for developing and maintaining the Java/J2EE web application; administering the Oracle WebLogic (14.x+) application server on Red Hat Enterprise Linux; coding to Section 508 accessibility standards; and performing vulnerability management and STIG/RMF maintenance to keep the application secure and available. This is an off-site position with periodic on-site support Fort Belvoir, VA or the Washington, DC metropolitan area., * Develop and maintain the DLA Finance Website application in Java (J2EE, Struts 2/MVC, JDBC, JSP, Servlets, JMS/MQ) to support DLA’s financial reporting needs

• Install, configure, monitor, and service Oracle WebLogic Application Server (14.x+); create diagnostic modules and configure alerts/notifications using the WebLogic Diagnostic Framework and WLST scripting; manage security realms, authentication providers, and connections to Oracle Identity Management
• Develop PL/SQL code, SQL stored procedures, and database scripts supporting the web-based reporting tool; provide performance tuning and technical documentation for that code
• Maintain a web-based Finance and Audit Metrics tool that enables senior leadership and the J8 community to assess monthly financial metrics against defined performance targets
• Build and maintain reports using data visualization and business intelligence tools to meet DLA Distribution J8/J6 budget and J62FB/SFA reporting needs
• Code to Section 508 (29 U.S.C. 794d) accessibility standards using assistive technology tools such as JAWS, ZoomText, Dragon, and Axe monitoring tools
• Perform vulnerability management - review WebInspect and ACAS (via CyberSWAT) scan reports, interpret results, and mitigate vulnerabilities; prepare remediation plans in accordance with the Plan of Action and Milestones (POA&M); and monitor software libraries and announcements for newly disclosed vulnerabilities
• Maintain and document all STIG items (remediations, work-corrections, security checklists) and other Risk Management Framework (RMF) documentation; create and maintain a Threat Model for the web application
• Manage application log communication between ArcSight and Splunk (and the DLA log-collection solution) with the Oracle WebLogic Server
• Manage SSL certificates using Oracle Wallet Manager, OpenSSL, and Java Keytool, and configure WebLogic to use certificates
• Support and maintain servers for the DLA Financial Web (DFW) solution across RHEL and Windows, including command-line administration, shell scripting, and scheduled tasks; perform monthly and weekly data imports
• Participate in migration of the DLA Financial Web application to Military and Government Azure development and production environments
• Analyze business information requirements and translate them into logical database designs; consult with users to determine information-management requirements and to design and implement small-to-large projects
• Provide second-level diagnosis and resolution of database problems, working with Oracle as needed and escalating to the COR; develop and submit performance/tuning evaluation reports
• Produce required deliverables - web application source code, security documentation, and design/coding-standards, disaster-recovery, and threat-mitigation documentation
• Attend and participate in DLA Information Operations status meetings and meetings with DLA Financial Management Office personnel

• Active Secret Clearance
• Minimum five (5) years relevant experience
• Relevant certification from a nationally recognized technical authority
• DoD 8570.01-M / 8140 IAT Level I baseline certification (e.g., CompTIA A+ CE, Network+ CE, SSCP, or another DoD-approved IAT Level I baseline)
• Appropriate Computing Environment (CE) certification as outlined by the Cybersecurity Computing Environment Certification Working Group, applicable to the platform administered (Oracle WebLogic / Linux)
• Proficiency in Java, Python, WebLogic scripting, Linux shell scripting, C#, and HTML/JavaScript
• Hands-on experience administering Oracle WebLogic Application Server (14.x+) - install, configure, monitor, service; diagnostic modules; WLST scripting; security realms and authentication providers
• Java development experience - J2EE, Struts 2/MVC, JDBC, JSP, Servlets, Swing, JMS/MQ Series; JDeveloper and Eclipse (OEPE) IDEs; building and deploying .WAR and .jar files with Apache Ant/Maven and GIT
• Web programming experience - HTML, CSS, JavaScript, jQuery, Material CSS, AngularJS, Ajax
• Experience with Red Hat Enterprise Linux (RHEL) development and production environments, including command-line administration, SSH, and shell scripting
• Experience with PL/SQL, SQL, SQLPlus, TOAD, and Oracle Database server
• Experience with IBM MQ Series / WebSphere MQ and Java Messaging Service
• Experience with security tooling - ArcSight and Splunk - and SSL certificate management (Oracle Wallet Manager, OpenSSL, Java Keytool)
• Experience with application security testing software (running code scans, interpreting reports, mitigating findings) and Oracle Enterprise Manager
• Demonstrated experience migrating servers and applications to Military and Government Azure development and production environments
• Extensive understanding of assistive technology tools (JAWS, ZoomText, Dragon, Axe) and ability to code to Section 508 standards
• Demonstrated technical writing - disaster recovery, threat mitigation, design documents, and coding standards and practices
• Strong problem-solving, documentation, and customer-communication skills
• Preferred: experience with source control tools such as GIT

Pulled from the full job description

• Parental leave
• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance
• Dental insurance, * 401(k) matching
• Bonus based on performance
• Competitive salary
• Dental insurance
• Health insurance
• Paid time off
• Parental leave
• Training & development
• Vision insurance