Senior Full-Stack Drupal Developer

Cadence Coalition LLC is seeking a Senior Full-Stack Drupal Developer to support the U.S. Office of Personnel Management (OPM) Office of the Inspector General (OIG) FY26 Drupal Support Services task order. OPM OIG is rebuilding its public-facing Drupal website in AWS GovCloud (US). You will be the single senior developer on the effort: independently assessing the existing containerized Drupal implementation, determining whether it is secure, supportable, reproducible, and production-ready, and then remediating, maintaining, and enhancing it through a Government-prioritized backlog. This is a hands-on, outcome-driven role. Working software, reproducible builds, and clear documentation are the primary deliverables. The Government must be able to build, deploy, operate, and enhance the application after you leave without contractor-only dependencies. What You Will Do

• Assess the current Drupal implementation within the first 15 business days: validate the baseline, identify security findings, operational risks, technical debt, and upgrade paths, and deliver a severity-ranked remediation backlog and 60-day work plan.
• Maintain and upgrade Drupal core (10/11), PHP 8, Composer packages, contributed modules, themes, JavaScript libraries, and container base images to supported, Government-approved versions.
• Develop and remediate custom Drupal modules and themes using Drupal coding standards, secure coding practices, configuration management, and reviewable Git workflows.
• Maintain version-controlled Dockerfiles, container definitions, containerized web/PHP runtimes, build scripts, environment-variable requirements, health checks, and deployment instructions; demonstrate repeatable build, deploy, database-update, config-import, validation, and rollback processes.
• Coordinate application-facing requirements (RDS-compatible MySQL, file storage, email, search, caching, secrets, logging, scheduled execution) with Government technical staff and the AWS infrastructure team.
• Monitor Drupal and dependency security advisories; remediate application-layer critical and high-severity vulnerabilities within Government-directed timelines; keep secrets out of code, images, logs, and docs.
• Perform code review, static analysis, dependency checks, and automated Drupal testing (unit, kernel, functional, functional JavaScript, end-to-end); execute and document regression testing for public and administrative workflows.
• Conduct automated and manual Section 508 / WCAG 2.0 A and AA accessibility testing on everything you create or modify and correct defects before release.
• Establish an application performance baseline; run load tests (50 concurrent users for 30 minutes with a 100-user burst; capacity testing to 200+ users); tune Drupal caching, render caching, database queries, views, PHP settings, and front-end assets.
• Implement Government-prioritized enhancements: custom modules, themes, templates, content models, forms, workflows, reports, APIs, integrations, search, email, media, and scheduled jobs. Translate approved user stories into designs, estimates, acceptance criteria, code, tests, and release notes.
• Maintain current documentation as you work: architecture and dependency diagrams, code/config inventory, build and deployment guide, release and rollback procedures, administration guide, upgrade guide, testing guide, troubleshooting runbook, and known-issues register (Markdown preferred).
• Acknowledge Severity 1 incidents within 30 minutes and Severity 2 within two business hours during service hours; provide heightened observation after significant releases and cutovers.
• Prepare monthly status input (work completed and planned, backlog progress, releases, incidents, defects, vulnerabilities, performance, dependencies, risks, decisions).
• Conduct knowledge-transfer sessions throughout and deliver a complete transition package during the final 25 calendar days.

Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field and at least 8 years of professional software development experience. Six years of additional specialized experience may substitute for the degree (i.e., 14 years without a degree). A Master’s degree may substitute for 2 years of experience. Substitutions are documented at hire in accordance with Cadence’s Education and Experience Substitution Policy.

• At least 5 years of recent professional Drupal experience, including substantial hands-on production experience with Drupal 10 and/or Drupal 11.
• Demonstrated custom Drupal module and theme development.
• Composer-managed upgrades, Drupal configuration management, and Drush.
• Strong PHP 8, Symfony, Twig, HTML, CSS, JavaScript, SQL/MySQL, and Git.
• Hands-on Docker and containerized web/PHP runtimes, Linux, CI/CD pipelines, application logging, and container troubleshooting.
• Drupal security remediation, dependency management, and secure coding.
• Automated Drupal testing, regression testing, and release/rollback support for production systems.
• Application performance testing and tuning (caching, queries, views, PHP settings, front-end assets).
• Section 508 / WCAG 2.0 accessible development and testing, automated and manual.
• Ability to work independently, document clearly, manage a prioritized backlog, communicate technical risk, and collaborate with cloud, security, database, accessibility, and business stakeholders.
• Ability to obtain and maintain federal suitability, a PIV credential, and Government system access; U.S. citizenship.

• Availability during service hours, Monday-Friday, 7:00 a.m.-4:30 p.m. Eastern. Preferred Qualifications

• AWS GovCloud or other FedRAMP-authorized environment experience (strongly preferred by the customer).
• Experience reviewing, inheriting, stabilizing, or modernizing a legacy Drupal implementation - this is the core of the assignment.
• Federal website development or application-support experience; familiarity with OPM or IG-community environments.
• Integrating Drupal with Amazon RDS, centralized logging, secrets management, search, caching, and email services.
• Load-testing tooling (e.g., k6, JMeter, Locust) and Drupal performance profiling.
• Current Acquia or Drupal certification; CompTIA Security+ or similar.

• Occasional on-site work at the OPM Theodore Roosevelt Building, 1900 E Street NW, Washington, DC 20415, or another Government-designated location.
• After-hours work only with Government authorization; flexibility for authorized release, incident, or cutover support. About Cadence Coalition Cadence Coalition LLC is a Tampa, Florida-based Service-Disabled Veteran-Owned and Woman-Owned small business providing information technology, cybersecurity, software engineering, intelligence, mission support, training, and emerging-technology solutions to federal and defense customers. Cadence Coalition LLC is an equal opportunity employer. Employment decisions are made without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, disability, veteran status, genetic information, or any other status protected by applicable law.