Security Infrastructure Support Application Developer

General Dynamics Information Technology (GDIT) is seeking an experienced Security Infrastructure Support Application Developer to support one of our federal customers on an enterprise cyber program in the DC metropolitan area. This hybrid position offers a combination of remote work and periodic on-site support and customer meetings. The ideal candidate will have extensive experience in designing, installing, maintaining, supporting, and developing IT systems within a hybrid infrastructure (on-premises and cloud environments) along with cybersecurity expertise.

How You Will Make an Impact

• Design, install, maintain, support, and develop IT systems in hybrid (on-prem and cloud) environments.
• Ensure the security and compliance of applications with federal cybersecurity frameworks.
• Develops requirements for support applications including dashboard display, process automation, and interface applications.
• Prototypes applications to assess impact within the infrastructure.
• Develops and tests applications including interface applications for transferring data with other Government entities, as approved, and ensuring machine-to-machine communication and interface.
• Deploys and integrates applications within the infrastructure.
• Plans for and ensures the orchestration with other applications within the infrastructure and with applications outside the infrastructure.
• Proposes, tests, implements, integrates, operates, maintains, and improves ticketing and incident tracking system(s).
• Creates, updates, and maintains documentation for all systems.
• Develop and maintain legacy JavaServer Pages applications and integrate security features.
• Implement and support DevSecOps practices, ensuring secure code and automation in the build, test, and deployment processes.
• Utilize scripting skills in Java, Python, SOAP API, and SQL for automation and tool development.
• Migrate and harden applications for cloud environments such as AWS, Azure, and O365.
• Perform application security assessments and address identified vulnerabilities.
• Collaborate with cross-functional teams, including infrastructure and security teams, to ensure secure application development and deployment.
• Provide detailed verbal and written communication to both technical and non-technical stakeholders as well as executive-level reporting.
• Work with third-party vendors to integrate and secure applications.
• Stay updated on emerging trends in application security and cloud services.

What You'll Need to Succeed

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 5+ years of experience designing, installing, maintaining, supporting, and developing IT systems with a hybrid infrastructure (on-prem and cloud) environment.
• 2+ years of experience in cybersecurity.
• Demonstrated verbal and written communication skills for explaining complex security concepts to technical and non-technical stakeholders as well as executive-level reporting.
• Familiarity with cloud security concepts, services, and operations (AWS, Azure, O365), including migration and security hardening for applications.
• Familiarity with DevSecOps practices, ensuring secure code and automation is integrated into the build, test, and deployment process for security operations.
• Strong scripting skills, particularly in Java, Python, SOAP API, and SQL query languages for automation and tool development.
• Extensive experience in developing legacy JavaServer Pages applications.
• Familiarity with common full stack or cloud-based web applications.
• Hands-on experience with federal cybersecurity compliance frameworks (FISMA, NIST 800-53, NIST 800-92, OMB M-21-31, CDM).
• Strong problem-solving and analytical abilities for identifying and addressing security issues, root causes, and the ability to resolve issues.
• Proven experience working with third-party vendors and cross-functional teams.
• Prior experience in the health domain.
• Must have experience supporting a Government agency.
• Must be a US Citizen.

DESIRED QUALIFICATIONS

• Advanced degree in Computer Science, Information Technology, Cybersecurity, or related field.
• Additional relevant certifications such as CISSP, CEH, or relevant cloud and application development certifications.
• Experience with various CI/CD tools and platforms.
• Knowledge of containerization technologies and orchestration tools like Docker and Kubernetes.
• Experience with modern front-end frameworks and libraries such as React, Angular, or Vue.js.
• Strong understanding of network security principles and practices.

GDIT IS YOUR PLACE:

• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Professional scientific growth opportunities, including journal subscriptions, conference attendance, and supporting publication journey
• Cutting-edge technology you can learn from
• Rest and recharge with paid vacation and holidays