Senior Python/Django Developer

Senior Python/Django Developer

Position Summary:

We are seeking a senior full-stack developer to own and modernize shared Python/Django capabilities and serve as the technical escalation point for complex, cross-application work. The role combines hands-on development with architecture, secure identity and database integration, lifecycle upgrades, production troubleshooting, documentation, and mentoring. The developer will collaborate with application teams, DevTools/DevOps, Client CIT, Security, and database administrators across on-premises and AWS environments. This role requires a strong understanding of Django and its architecture, as well as single sign-on (SSO).

Key Responsibilities:

• Application engineering. Design, develop, test, and maintain Python/Django applications, reusable libraries, REST APIs, and supporting JavaScript/HTML/CSS components.
• Python and Django lifecycle upgrades. Lead end-of-life upgrades across the application portfolio: inventory dependencies, assess compatibility, update requirements and internal packages, refactor deprecated APIs, test across environments, coordinate consuming teams, and publish migration and rollback guidance.
• Runtime and package engineering. Build, validate, package, and distribute Python runtimes from source when approved installers are unavailable; verify checksums, test suites, pip/virtual-environment behavior, and compatibility with internal artifact repositories.
• Shared Django platform ownership. Modernize shared Django infrastructure libraries and related packages; deliver Python 3.12 compatibility, automated tests, versioning, deprecation paths, architecture diagrams, runbooks, and coordinated adoption by dependent applications.
• PIV, SSO, authentication, and authorization. Implement and troubleshoot Client Login/SiteMinder, CAS and dJango-cas-ng, AWS Cognito, JWT/OAuth2, Django authentication backends, authorization decorators, role and permission mapping, and secure session handling.
• Secure database integration. Connect Django applications to Oracle, PostgreSQL, AWS RDS, and other approved data sources through centralized password-lookup and secrets-management services; support credential rotation, least privilege, and removal of hard-coded secrets.
• Application security. Enforce Content Security Policy (CSP), XSS/CSRF protections, HSTS, secure headers and cookies, dependency remediation, and penetration-test findings; favor external scripts or nonce/hash-based CSP controls over broad unsafe exceptions.
• Complex ticket execution and technical leadership. Work alongside developers to identify and resolve high-risk or cross-system Jira tickets; investigate root causes, design and implement solutions, break ambiguous work into executable tasks, define acceptance criteria, test and deploy changes, collaborate on code reviews, and mentor teammates through complex work.
• Production support and delivery. Diagnose incidents and complex integrations involving deployments, APIs, queues, databases, CI/CD, WAF/security groups, and on premises/AWS networking; coordinate changes through DEV, INT, QA, and PROD.
• Documentation and knowledge transfer. Maintain concise technical documentation, architecture diagrams, operational runbooks, and package ownership guidance; lead knowledge-sharing sessions.

Initial Priorities and Examples of Complex Work:

• Modernize shared Django authentication and data-access libraries. Resolve Python 3.12 compatibility issues and establish a repeatable test, release, deprecation, and application-migration process for future Python/Django versions.
• Trace identity and data-access failures end to end. Follow a PIV login or database-access problem across the browser, Django, CAS/SiteMinder or Cognito, centralized Client services, and Oracle/RDS.
• Resolve security findings without weakening controls. Remediate CSP and XSS issues, coordinate configuration changes, and support security-scan or penetration-test retesting.
• Lead high-impact Jira tickets. Examples include failed deployments or outages, on-premises-to-AWS access, framework/platform upgrades, and performance or duplicate-processing issues in queue-driven workflows.

Required Qualifications:

• Education and experience. Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical experience; 7 years of professional software development with substantial Python/Django responsibility.
• Python/Django expertise. Strong knowledge of Python, Django, package and dependency management, pip, virtual environments, automated testing, REST APIs, and shared library maintenance.
• Upgrade leadership. Demonstrated experience planning and executing major Python or Django upgrades, resolving package incompatibilities, and migrating multiple dependent applications.
• Identity and access management. Hands-on experience with enterprise SSO/federation, PIV or PKI-backed authentication, CAS/SiteMinder or comparable services, AWS Cognito, JWT/OAuth2, and the distinction between authentication and authorization.
• Databases and secrets. Experience with Oracle and/or PostgreSQL, SQL (including PL/SQL or PL/pgSQL), secure application-to-database connectivity, credential brokers, and secrets management.
• Security engineering. Practical experience with CSP, XSS/CSRF prevention, secure headers and cookies, vulnerability remediation, and secure coding and review practices.
• Cloud and delivery tooling. Experience with AWS, Linux and Windows environments, Git/GitLab, CI/CD pipelines, Jira, and structured promotion across development, test, and production environments.
• Leadership and communication. Ability to explain complex systems clearly, write useful technical documentation, coordinate across teams, review code, mentor peers, and make sound decisions with incomplete information.