Senior Full Stack Developer - Angular

About the role

Profectus is seeking multiple experienced Senior Full Stack Developers to sustain, remediate and enhance a secure web application within an Australian Government agency. The application is built on Angular and aggregates data from multiple authoritative sources to support decision making. The work covers technical leadership, full-stack development, application security remediation and integration with an enterprise data platform. The position is onsite in Canberra.

Key responsibilities

• Provide technical leadership and software engineering support to the development team.
• Develop, integrate, remediate and enhance an Angular-based enterprise web application.
• Lead technical uplift to establish a stable, secure and supportable application baseline.
• Maintain the application and deliver feature enhancements.
• Support integration with, and data migration to, an enterprise data platform.
• Remediate Software Bill of Materials (SBOM) findings and identified vulnerabilities.
• Implement secure software development practices and improve application security.
• Contribute to DevSecOps implementation and maturity uplift.
• Contribute to security architecture reviews and accreditation support.
• Review code and support Full Stack Developers.
• Develop and maintain technical documentation and transfer knowledge to government staff.

Required profile

• Senior full-stack development experience on enterprise web applications.
• Extensive experience with Angular and TypeScript in enterprise application architectures.
• Experience remediating application vulnerabilities and applying secure coding practices.
• Experience providing technical leadership, code review and mentoring.
• Experience working on applications for Defence or another Australian Government agency.
• Australian citizenship and a current AGSVA NV1 security clearance (minimum).

Required skills

• Angular and TypeScript
• REST APIs and back-end services
• DevSecOps, including CI/CD pipelines and automated testing
• Desirable: SBOM tools such as CycloneDX or SPDX, application accreditation against the Information Security Manual (ISM), and OWASP secure development guidance