Python Full Stack Developer (TS/SCI clearance)

About the Role

We are standing up a small, elite development team to deliver cloud-native applications that directly support client operations. This is a focused, high-impact team where every engineer's contribution is visible and consequential. We are looking for a Full Stack Developer who combines deep Python expertise with genuine frontend craftsmanship, thrive in classified environments, and bring the kind of disciplined engineering mindset that produces secure, maintainable systems under real operational pressure.

What You Will Do

• Design and deliver complete applications; from database schema to API layer to the interface a mission user opens every morning.
• Support an established platform application while simultaneously standing up pilot solutions and custom MVPs for emerging requirements.
• On any given week, extend a Django-based API gateway, build a new React dashboard for an operational workflow, write migration scripts to bring legacy data into a modern PostgreSQL schema, or wire up Keycloak authentication for a new service.
• Move fluidly between backend logic and frontend polish, caring as much about a clean component hierarchy as a well-indexed query, and understanding that in classified environments, every design decision carries security implications.
• Deploy across multiple AWS partitions and classification levels using Terraform for infrastructure, GitLab for source control and CI/CD, and AI-assisted development tooling as a standard part of your workflow.

Required Experience

• Active TS/SCI clearance
• Python backend development (Django, FastAPI, or equivalent; async/ASGI; modern Python 3.13+)
• Frontend development with React, Next.js, or equivalent (production UIs, not prototypes)
• RESTful API design including BFF patterns and schema validation
• PostgreSQL — schema design, query optimization, migrations, data loading
• AWS — deploying and operating applications across classified partitions and regions
• Terraform for infrastructure-as-code
• Keycloak, OIDC, SAML, or CAC/PIV authentication integration
• Secure application development for STIG-hardened, FIPS-validated environments
• GitLab CI/CD pipelines and Git-based workflows
• DevSecOps scan interpretation and remediation (SAST, DAST, SCA, SBOM, container scanning)
• AI-assisted development tooling in daily practice
• 5+ years of hands-on development (or equivalent demonstrated capability)

Preferred Experience

• Incorporating generative AI capabilities into applications (RAG pipelines, LLM integration, or embedding-based search)
• Migrating legacy systems and data sources into modern cloud-native architectures
• Container orchestration with Kubernetes/EKS and Helm
• Hardened container supply chains and FIPS-validated image pipelines
• NIST 800-53 security controls and their practical application to software design
• Multi-classification or cross-partition deployment architectures
• Familiarity with intelligence community environments and DoD mission systems

Technical Requirements

• Strong Python development with Django or equivalent frameworks, API design patterns including Backend-for-Frontend architectures, Pydantic-driven validation, and async Python in production
• Ability to build polished, responsive interfaces in React or Next.js with thoughtful component design, effective state management, and attention to user experience
• Solid relational database skills centered on PostgreSQL, including schema design, performance tuning, and data migration; Aurora experience is a plus
• Familiarity with Keycloak, OIDC, SAML, JWT-based sessions, and certificate-based authentication (CAC/PIV); ability to implement role-based access control and secure token handling
• Practical AWS experience deploying, operating, and troubleshooting applications across classified partitions with core services like EKS, Aurora, S3, IAM, VPC, and KMS
• Comfortable reading, writing, and maintaining Terraform modules
• Understanding of secure development practices, secrets management, least-privilege patterns, and building applications that operate in STIG-hardened, FIPS-validated environments
• Ability to work with DevSecOps scanning outputs across static analysis, dependency scanning, container scanning, and SBOM verification
• AI-assisted development as a required competency — using these tools extensively in daily work and understanding both their capabilities and limitations

Professional Qualities

• Ownership of code, commitments, and mistakes
• Clear communication, asking questions early, and pushing back when something does not make sense
• Meticulous attention to detail — missed edge cases in auth flows or carelessly scoped IAM policies have real consequences in classified environments
• Self-directed work ethic without needing to be told what to do next
• Pride in shipping clean, well-tested, well-documented work
• Intellectual curiosity about the problem space and adaptability to work across unfamiliar domains