SB-1501-Senior .NET Developer / Technical Lead

Role Summary

We are looking for a Senior .NET Developer / Technical Lead with 7-10 years of strong hands-on development experience and proven expertise in technical architecture, application security, Azure, code quality, and team leadership.

The role will be responsible for developing and modernizing enterprise-grade .NET applications, designing scalable and secure technical solutions, reviewing and vetting code developed by other resources, and ensuring adherence to established architectural and security standards.

The candidate will work extensively on authentication and credential security, cryptography, Azure Key Vault, API security, secure coding, vulnerability remediation, observability, performance, and legacy .NET application modernization.

The role also requires the ability to lead developers technically, identify implementation risks, make architecture-level decisions, and actively adopt AI-driven and specification-driven development practices to improve engineering productivity and delivery quality.

Key Responsibilities

Development & Technical Architecture

• Design, develop, and maintain enterprise applications using C#, ASP.NET MVC/Web API, .NET Framework and related Microsoft technologies.
• Analyze existing applications and understand legacy architecture, dependencies, business flows, and technical constraints before implementing changes.
• Design scalable, maintainable, secure, and high-performing application architectures.
• Define technical approaches, application components, integrations, APIs, data flows, and security mechanisms.
• Participate in architecture discussions and prepare technical design solutions for complex requirements.
• Ensure implementations follow established architectural patterns, coding standards, SOLID principles, and secure development practices.
• Identify technical debt, architectural risks, performance bottlenecks, and security weaknesses and recommend appropriate solutions.
• Work closely with Azure/DevOps resources to ensure application architecture aligns with infrastructure and deployment architecture.

Application Security & Authentication

• Implement and review secure authentication, authorization, password management, password reset, password history, and session-management flows.
• Implement bcrypt/Argon2id password hashing and lazy re-hashing/migration strategies for existing accounts.
• Implement secure random salt generation and eliminate static or hardcoded salts.
• Secure sensitive credentials and application secrets through appropriate key and secret management mechanisms.
• Implement and review RSA, AES/symmetric encryption, hashing, encryption/decryption, key rotation, and secure key-management practices.
• Implement secure migration and re-encryption of existing sensitive database values.
• Integrate applications with Azure Key Vault for RSA keys, symmetric keys, secrets, and tokenized credentials.
• Review and secure authentication cookies, including Secure, HttpOnly, and SameSite attributes.
• Implement API security controls including authentication protection and rate limiting for login, password-reset, and related endpoints.
• Ensure sensitive information is not exposed through APIs, logs, configuration files, resource files, or repositories.
• Apply OWASP secure coding principles and security best practices throughout development.

Code Review & Technical Governance

• Act as the primary technical reviewer for code delivered by other developers.
• Perform detailed code reviews and architecture reviews across backend components.
• Vet implementations for correctness, security, scalability, maintainability, performance, and architectural compliance.
• Identify security vulnerabilities, poor coding practices, technical debt, and architectural deviations.
• Establish and enforce coding standards, design patterns, branching practices, and development guidelines.
• Review and validate database changes, API contracts, authentication implementations, encryption mechanisms, and third-party integrations.
• Guide junior and mid-level developers on technical implementation and troubleshooting.
• Ensure Critical/High findings from SonarQube and vulnerability scans are appropriately addressed.

Azure, DevSecOps & Reliability

• Work with Azure Key Vault, Azure DevOps, CI/CD pipelines, Azure monitoring, Application Insights, and related Azure services.
• Ensure secure configuration and deployment practices across environments.
• Support removal of hardcoded secrets/keys from application resources and configuration.
• Implement appropriate retry, timeout, error-handling, and dependency-failure strategies.
• Contribute to resilience and redundancy considerations for security-sensitive components.
• Support repository security, Git history cleanup, secret scanning, and .gitignore protection.
• Implement correlation IDs, structured logging, security-event logging, monitoring, and observability across modified flows.
• Support dead-letter/error handling for applicable asynchronous operations.
• Participate in vulnerability scanning, static code analysis, remediation, and security verification.

Testing & Quality

• Develop and maintain high-quality, testable backend code.
• Write and review unit and integration tests for authentication, credential, API, and security-sensitive flows.
• Support performance testing of login and authentication flows following credential-storage changes.
• Work closely with QA to identify and resolve defects and improve test coverage.
• Review regression results and ensure all affected authentication and security flows are validated.
• Ensure implementation evidence, test results, scan results, and remediation details are properly documented in Azure DevOps.

Team Leadership & Delivery

• Provide day-to-day technical direction to developers working on the project.
• Break down complex technical requirements into appropriate implementation approaches.
• Mentor developers and support technical problem-solving.
• Review estimates and technical feasibility of proposed solutions.
• Identify technical risks and dependencies early and communicate them to the Engineering/Delivery team.
• Coordinate with frontend, QA, DevOps, and project management teams to ensure smooth delivery.
• Take ownership of technical quality and ensure deliverables meet agreed architecture, security, and coding standards.
• Participate in sprint planning, technical discussions, reviews, retrospectives, and client-facing technical discussions where required.

