Mid-level .NET Developer

Mid-level .NET Developer

Hybrid in Bethesda, MD — two days per week on site

The Mid-level .NET Developer supports operations and maintenance of existing enterprise applications in a regulated federal environment. The role designs, enhances, tests, deploys and maintains React and modern .NET application components while applying secure coding, quality and configuration-management practices throughout the software development lifecycle.

Working within a hybrid delivery model, the Developer partners with software engineering, DevSecOps, cloud, security, data and business teams to resolve application issues, deliver approved enhancements, and improve the reliability and security of existing applications. The role supports Azure-based development and deployment practices, including CI/CD pipeline integration, vulnerability remediation, security automation and cloud-hosted data services as needed.

Responsibilities:

• Design, develop, test, debug, document and maintain enhancements and defect corrections for existing React and modern .NET applications.

• Translate approved functional and technical requirements into maintainable, reusable application code, user-interface components, APIs and supporting documentation.

• Apply secure architecture and secure coding practices during application maintenance and enhancement, including peer review, remediation validation and security-requirements traceability.

• Participate in code reviews and work with engineering and security teams to identify, prioritize, remediate and validate application, dependency, configuration and infrastructure vulnerabilities.

• Integrate and maintain security controls within CI/CD pipelines, including static and dynamic testing, software composition analysis, secret scanning, artifact-integrity checks and release security gates.

• Support secure Azure-hosted application and data-service operations by implementing approved configuration baselines, access controls, logging, encryption and cloud-security practices.

• Create and execute unit, functional, integration and regression tests; analyze results; and resolve defects and security findings before release.

• Support continuous monitoring, application logging, incident response, troubleshooting and root-cause analysis for production issues affecting assigned systems.

• Collaborate with development, cloud, DevSecOps and business stakeholders to document technical findings, remediation plans, release impacts and compliance evidence.

• Use approved AI-enabled development tools to improve developer productivity while following established security, code-quality and data-handling requirements.

Requirements:

• Bachelor's degree in Computer Science, Information Systems, Software Engineering or a related technical field, or equivalent relevant experience.

• At least 3 years of progressively responsible software development, application maintenance, application security or DevSecOps experience supporting enterprise applications in a regulated environment.

• Hands-on experience developing, enhancing, testing and supporting applications using modern .NET technologies and C#.

• Experience supporting React-based web applications, including development, troubleshooting, maintenance, testing and deployment of user-interface components.

• Working knowledge of secure software development practices, including secure coding, code review, vulnerability remediation, dependency management and security testing.

• Experience using source-code management and CI/CD practices to build, test and deploy application changes in a controlled environment.

• US Citizenship and the ability to pass a federal background investigation in order to be granted access to sensitive information.

Preferred:

• Experience with Azure DevOps, Git-based repositories, pipeline security tooling, Azure Monitor, Microsoft Sentinel, Defender for Cloud or comparable cloud-security platforms.

• Experience supporting Azure-hosted applications, Azure data lakes, Azure Storage, Azure Data Factory or comparable cloud data services.

• Security certification such as Security+, SSCP, CISSP, CISM, Azure Security Engineer Associate or an equivalent credential.

• Experience supporting highly regulated government systems, including continuous monitoring, security-control assessments, audit-evidence preparation and remediation tracking.

Compensation: $80,000 - $112,091 per year

#cjpost