WEB PROGRAMMER/DEVELOPER SPECIALIST (UPDATING & MAINTAINING UPDATESTATUS & KLIKPIJAR APPLICATION)

Background

Meeting Targets and Maintaining Epidemic Control (EpiC), a five-year global project funded by PEPFAR and USAID, is dedicated to achieving and maintaining HIV epidemic control. The EpiC project provides strategic technical assistance (TA) and direct service delivery (DSD) to break through barriers to 95-95-95 and promote self-reliant management of national HIV programs by improving HIV case-finding, prevention, care and treatment programming, and viral load suppression. EpiC is led by FHI 360 with core partners Right to Care, Palladium, Population Services International (PSI), and Gobee Group. The project also draws upon regional resource partners to provide TA, as well as global resource partners who bring unique capacities.

The EpiC team’s approach to TA is guided by four mutually reinforcing principles: (1) a focus on speed, scale, standards, and sustainability; (2) customization according to local priorities, financing, epidemiology, and the differentiated needs of target populations; (3) adaptive management based on results; and (4) transition of TA and DSD to local and regional partners to enable them to receive direct awards. In addition, EpiC applies human-centered design thinking to resolve persistent challenges along the HIV service cascade.

 

The EpiC approaches include:

  • Attain and maintain HIV epidemic control among at-risk adult men, women, and priority populations
  • Attain and maintain HIV epidemic control among key populations
  • Improve program management, health information systems, HRH and HIV financing solutions to attain and maintain epidemic control
  • Support the transition of direct funding and implementation to capable local partners to meet PEPFAR’s goal of providing 70 percent of its funding to local partners by 2022

.

in FY22/COP21 implementation plan, EPIC Project Indonesia has been developed several web base applications and all of those apps are running properly. Since in FY23/COP22 Epic Indonesia has been improving programmatic issues and its very dynamic for data collection and data interoperability process, it needs to modify some feature to be match and UpToDate with programmatic strategy. One of major modification is re- structure form input and database to be matched with Jak-Sehat”. For this changing, it was collected several individual data (profile client) and it should concern for safety and data Security as maximum aspect. Base on evaluation using common web based tool like https://www.immuniweb.com/websec/, the updatestatus (https://updatestatus.id) is still have score “F” for web security test. Based on need, it is doing expanding activity on Improvement of web immunity and increase safety and security score of updatetstatus.id web. Updatestatusi.id as a frontend (client app) application is pairing with Klikpijar.id as webmin/backend application system for M&E tool and data monitoring. In this case, both Updatestatus and Klikpijar will be maintaining and updating the same way. As part of the ultimate achievement across those results, and to ensure that all of those activity running properly, EPIC plan to hire a new consultant (IT Programing Consultant/programmer/developer specialist).

 

SCOPE OF WORK

The consultants will work with EPIC Indonesia staff (cross component) to further develop/replicate/modify Updatestatus.id & Klikpijar applications. He/she shall work under the overall supervision of the Digital Technology Program Manager with key responsibilities are improve and deploy new Updatestatus.id with minimum score web security test is B+ or higher.

 

 

DETAIL TASKS AND SOW

  1. Adding, revising, updating or upgrading form of Updatestatus.id application base on request by Epic Indonesia team, will include but not be limited to:
    1. Revise or refine a reservation form (test HIV, Prep, Refil ARV, HIVST, Partner Notification, Viral Load, etc)
    2. Revise or refine or maintaining interconnection Updatestatus.id with Berani Bersama, Klikpijar and or Jaksehat.
    3. Data interoperability among the app
  2. Adding, revising, updating or upgrading Backend for Klikpijar.id application base on request by Epic Indonesia team, will include but not be limited to:
    1. Revise or refine a table view form (test HIV, Prep, Refil ARV, HIVST, Partner Notification, Viral Load, etc)
    2. Revise or refine or maintaining endpoint service (API) and keep interconnection Updatestatus.id with Berani Bersama, Klikpijar and or Jaksehat and Data interoperability among the app
    3. Revise or add new data visualization for data analytics.
  3. Upgrading safety and security both for Updatestatus.id & Klikpijar.id web base applications as following but not limited to:

 

No Task/Item Description Existing Detail SoW Note
 

1

WAF None Setup and or install WAF Cloudflare create new Account & provide it to EPIC team
2 CONTENT ENCODING Disable Enabling Content Encoding
 

 

3

jQuery 1.10.2 update to the most recent version 3.7.0. CWE-400 – Prototype pollution.  CWE-79 – Cross-site scripting
 

4

Bootstrap 3.3.4 Urgently update to the most recent version 5.3.1. CWE-79 – Cross-site scripting
 

 

5

WEBSITE SECURITY Misconfiguration or weakness Fixed to standard configuration Website CMS or its components are outdated and contain publicly known security vulnerabilities
6 COOKIE PROTECTION Misconfiguration or weakness Fixed to standard configuration Cookies with personal or tracking information are sent without Secure flag.
 

7

Cardholder Data Environment Misconfiguration or weakness Fixed to standard configuration CMS, Fingerprinted, WAF protection
 

8

HTTP Headers Security

 

Missing Required Http Headers & Missing Optional Http Headers Enabling http header both for required and optional Some HTTP headers are missing or misconfigured.
 

