The Mid-level .NET Developer supports operations and maintenance of existing enterprise applications in a regulated federal client environment. The role designs, enhances, tests, deploys, and maintains React and modern .NET application components while applying secure coding, quality, and configuration-management practices throughout the software development lifecycle.
Working within a hybrid delivery model, the Developer partners with software engineering, DevSecOps, cloud, security, data, and business teams to resolve application issues, deliver approved enhancements, and improve the reliability and security of existing applications. The role supports Azure-based development and deployment practices, including CI/CD pipeline integration, vulnerability remediation, security automation, and cloud-hosted data services as needed.
Key Responsibilities- Design, develop, test, debug, document, and maintain enhancements and defect corrections for existing React and modern .NET applications.
- Translate approved functional and technical requirements into maintainable, reusable application code, user-interface components, APIs, and supporting documentation.
- Apply secure architecture and secure coding practices during application maintenance and enhancement activities, including peer review, remediation validation, and security-requirements traceability.
- Participate in code reviews and work with engineering and security teams to identify, prioritize, remediate, and validate application, dependency, configuration, and infrastructure vulnerabilities.
- Integrate and maintain security controls within CI/CD pipelines, including static and dynamic testing, software composition analysis, secret scanning, artifact-integrity checks, and release security gates appropriate to the risk of each release.
- Support secure Azure-hosted application and data-service operations by implementing approved configuration baselines, access controls, logging, encryption, and cloud-security practices.
- Create and execute unit, functional, integration, and regression tests; analyze test results; and resolve defects and security findings before release.
- Support continuous monitoring, application logging, incident-response activities, technical troubleshooting, and root-cause analysis for production issues affecting assigned systems.
- Collaborate with development, cloud, DevSecOps, and business stakeholders to document technical findings, remediation plans, release impacts, and compliance evidence.
- Use approved AI-enabled development tools, such as CodeX, to improve developer productivity while following established security, code-quality, and data-handling requirements.
Required Qualifications- Bachelor's degree in Computer Science, Information Systems, Software Engineering, or a related technical field, or equivalent relevant experience.
- At least 3 years of progressively responsible software-development, application-maintenance, cybersecurity, application-security, system-security, or DevSecOps experience supporting enterprise applications in a regulated environment.
- Hands-on experience developing, enhancing, testing, and supporting applications using modern .NET technologies and C#.
- Experience supporting React-based web applications, including development, troubleshooting, maintenance, testing, and deployment of user-interface components.
- Working knowledge of secure software-development practices, including secure coding, code review, vulnerability remediation, dependency management, and security testing.
- Experience using source-code management and CI/CD practices to build, test, and deploy application changes in a controlled environment.
- U.S. citizenship and the ability to obtain and maintain a Public Trust suitability determination are required.
Preferred Qualifications- Experience with Azure DevOps, Git-based repositories, pipeline security tooling, Azure Monitor, Microsoft Sentinel, Defender for Cloud, or comparable cloud-security platforms.
- Experience supporting Azure-hosted applications, Azure data lakes, Azure Storage, Azure Data Factory, or comparable cloud data services.
- Security certification such as Security+, SSCP, CISSP, CISM, Azure Security Engineer Associate, or an equivalent credential.
- Experience supporting public-trust or other highly regulated government systems, including continuous monitoring, security-control assessments, audit-evidence preparation, and remediation tracking.
Compensation RangesCompensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.
EEO RequirementsIt is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.
All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.
Physical Requirements
The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.
DisclaimerThe preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.
Never miss an opportunity! Create an alert based on the job you applied for.
