SB-1501-Senior .NET Developer / Technical Lead

Role Summary

We are looking for a Senior .NET Developer / Technical Lead with 7–10 years of strong hands-on development experience and proven expertise in technical architecture, application security, Azure, code quality, and team leadership .

The role will be responsible for developing and modernizing enterprise-grade .NET applications, designing scalable and secure technical solutions, reviewing and vetting code developed by other resources, and ensuring adherence to established architectural and security standards.

The candidate will work extensively on authentication and credential security, cryptography, Azure Key Vault, API security, secure coding, vulnerability remediation, observability, performance, and legacy .NET application modernization .

The role also requires the ability to lead developers technically, identify implementation risks, make architecture-level decisions, and actively adopt AI-driven and specification-driven development practices to improve engineering productivity and delivery quality.

Key Responsibilities

Development & Technical Architecture

• •Design, develop, and maintain enterprise applications using C#, ASP.NET MVC/Web API, .NET Framework and related Microsoft technologies .
• •Analyze existing applications and understand legacy architecture, dependencies, business flows, and technical constraints before implementing changes.
• •Design scalable, maintainable, secure, and high-performing application architectures.
• •Define technical approaches, application components, integrations, APIs, data flows, and security mechanisms.
• •Participate in architecture discussions and prepare technical design solutions for complex requirements.
• •Ensure implementations follow established architectural patterns, coding standards, SOLID principles, and secure development practices.
• •Identify technical debt, architectural risks, performance bottlenecks, and security weaknesses and recommend appropriate solutions.
• •Work closely with Azure/DevOps resources to ensure application architecture aligns with infrastructure and deployment architecture.

Application Security & Authentication

• •Implement and review secure authentication, authorization, password management, password reset, password history, and session-management flows.
• •Implement bcrypt/Argon2id password hashing and lazy re-hashing/migration strategies for existing accounts.
• •Implement secure random salt generation and eliminate static or hardcoded salts.
• •Secure sensitive credentials and application secrets through appropriate key and secret management mechanisms.
• •Implement and review RSA, AES/symmetric encryption, hashing, encryption/decryption, key rotation, and secure key-management practices .
• •Implement secure migration and re-encryption of existing sensitive database values.
• •Integrate applications with Azure Key Vault for RSA keys, symmetric keys, secrets, and tokenized credentials.
• •Review and secure authentication cookies, including Secure, HttpOnly, and SameSite attributes.
• •Implement API security controls including authentication protection and rate limiting for login, password-reset, and related endpoints .
• •Ensure sensitive information is not exposed through APIs, logs, configuration files, resource files, or repositories.
• •Apply OWASP secure coding principles and security best practices throughout development.

Code Review & Technical Governance

• •Act as the primary technical reviewer for code delivered by other developers.
• •Perform detailed code reviews and architecture reviews across backend components.
• •Vet implementations for correctness, security, scalability, maintainability, performance, and architectural compliance.
• •Identify security vulnerabilities, poor coding practices, technical debt, and architectural deviations.
• •Establish and enforce coding standards, design patterns, branching practices, and development guidelines.
• •Review and validate database changes, API contracts, authentication implementations, encryption mechanisms, and third-party integrations.
• •Guide junior and mid-level developers on technical implementation and troubleshooting.
• •Ensure Critical/High findings from SonarQube and vulnerability scans are appropriately addressed.

Azure, DevSecOps & Reliability

• •Work with Azure Key Vault, Azure DevOps, CI/CD pipelines, Azure monitoring, Application Insights, and related Azure services .
• •Ensure secure configuration and deployment practices across environments.
• •Support removal of hardcoded secrets/keys from application resources and configuration.
• •Implement appropriate retry, timeout, error-handling, and dependency-failure strategies.
• •Contribute to resilience and redundancy considerations for security-sensitive components.
• •Support repository security, Git history cleanup, secret scanning, and .gitignore protection.
• •Implement correlation IDs, structured logging, security-event logging, monitoring, and observability across modified flows.
• •Support dead-letter/error handling for applicable asynchronous operations.
• •Participate in vulnerability scanning, static code analysis, remediation, and security verification.

Testing & Quality

• •Develop and maintain high-quality, testable backend code.
• •Write and review unit and integration tests for authentication, credential, API, and security-sensitive flows.
• •Support performance testing of login and authentication flows following credential-storage changes.
• •Work closely with QA to identify and resolve defects and improve test coverage.
• •Review regression results and ensure all affected authentication and security flows are validated.
• •Ensure implementation evidence, test results, scan results, and remediation details are properly documented in Azure DevOps .

Team Leadership & Delivery

• •Provide day-to-day technical direction to developers working on the project.
• •Break down complex technical requirements into appropriate implementation approaches.
• •Mentor developers and support technical problem-solving.
• •Review estimates and technical feasibility of proposed solutions.
• •Identify technical risks and dependencies early and communicate them to the Engineering/Delivery team.
• •Coordinate with frontend, QA, DevOps, and project management teams to ensure smooth delivery.
• •Take ownership of technical quality and ensure deliverables meet agreed architecture, security, and coding standards.
• •Participate in sprint planning, technical discussions, reviews, retrospectives, and client-facing technical discussions where required.

AI-Driven Development

• •Actively use AI-assisted development tools to improve development speed, code quality, testing, documentation, and troubleshooting.
• •Work with tools such as GitHub Copilot, Claude Code, Microsoft Copilot, and other AI-powered engineering tools .
• •Apply AI-assisted and specification-driven development practices across requirements analysis, technical design, implementation, code review, testing, and documentation.
• •Use AI tools responsibly for code generation, refactoring, test generation, documentation, debugging, and code analysis while maintaining engineering review and security controls.
• •Evaluate AI-generated code for correctness, security, architectural compliance, performance, and maintainability before integration.
• •Stay current with emerging AI development practices and contribute to adoption of AI-enabled engineering workflows within the team.

Required Technical Skills

Domain Skills & Technologies Must / Preferred

• Backend Development C#, ASP.NET MVC, ASP.NET Web API, .NET Framework 4.x, REST APIs Must
• Architecture Enterprise application architecture, scalable architecture, SOLID, design patterns, clean architecture, technical design Must
• Database SQL Server, database design, queries, migrations, data transformation Must
• Authentication Authentication, authorization, password management, password reset, password history, session management Must
• Password Security bcrypt, Argon2id, password migrati