SB-1501-Senior .NET Developer / Technical Lead

Role Summary
We are looking for a
Senior .NET Developer / Technical Lead
with 7–10 years of strong hands-on development experience and proven expertise in
technical architecture, application security, Azure, code quality, and team leadership
.
The role will be responsible for developing and modernizing enterprise-grade .NET applications, designing scalable and secure technical solutions, reviewing and vetting code developed by other resources, and ensuring adherence to established architectural and security standards.
The candidate will work extensively on
authentication and credential security, cryptography, Azure Key Vault, API security, secure coding, vulnerability remediation, observability, performance, and legacy .NET application modernization
.
The role also requires the ability to lead developers technically, identify implementation risks, make architecture-level decisions, and actively adopt
AI-driven and specification-driven development practices
to improve engineering productivity and delivery quality.

Key Responsibilities

Development & Technical Architecture
Design, develop, and maintain enterprise applications using
C#, <ASP.NET> MVC/Web API, .NET Framework and related Microsoft technologies
.
Analyze existing applications and understand legacy architecture, dependencies, business flows, and technical constraints before implementing changes.
Design scalable, maintainable, secure, and high-performing application architectures.
Define technical approaches, application components, integrations, APIs, data flows, and security mechanisms.
Participate in architecture discussions and prepare technical design solutions for complex requirements.
Ensure implementations follow established architectural patterns, coding standards, SOLID principles, and secure development practices.
Identify technical debt, architectural risks, performance bottlenecks, and security weaknesses and recommend appropriate solutions.
Work closely with Azure/DevOps resources to ensure application architecture aligns with infrastructure and deployment architecture.
Application Security & Authentication
Implement and review secure authentication, authorization, password management, password reset, password history, and session-management flows.
Implement
bcrypt/Argon2id password hashing
and lazy re-hashing/migration strategies for existing accounts.
Implement secure random salt generation and eliminate static or hardcoded salts.
Secure sensitive credentials and application secrets through appropriate key and secret management mechanisms.
Implement and review
RSA, AES/symmetric encryption, hashing, encryption/decryption, key rotation, and secure key-management practices
.
Implement secure migration and re-encryption of existing sensitive database values.
Integrate applications with
Azure Key Vault
for RSA keys, symmetric keys, secrets, and tokenized credentials.
Review and secure authentication cookies, including
Secure, HttpOnly, and SameSite
attributes.
Implement API security controls including authentication protection and
rate limiting for login, password-reset, and related endpoints
.
Ensure sensitive information is not exposed through APIs, logs, configuration files, resource files, or repositories.
Apply
OWASP secure coding principles
and security best practices throughout development.
Code Review & Technical Governance
Act as the primary technical reviewer for code delivered by other developers.
Perform detailed
code reviews and architecture reviews
across backend components.
Vet implementations for correctness, security, scalability, maintainability, performance, and architectural compliance.
Identify security vulnerabilities, poor coding practices, technical debt, and architectural deviations.
Establish and enforce coding standards, design patterns, branching practices, and development guidelines.
Review and validate database changes, API contracts, authentication implementations, encryption mechanisms, and third-party integrations.
Guide junior and mid-level developers on technical implementation and troubleshooting.
Ensure Critical/High findings from
SonarQube and vulnerability scans
are appropriately addressed.
Azure, DevSecOps & Reliability
Work with
Azure Key Vault, Azure DevOps, CI/CD pipelines, Azure monitoring, Application Insights, and related Azure services
.
Ensure secure configuration and deployment practices across environments.
Support removal of hardcoded secrets/keys from application resources and configuration.
Implement appropriate retry, timeout, error-handling, and dependency-failure strategies.
Contribute to resilience and redundancy considerations for security-sensitive components.
Support repository security, Git history cleanup, secret scanning, and .gitignore protection.
Implement
correlation IDs, structured logging, security-event logging, monitoring, and observability
across modified flows.
Support dead-letter/error handling for applicable asynchronous operations.
Participate in vulnerability scanning, static code analysis, remediation, and security verification.
Testing & Quality
Develop and maintain high-quality, testable backend code.
Write and review
unit and integration tests
for authentication, credential, API, and security-sensitive flows.
Support performance testing of login and authentication flows following credential-storage changes.
Work closely with QA to identify and resolve defects and improve test coverage.
Review regression results and ensure all affected authentication and security flows are validated.
Ensure implementation evidence, test results, scan results, and remediation details are properly documented in
Azure DevOps
.
Team Leadership & Delivery
Provide day-to-day technical direction to developers working on the project.
Break down complex technical requirements into appropriate implementation approaches.
Mentor developers and support technical problem-solving.
Review estimates and technical feasibility of proposed solutions.