9

CONTENT-SECURITY-POLICY Misconfiguration or weakness Fixed to standard configuration The header was not sent by the server
 

10

Cookies Privacy and Security

 

the cookie is missing Secure, HttpOnly and SameSite flag Fixed to standard configuration Some cookies have missing secure flags or attributes.
 

11

External Content Privacy and Security

 

External HTTP Requests available 9 item Enabling 2 item required (missing in the existing) External web content (e.g. images, video, CSS or JavaScript) required 11 but available 9

 

 

Core language and platform skills:

  • One of PHP / C# / Typescript
  • MySQL, MongoDB
  • Node
  • RESTful design
  • XML / SOAP
  • JSON
  • GIT
  • CI/CD pipelines
  • Docker

 

Expected Outputs:

  1. New application deployment for updatestatus.id with full safety & Security applied with testing result of Web Security test for update status is minimum ‘B+’ or higher.
  2. New data visualization of Klikpijar applications

 

 

CONSULTANCY TYPE, LOCATION AND TRAVEL

 

The consultancy type is Daily Bases Consultant, with maximum 150 working days during December 2nd, 2024 to September 30th 2025. Work location will be based in Jakarta, Indonesia, with possibility several travel across the province may be required. Please note, during Work From Home Policy, consultant will be required work at home using your own internet facilities.

 

 

PERIOD OF PERFORMANCE

Period of performance starting per December 2nd, 2024, and will be expired on September 30th, 2025, the latest. Consultant can submit an invoice and monthly report every end of month or earlier next month no later 5th day every month with maximum 15 working days per month.

Final Product should be deployed on September 30th, 2025, the latest. Consultant can submit the last invoice and final report maximum on October 5th, 2025, but during the report performance period, it is required you should fix any problem (if founded) during testing and or implementing process by real users.

 

REMUNERATION AND EXPENSES

The consultant will be paid on Monthly Invoice bases.  Payment will be made  after the consultant successful submit report with full description of deliverable completion and get supervisor approval of tasks assigned during that month. Consultant can claim internet reimbursement during the period of performance as maximum IDR. 250.000 per month. Consultant can claim actual travel reimbursement (if any) based on assigned and approved by Digital Technology Program Manager.

 

Qualifications

  • 5+ years of experience in a computing environment with multiple programming languages.
  • Web Technologies (DHTML, AJAX, etc.)
  • Experience with Security frameworks (e.g., JWT, OATH2), Java, JavaScript, Spring
  • Experience in API layer like security, custom analytics, throttling, caching, logging, monetization, request and response modifications etc. using Apigee
  • Proficient in SQL and Stored Procedures such as in Oracle, MySQL
  • Experience with Unix, Linux Operating Systems
  • Experience with Scrum and other Agile processes.
  • Knowledge of Jira, Git/SVN, Jenkins
  • Experience in creating REST API documentation using Swagger and YAML or similar tools desirable

 

HIGHT QUALITY DESIRED CANDIDATE

If you have all the requirement: skill and qualification as mentioned above, we encourage to send your resume and proposal to [email protected] not later than November 7th, 2024 at 17:00 WIB Jakarta time. It would be an advantage if you have skill in Laravel programing as well.

This job description summarizes the main duties of the job. It neither prescribes nor restricts the exact tasks that may be assigned to carry out these duties. This document should not be construed in any way to represent a contract of employment. Management reserves the right to review and revise this document at any time.

Evaluation Criteria: Proposals will be evaluated in accordance with the following criteria:

Area Indicators Scale
Qualification ·       Educational background

·       Years of experiences/ working

·       Past performance of similar work

35 (max points)
Technical Skill ·       Written test

·       Elaborate your last/similar work that relevant with the SOW

    40 (max points)
Communication ·       Interpersonal skill

·       Good communication

·       Maintain partnership/relationship

25 (max points)
Total 100 points

Only short-listed candidates will be contacted. Qualified candidates may also be asked to complete a written test.

 

Required Documentation: Proposals must include the following components:

  • Applicant’s CV
  • Cover letter including stated position and location of work
  • Response SOW deliverable in each column
  • Proposed daily rate,
  • 2 (two) references, including contact information

 

FHI 360 Disclaimers

 

  • FHI 360 may perform a background check on any selected Consultant candidates.
  • FHI 360 may cancel the solicitation and not award
  • FHI 360 may reject any or all responses received
  • Issuance of the solicitation does not constitute an award commitment by FHI 360
  • FHI 360 reserves the right to disqualify any offer based on failure of the offeror to follow solicitation instructions
  • FHI 360 will not compensate any offeror for responding to solicitation
  • FHI 360 reserves the right to issue award based on initial evaluation of offers without further discussion
  • FHI 360 may choose to award only part of the activities in the solicitation, or issue multiple awards based on the solicitation activities
  • FHI 360 reserves the right to waive minor proposal deficiencies that can be corrected prior to award determination to promote competition
  • FHI 360’s supplier terms and conditions can be found here while our consultant terms and conditions can be found here
0156638
Visit Today : 167
This Month : 4933
Hits Today : 693
Total Hits : 626610
Who's Online : 16
Visit Us On FacebookVisit Us On TwitterVisit Us On YoutubeVisit Us On Instagram