Senior .NET Solution Architect- 15+ yrs- New York, United States- Onsite

Must to have10+ years, with genuine dual-track experience — you have both owned an architecture & run thedelivery around it, not held one & observed the other.• Has personally carried a solution design through a bank&'s or insurer&'s formal architecture & securityapproval boards, & can describe what those reviewers actually push on.• Able to read & reason about an existing production application&'s code & session model. You are notdelegating the current-state assessment.• Fixed-price delivery experience with a working change-control instinct. This is the single most commerciallyimportant trait in the role.• Experience inserting authentication or authorisation controls into live customer-facing transactionalsystems.• Client-facing credibility at senior level. You will be the supplier's face in every forum.• Written communication strong enough that your design document survives formal review without a rewrite.Nice to have• Insurance, payments or other regulated financial-services delivery.• Familiarity with NIST SP 800-63B & how an email-delivered factor positions against it.• Experience operating alongside an incumbent managed-service provider on a shared codebase.LanguagesC# 10+, .NET 8 (or 4.8)ASP.NET Core MVC / Razor PagesASP.NET Core Identity, Data Protection API, custom middleware pipelineEntity Framework Core, Dapper, ADO.NETIDistributedCache over Redis or SQL ServerASP.NET Core Rate Limiting middleware (.NET 7+)Razor, H&lebars.NETSerilog or NLog with destructuring policies & redactionIIS / KestrelxUnit or NUnit, RestSharp, SpecFlowSQL (T-SQL, PL/SQL or DB2)Git; branching & PR workflow on a shared repository under enterprise change controlAzure DevOps or Jira; RAID, decision & dependency trackingArchitecture practiceC4 model or UML — context, container, component & sequence diagramsData-flow diagramsArchitecture decision recordsVisio, Lucidchart, draw.io or MiroSecurity architectureThreat modelling — STRIDE, abuse-case analysisNIST SP 800-63B — AAL levels & out-of-b& authenticator positionOWASP ASVS as an architectural control set