Senior Web Developer/Engineer

POSITION OVERVIEW
The Senior Web Developer/Engineer ensures the stable operation, security, and continued development of the Defense Logistics Agency (DLA) Financial Website — an Oracle-backed financial reporting and audit-metrics intranet application — in support of the DoD. This role is responsible for developing and maintaining the Java/J2EE web application; administering the Oracle WebLogic (14.x+) application server on Red Hat Enterprise Linux; coding to Section 508 accessibility standards; and performing vulnerability management and STIG/RMF maintenance to keep the application secure and available. This is an off-site position with periodic on-site support Fort Belvoir, VA or the Washington, DC metropolitan area. 

DUTIES AND RESPONSIBILITIES

• Develop and maintain the DLA Finance Website application in Java (J2EE, Struts 2/MVC, JDBC, JSP, Servlets, JMS/MQ) to support DLA's financial reporting needs
  


• Install, configure, monitor, and service Oracle WebLogic Application Server (14.x+); create diagnostic modules and configure alerts/notifications using the WebLogic Diagnostic Framework and WLST scripting; manage security realms, authentication providers, and connections to Oracle Identity Management
  


• Develop PL/SQL code, SQL stored procedures, and database scripts supporting the web-based reporting tool; provide performance tuning and technical documentation for that code
  


• Maintain a web-based Finance and Audit Metrics tool that enables senior leadership and the J8 community to assess monthly financial metrics against defined performance targets
  


• Build and maintain reports using data visualization and business intelligence tools to meet DLA Distribution J8/J6 budget and J62FB/SFA reporting needs
  


• Code to Section 508 (29 U.S.C. 794d) accessibility standards using assistive technology tools such as JAWS, ZoomText, Dragon, and Axe monitoring tools
  


• Perform vulnerability management — review WebInspect and ACAS (via CyberSWAT) scan reports, interpret results, and mitigate vulnerabilities; prepare remediation plans in accordance with the Plan of Action and Milestones (POA&M); and monitor software libraries and announcements for newly disclosed vulnerabilities
  


• Maintain and document all STIG items (remediations, work-corrections, security checklists) and other Risk Management Framework (RMF) documentation; create and maintain a Threat Model for the web application
  


• Manage application log communication between ArcSight and Splunk (and the DLA log-collection solution) with the Oracle WebLogic Server
  


• Manage SSL certificates using Oracle Wallet Manager, OpenSSL, and Java Keytool, and configure WebLogic to use certificates
  


• Support and maintain servers for the DLA Financial Web (DFW) solution across RHEL and Windows, including command-line administration, shell scripting, and scheduled tasks; perform monthly and weekly data imports
  


• Participate in migration of the DLA Financial Web application to Military and Government Azure development and production environments
  


• Analyze business information requirements and translate them into logical database designs; consult with users to determine information-management requirements and to design and implement small-to-large projects
  


• Provide second-level diagnosis and resolution of database problems, working with Oracle as needed and escalating to the COR; develop and submit performance/tuning evaluation reports
  


• Produce required deliverables — web application source code, security documentation, and design/coding-standards, disaster-recovery, and threat-mitigation documentation
  


• Attend and participate in DLA Information Operations status meetings and meetings with DLA Financial Management Office personnel

REQUIREDQUALIFICATIONS

• Active Secret Clearance
  


• Minimum five (5) years relevant experience
  


• Relevant certification from a nationally recognized technical authority
  


• DoD 8570.01-M / 8140 IAT Level I baseline certification (e.g., CompTIA A+ CE, Network+ CE, SSCP, or another DoD-approved IAT Level I baseline)
  


• Appropriate Computing Environment (CE) certification as outlined by the Cybersecurity Computing Environment Certification Working Group, applicable to the platform administered (Oracle WebLogic / Linux)
  


• Proficiency in Java, Python, WebLogic scripting, Linux shell scripting, C#, and HTML/JavaScript
  


• Hands-on experience administering Oracle WebLogic Application Server (14.x+) — install, configure, monitor, service; diagnostic modules; WLST scripting; security realms and authentication providers
  


• Java development experience — J2EE, Struts 2/MVC, JDBC, JSP, Servlets, Swing, JMS/MQ Series; JDeveloper and Eclipse (OEPE) IDEs; building and deploying .WAR and .jar files with Apache Ant/Maven and GIT
  


• Web programming experience — HTML, CSS, JavaScript, jQuery, Material CSS, AngularJS, Ajax
  


• Experience with Red Hat Enterprise Linux (RHEL) development and production environments, including command-line administration, SSH, and shell scripting
  


• Experience with PL/SQL, SQL, SQLPlus, TOAD, and Oracle Database server
  


• Experience with IBM MQ Series / WebSphere MQ and Java Messaging Service
  


• Experience with security tooling — ArcSight and Splunk — and SSL certificate management (Oracle Wallet Manager, OpenSSL, Java Keytool)
  


• Experience with application security testing software (running code scans, interpreting reports, mitigating findings) and Oracle Enterprise Manager
  


• Demonstrated experience migrating servers and applications to Military and Government Azure development and production environments
  


• Extensive understanding of assistive technology tools (JAWS, ZoomText, Dragon, Axe) and ability to code to Section 508 standards
  


• Demonstrated technical writing — disaster recovery, threat mitigation, design documents, and coding standards and practices
  


• Strong problem-solving, documentation, and customer-communication skills
  


• Preferred: experience with source control tools such as GIT