USAF - Software Developer

cFocus Software Incorporated•Linthicum Heights, MD

1d•Onsite

About The Position

cFocus Software is seeking a Software Developer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD, and requires an Active TS/SCI clearance. The role involves developing, integrating, testing, and maintaining enterprise application software, translating requirements into maintainable code, and working with various technologies and methodologies like DevSecOps, CI/CD, and IaC. The developer will collaborate with multiple teams, including architects, operations, and cybersecurity, to ensure secure and efficient software development and deployment.

Requirements

Active TS/SCI clearance
B.S. Computer Science, Information Technology, or a related field
Experience developing, integrating, testing, and maintaining enterprise application software.
Proficiency in programming and scripting technologies applicable to the assigned application environment.
Ability to translate requirements and designs into maintainable code and documented interfaces.
Experience with API development, data exchange, version control, debugging, and automated testing.
Understanding of DevSecOps, CI/CD, deployment automation, IaC, CaC, and configuration control.
Knowledge of secure coding, access controls, vulnerability remediation, and application monitoring.
Ability to troubleshoot application and integration issues and maintain technical documentation.
Strong collaboration and communication skills for coordinating architects, developers, operations, and cybersecurity teams

Responsibilities

Analyze approved requirements and technical designs; develop application features, services, and integration components aligned with DC3 enterprise architecture.
Write, review, test, debug, and maintain code and scripts using approved technologies.
Develop, document, test, and maintain Application Programming Interfaces (APIs) and data-sharing interfaces under approved requirements and interagency agreements.
Integrate applications and data services across cloud and on-premises environments; coordinate interfaces and dependencies with architecture, infrastructure, and data teams.
Create and maintain Continuous Integration/Continuous Deployment (CI/CD) pipelines and versioned artifacts for applications, incorporating Government-specified security controls and guardrails.
Implement application deployment and configuration automation using Infrastructure as Code (IaC) and Configuration as Code (CaC), consistent with approved designs.
Conduct software integration and testing, document results, resolve defects, and prepare solutions for Government review and authorized deployment.
Maintain lifecycle traceability among requirements, code changes, configurations, tests, and releases.
Develop automation supporting assigned Security Technical Implementation Guide (STIG) requirements and secure configurations; coordinate implementation with cybersecurity personnel.
Support automated vulnerability scanning through CI/CD pipelines, analyze findings, recommend remediation, and implement approved code fixes, patches, and configuration changes.
Implement logging, monitoring, observability, alerts, and error handling; troubleshoot application performance, availability, and integration issues.
Maintain application baselines and change records under the approved Configuration Management Plan. Use centralized repositories and required cybersecurity evaluation before production changes.
Provide technical evidence, documentation, and monitoring data supporting Risk Management Framework (RMF), Authority to Operate (ATO), and continuous ATO activities.
Support technical debt assessment and approved remediation through modular sprints; document legacy code and data-schema issues and contribute to engineering alternatives.
Research and test approved opportunities for agentic AI or other AI capabilities in CI/CD; recommend options and integrate them following Government approval.
Prepare design and as-built records, deployment instructions, and support documentation; assist incident response by supplying logs and implementing directed corrective actions.