Full Stack Developer

Opportunity Overview

Northramp is seeking a Full Stack Developer to join the team supporting the client's Cloud BPA Bridge program — a mission‑critical effort to consolidate, modernize, and operate the client's enterprise cloud services across IaaS, PaaS, and SaaS environments under FedRAMP High authorization.

You will design and build full‑stack web applications and services that support the client's cloud modernization and internal tooling needs. The role spans the complete software development lifecycle — from UI and API design through containerized deployment on FedRAMP High‑authorized cloud infrastructure — operating within the client's CI/CD Dev Ops model.

This role is part of Northramp’s integrated delivery model, where engineers and advisors work as one team to bring sound judgment, disciplined execution, and deep federal experience to high‑stakes modernization programs.

Hybrid, based in the Washington, DC metro area. On‑site presence at designated client locations is expected on a cadence aligned to program needs. Remote work is supported around mission and security requirements. This role is not open to candidates outside the DC region.

You’ve shipped full stack applications in production — you are comfortable owning both the frontend experience and the backend services that power it. You write clean, testable code, you care about how real users interact with what you build, and you know how to navigate the compliance and security requirements that come with federal cloud work.

• Design and develop responsive web application frontends using modern JavaScript frameworks (React, Angular, or Vue.js) aligned to Section 508 accessibility standards.
• Build and maintain RESTful and Graph
  
  QL APIs using Node.js, Python (FastAPI/Django), or Java (Spring Boot) running on cloud‑native PaaS platforms.
• Develop, test, and deploy containerized applications using Docker and Kubernetes within client’s CI/CD pipeline and FedRAMP High‑authorized cloud environments.
• Integrate applications with the client identity and access management systems, including Active Directory federation, OAuth 2.0, and SAML‑based SSO.
• Design and implement data models and persistence layers using relational databases (Postgre
  
  SQL, MS SQL Server) and No
  
  SQL/cloud‑native data stores.
• Collaborate with Application Architects and Cloud Systems Engineers to align application designs with target architecture standards, security baselines, and FISMA controls.
• Write unit, integration, and end‑to‑end tests; maintain adequate test coverage and participate in code review processes.
• Support SELC milestone reviews and contribute to ATO documentation — including system security plans, data flow diagrams, and interface control documents.
• Identify and remediate application security vulnerabilities surfaced through SAST/DAST pipeline scans and penetration testing findings.
• Maintain technical documentation including API specifications, architecture decision records, and developer onboarding guides.

• 3 to 6 years of progressive, hands‑on experience in full stack web application development.
• Bachelor’s degree in Computer Science, Software Engineering, Information Systems, or related field. Relevant experience may substitute.
• Proficiency in at least one modern frontend framework:
  React, Angular, or Vue.js.
• Strong backend development skills in at least one of Python, Node.js, or Java; familiarity with REST API and Graph
  
  QL design patterns.
• Experience with containerization (Docker) and Kubernetes‑based deployment in cloud environments (AWS, Azure, or GCP).
• Solid understanding of relational database design and SQL; familiarity with cloud‑native data services.
• Working knowledge of OAuth 2.0, SAML, and federated identity integration patterns.
• Experience with version control (Git), CI/CD pipelines, and Agile/Scrum delivery practices.
• Understanding of application security principles — OWASP Top 10, input validation, secrets management — and FedRAMP/FISMA compliance requirements.
• Familiarity with Section 508 accessibility requirements for web applications.
• U.S. Citizenship and the ability to…