Java Developer - Secret Clearance

Capstone IT, Inc.; McLean (VA); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Capstone IT, Inc. is seeking a Senior Java Developer to design, build, secure, and maintain enterprise ICAM applications using Java, Spring Boot, microservices, REST APIs, databases, and cloud technologies.

The role includes architecture, hands-on development, code reviews, performance optimization, CI/CD, and security compliance. The role focuses on ICAM and cryptographic integrations, including PKI, HSMs, and secure key management, with inter-actions across architects, analysts, product

Qualifications

• Bachelor's degree in a relevant field.
• 10+ years of hands-on Java development.
• Experience with Java 11/17+, Spring Framework & Hibernate/JPA.
• Cloud experience with Azure, AWS, or GCP.
• Active Secret clearance and Top Secret eligibility.

Responsibilities

• Design, build, secure, and maintain enterprise Java applications.
• Lead Spring Boot and microservices development.
• Build REST APIs and integrate services.
• Work with relational and NoSQL databases.
• Implement CI/CD pipelines and security controls.
• Support compliance with NIST/FedRAMP security controls.
• Collaborate across architects, analysts, and product teams.
• Assist ICAM-related integrations and cryptographic components.

Skills

Java & Spring Boot

Microservices & Cloud

Federal security

ICAM & cryptography

Education

Bachelor's degree in a relevant field

Tools

Jenkins

Azure DevOps

GitHub Actions

Job description

YOU MUST HAVE AN ACTIVE SECRET SECURITY CLEARANCE

Location: Hybrid - McLean, VA 22102 (U.S.) with International Travel

Interview: 2 Video interviews - One can be in person.

Security Clearance: Active Secret (eligible for Top Secret)

Employment Type: Full-Time/ Contract

Capstone IT is helping our client to find a Senior Java Developer who will design, build, secure, and maintain enterprise applications supporting Identity, Credential, and Access Management (ICAM). The developer will use Java, Spring Boot, microservices, REST APIs, databases, and cloud technologies to create scalable applications that meet federal security requirements.

This person will work with architects, business analysts, product owners, and developers to deliver secure solutions. The role includes application architecture, hands-on development, code reviews, troubleshooting, performance optimization, CI/CD, and security compliance.

A particularly important aspect is building applications that support identity management, credentialing, access control, and potentially cryptographic integrations, including hardware security modules (HSMs), public key infrastructure (PKI), and certificate management.

Top 4 Skills

• Java 11/17+ and Spring Boot: 10+ years of Java development with Spring MVC, Spring Security, Hibernate/JPA, and enterprise application architecture.
• Microservices, APIs, and cloud: RESTful services, Docker, Kubernetes, and AWS, Azure, or GCP.
• Federal application security: NIST SP 800-53, FedRAMP, OWASP, SonarQube, Tenable, and secure coding.
• ICAM and cryptography: Identity and access management domain experience; PKI, HSM, certificates, and cryptographic integration are especially valuable.

Main Responsibilities

• Design, develop, test, and deploy secure enterprise Java applications.
• Lead Spring Boot and microservices development.
• Build REST APIs and integrate internal and third-party services.
• Work with relational and NoSQL databases.
• Perform code reviews, troubleshoot incidents, and improve performance.
• Implement CI/CD pipelines and containerized deployments.
• Apply security controls and support compliance requirements.
• Participate in architecture decisions and collaborate across technical teams.
• Support ICAM-related integrations and, where applicable, cryptographic technologies.

Required Qualifications

• Bachelor's degree in a relevant field.
• 10+ years of hands-on Java development.
• Java 11/17+, Spring Framework, Spring Boot, Spring MVC, Spring Security, and Hibernate/JPA.
• Microservices, REST APIs, JSON, and web services.
• SQL Server, PostgreSQL, or MySQL; MongoDB.
• Cloud experience with Azure, AWS, or GCP.
• Jenkins, Azure DevOps, or GitHub Actions.
• Agile/Scrum, Git, monitoring, and logging tools.
• Experience building applications that meet NIST/FedRAMP security controls.
• Active Secret clearance and Top Secret eligibility.

Preferred: Thales Luna HSM, Azure Managed HSM, PKCS#11, Java JCE/JCA providers, PKI, certificate troubleshooting, encryption, digital signatures, key rotation, key escrow, and secure key storage.