Identify technical risks and dependencies early and communicate them to the Engineering/Delivery team.
Coordinate with frontend, QA, DevOps, and project management teams to ensure smooth delivery.
Take ownership of technical quality and ensure deliverables meet agreed architecture, security, and coding standards.
Participate in sprint planning, technical discussions, reviews, retrospectives, and client-facing technical discussions where required.
AI-Driven Development
Actively use
AI-assisted development tools
to improve development speed, code quality, testing, documentation, and troubleshooting.
Work with tools such as
GitHub Copilot, Claude Code, Microsoft Copilot, and other AI-powered engineering tools
.
Apply AI-assisted and specification-driven development practices across requirements analysis, technical design, implementation, code review, testing, and documentation.
Use AI tools responsibly for code generation, refactoring, test generation, documentation, debugging, and code analysis while maintaining engineering review and security controls.
Evaluate AI-generated code for correctness, security, architectural compliance, performance, and maintainability before integration.
Stay current with emerging AI development practices and contribute to adoption of AI-enabled engineering workflows within the team.
Required Technical Skills
Domain
Skills & Technologies
Must / Preferred
Backend Development
C#, <ASP.NET> MVC, <ASP.NET> Web API, .NET Framework 4.x, REST APIs
Must
Architecture
Enterprise application architecture, scalable architecture, SOLID, design patterns, clean architecture, technical design
Must
Database
SQL Server, database design, queries, migrations, data transformation
Must
Authentication
Authentication, authorization, password management, password reset, password history, session management
Must
Password Security
bcrypt, Argon2id, password migration, lazy re-hashing, random salt generation
Must
Cryptography
RSA, AES/symmetric encryption, hashing, encryption/decryption, key rotation, secure key management
Must
Azure Security
Azure Key Vault, keys, secrets, Managed Identity, RBAC/access control
Must
API Security
Secure APIs, rate limiting, secure error handling, sensitive-data protection
Must
Application Security
OWASP, secure coding, vulnerability remediation, security reviews
Must
Secure Cookies
Secure, HttpOnly, SameSite, session security
Must
DevOps
Azure DevOps, Git, CI/CD, repository security
Must
Code Quality
SonarQube, static code analysis, code review, dependency/vulnerability scanning
Must
Observability
Application Insights, Azure Monitor, structured logging, security-event logging, correlation IDs
Must
Reliability
Retry policies, timeout handling, circuit breaker concepts, dependency failure handling, resilience
Must
Messaging
Dead-letter queues / asynchronous failure handling
Preferred
Testing
Unit testing, integration testing, API testing, performance testing
Must
Performance
Authentication/API performance testing and optimization
Must
Cloud
Azure services, application hosting, secure configuration
Must
AI Development
GitHub Copilot, Claude Code, AI-assisted coding, specification-driven development
Must
AI Architecture
AI agents, MCP, AI orchestration, Microsoft AI ecosystem
Preferred
Preferred / Nice-to-Have Skills
Experience leading technical development teams or acting as a
Technical Lead / Solution Lead
.
Experience modernizing or securing
legacy .NET applications
.
Strong understanding of enterprise application architecture and system integration.
Experience with
Microsoft Entra ID / IdentityServer
or equivalent identity platforms.
Experience with Azure Service Bus, queues, and dead-letter queue handling.
Experience with Application Insights, Azure Monitor, ELK or equivalent observability platforms.
Experience with JMeter, k6, or equivalent performance-testing tools.
Experience with security audits, penetration-test remediation, vulnerability management, and compliance-driven development.
Experience with AI agent frameworks,
Microsoft AI Foundry, Copilot Studio, MCP, or agent-based architectures
.
Experience applying AI across the SDLC, including requirements, architecture, development, testing, code review, and documentation.
Experience working with international clients and enterprise delivery environments.
Qualifications & Certifications
Bachelor’s degree in Computer Science, Information Technology, Engineering, or equivalent.
7–10 years of professional .NET development experience
.
Strong experience in enterprise application development and technical architecture.
Prior experience in a
Senior Developer / Technical Lead / Architect-level role
preferred.
Azure certifications such as
AZ-204, AZ-305, or relevant security certifications
are preferred but not mandatory.
Soft Skills & Cultural Fit
Strong technical ownership and accountability.
Strong analytical and problem-solving capabilities.
Ability to independently make sound technical and architectural decisions.
Strong code-review and mentoring capabilities.
Ability to lead and guide developers without micromanagement.
Excellent communication skills for technical discussions with developers, QA, DevOps, PMs, and clients.
Ability to explain complex technical concepts clearly to technical and non-technical stakeholders.
Strong attention to security, quality, maintainability, and engineering standards.
Comfortable working in structured, milestone-driven and process-oriented environments.
Willingness to continuously learn and adopt new technologies, particularly
AI-driven engineering practices
.
What We Offer
Opportunity to work on
enterprise-grade security and modernization projects
.
Exposure to advanced
Azure, application security, and cloud technologies
.
Opportunity to lead technical architecture and mentor engineering teams.
Exposure to
AI-driven and specification-driven software development practices
.
Collaborative environment with international clients and cross-functional engineering teams.
Opportunity to work on complex technical and security challenges.
Competitive compensation and career growth opportunities.