AI-Driven Development

• Actively use AI-assisted development tools to improve development speed, code quality, testing, documentation, and troubleshooting.
• Work with tools such as GitHub Copilot, Claude Code, Microsoft Copilot, and other AI-powered engineering tools.
• Apply AI-assisted and specification-driven development practices across requirements analysis, technical design, implementation, code review, testing, and documentation.
• Use AI tools responsibly for code generation, refactoring, test generation, documentation, debugging, and code analysis while maintaining engineering review and security controls.
• Evaluate AI-generated code for correctness, security, architectural compliance, performance, and maintainability before integration.
• Stay current with emerging AI development practices and contribute to adoption of AI-enabled engineering workflows within the team.

Required Technical Skills

DomainSkills & TechnologiesMust / PreferredBackend DevelopmentC#, ASP.NET MVC, ASP.NET Web API, .NET Framework 4.x, REST APIsMustArchitectureEnterprise application architecture, scalable architecture, SOLID, design patterns, clean architecture, technical designMustDatabaseSQL Server, database design, queries, migrations, data transformationMustAuthenticationAuthentication, authorization, password management, password reset, password history, session managementMustPassword Securitybcrypt, Argon2id, password migration, lazy re-hashing, random salt generationMustCryptographyRSA, AES/symmetric encryption, hashing, encryption/decryption, key rotation, secure key managementMustAzure SecurityAzure Key Vault, keys, secrets, Managed Identity, RBAC/access controlMustAPI SecuritySecure APIs, rate limiting, secure error handling, sensitive-data protectionMustApplication SecurityOWASP, secure coding, vulnerability remediation, security reviewsMustSecure CookiesSecure, HttpOnly, SameSite, session securityMustDevOpsAzure DevOps, Git, CI/CD, repository securityMustCode QualitySonarQube, static code analysis, code review, dependency/vulnerability scanningMustObservabilityApplication Insights, Azure Monitor, structured logging, security-event logging, correlation IDsMustReliabilityRetry policies, timeout handling, circuit breaker concepts, dependency failure handling, resilienceMustMessagingDead-letter queues / asynchronous failure handlingPreferredTestingUnit testing, integration testing, API testing, performance testingMustPerformanceAuthentication/API performance testing and optimizationMustCloudAzure services, application hosting, secure configurationMustAI DevelopmentGitHub Copilot, Claude Code, AI-assisted coding, specification-driven developmentMustAI ArchitectureAI agents, MCP, AI orchestration, Microsoft AI ecosystemPreferred

Preferred / Nice-to-Have Skills

• Experience leading technical development teams or acting as a Technical Lead / Solution Lead.
• Experience modernizing or securing legacy .NET applications.
• Strong understanding of enterprise application architecture and system integration.
• Experience with Microsoft Entra ID / IdentityServer or equivalent identity platforms.
• Experience with Azure Service Bus, queues, and dead-letter queue handling.
• Experience with Application Insights, Azure Monitor, ELK or equivalent observability platforms.
• Experience with JMeter, k6, or equivalent performance-testing tools.
• Experience with security audits, penetration-test remediation, vulnerability management, and compliance-driven development.
• Experience with AI agent frameworks, Microsoft AI Foundry, Copilot Studio, MCP, or agent-based architectures.
• Experience applying AI across the SDLC, including requirements, architecture, development, testing, code review, and documentation.
• Experience working with international clients and enterprise delivery environments.

Qualifications & Certifications

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or equivalent.
• 7-10 years of professional .NET development experience.
• Strong experience in enterprise application development and technical architecture.
• Prior experience in a Senior Developer / Technical Lead / Architect-level role preferred.
• Azure certifications such as AZ-204, AZ-305, or relevant security certifications are preferred but not mandatory.

Soft Skills & Cultural Fit

• Strong technical ownership and accountability.
• Strong analytical and problem-solving capabilities.
• Ability to independently make sound technical and architectural decisions.
• Strong code-review and mentoring capabilities.
• Ability to lead and guide developers without micromanagement.
• Excellent communication skills for technical discussions with developers, QA, DevOps, PMs, and clients.
• Ability to explain complex technical concepts clearly to technical and non-technical stakeholders.
• Strong attention to security, quality, maintainability, and engineering standards.
• Comfortable working in structured, milestone-driven and process-oriented environments.
• Willingness to continuously learn and adopt new technologies, particularly AI-driven engineering practices.

What We Offer

• Opportunity to work on enterprise-grade security and modernization projects.
• Exposure to advanced Azure, application security, and cloud technologies.
• Opportunity to lead technical architecture and mentor engineering teams.
• Exposure to AI-driven and specification-driven software development practices.
• Collaborative environment with international clients and cross-functional engineering teams.
• Opportunity to work on complex technical and security challenges.
• Competitive compensation and career growth opportunities.