Java Developer - Secret Clearance

PLEASE, NO H1B OR OPT VISA CANDIDATESNO C2C CANDIDATES YOU MUST HAVE AN ACTIVE SECRET SECURITY CLEARANCE Location: Hybrid - McLean, VA 22102 (U.S.) with International Travel Interview: 2 Video interviews – One can be in person. Security Clearance: Active Secret (eligible for Top Secret) Employment Type: Full-Time/ Contract Capstone IT is helping our client to find a Senior Java Developer who will design, build, secure, and maintain enterprise applications supporting Identity, Credential, and Access Management (ICAM). The developer will use Java, Spring Boot, microservices, REST APIs, databases, and cloud technologies to create scalable applications that meet federal security requirements.This person will work with architects, business analysts, product owners, and developers to deliver secure solutions. The role includes application architecture, hands-on development, code reviews, troubleshooting, performance optimization, CI/CD, and security compliance.A particularly important aspect is building applications that support identity management, credentialing, access control, and potentially cryptographic integrations, including hardware security modules (HSMs), public key infrastructure (PKI), and certificate management.Top 4 SkillsJava 11/17+ and Spring Boot: 10+ years of Java development with Spring MVC, Spring Security, Hibernate/JPA, and enterprise application architecture.Microservices, APIs, and cloud: RESTful services, Docker, Kubernetes, and AWS, Azure, or GCP.Federal application security: NIST SP 800-53, FedRAMP, OWASP, SonarQube, Tenable, and secure coding.ICAM and cryptography: Identity and access management domain experience; PKI, HSM, certificates, and cryptographic integration are especially valuable. Main ResponsibilitiesDesign, develop, test, and deploy secure enterprise Java applications.Lead Spring Boot and microservices development.Build REST APIs and integrate internal and third-party services.Work with relational and NoSQL databases.Perform code reviews, troubleshoot incidents, and improve performance.Implement CI/CD pipelines and containerized deployments.Apply security controls and support compliance requirements.Participate in architecture decisions and collaborate across technical teams.Support ICAM-related integrations and, where applicable, cryptographic technologies. Required QualificationsBachelor's degree in a relevant field.10+ years of hands-on Java development.Java 11/17+, Spring Framework, Spring Boot, Spring MVC, Spring Security, and Hibernate/JPA.Microservices, REST APIs, JSON, and web services.SQL Server, PostgreSQL, or MySQL; MongoDB.Cloud experience with Azure, AWS, or GCP.Docker, Kubernetes, Kafka/RabbitMQ/ActiveMQ.Jenkins, Azure DevOps, or GitHub Actions.Agile/Scrum, Git, monitoring, and logging tools.Experience building applications that meet NIST/FedRAMP security controls.Active Secret clearance and Top Secret eligibility.Preferred: Thales Luna HSM, Azure Managed HSM, PKCS#11, Java JCE/JCA providers, PKI, certificate troubleshooting, encryption, digital signatures, key rotation, key escrow, and secure key storage.