Architecture and Systems Design Analyst

ABM US•Dunwoody, GA

19h•Onsite

About The Position

Custom Solutions is the ABM IT team responsible for building and maintaining bespoke .NET business applications, both on-prem and in Azure. Core team focus is Team Connect — ABM’s mobile-first workforce platform (time & attendance, scheduling, and an admin portal) — plus internal workflow/process-automation tools and custom REST APIs. Users span internal business units (Finance, HR, Facilities, Operations), a large distributed hourly mobile workforce, and downstream automated systems. Business criticality ranges from business-critical financial/HR-adjacent integrations to lower-criticality internal productivity tools. We’re looking for a Full Stack .NET Developer to design/build new applications in Azure or on-prem and maintain applications across our portfolio — from ASP.NET Core Web APIs and Azure Functions to .NET MAUI mobile, Blazor, Angular, or React front ends. You’ll work within an audited, AI-augmented SDLC: approved AI coding assistants integrated into daily development, an automated AI code-review engine gating every pull request, and AI-specific quality gates built into the team’s Definition of Done. You will collaborate closely with other CS team members, business and product owners, and the QA team to help ship secure, well-tested software through a structured, security-conscious SDLC.

Requirements

Professional experience building applications in C# / .NET (.NET 8+ preferred)
Hands-on experience with ASP.NET Core Web API and Entity Framework Core
Experience with at least one modern front-end approach: .NET MAUI, Blazor, Angular, or React (with TypeScript)
Solid understanding of Domain-Driven Layered Architecture, SOLID principles, and Dependency Injection
Experience with SQL Server and relational data modeling
Experience working with Git-based version control and pull-request workflows
Familiarity with unit testing frameworks (xUnit or MSTest) and writing testable code
Understanding of secure coding practices — input validation, parameterized queries, secrets management

Nice To Haves

Experience with Azure services: App Services, Functions, Cosmos DB, Key Vault, Service Bus, App Configuration
Experience with Azure API Management (policy authoring, backend integration troubleshooting)
Experience with Azure Monitor / Application Insights (KQL, alerting) and Bicep/ARM infrastructure as code
Familiarity with Power Automate, Logic Apps, or Microsoft Graph API for workflow automation
Experience with .NET MAUI or other cross-platform mobile frameworks, including offline-first/sync architectures
Experience with Azure DevOps (Git, CI/CD pipelines, Test Plans) or TFS
Experience with MediatR/CQRS and FluentValidation
Familiarity with SAST/DAST tooling (Snyk, OWASP ZAP) and remediating findings
Comfortable working alongside AI-assisted development tooling (AI code review gates, AI pair-programming) within an audited SDLC
Exposure to regulated or compliance-driven SDLC environments (ISO 27001, SOC 2, PII handling)

Responsibilities

Design and implement features following Domain-Driven Layered Architecture principles, with strict separation of Presentation, Application, Domain, and Infrastructure layers
Build ASP.NET Core Web APIs, Azure Functions (isolated worker model), Blazor web applications, .NET MAUI mobile apps, and/or React or Angular front ends (TypeScript strict mode required — no JavaScript-only work)
Design and maintain offline-first mobile functionality in .NET MAUI — local SQLite snapshot storage, background sync queue processing, and conflict resolution for data captured while disconnected
Apply the Repository pattern for all data access, Dependency Injection (Microsoft.Extensions.DependencyInjection), MediatR CQRS handlers, and FluentValidation on API request DTOs
Work with Entity Framework Core against SQL Server and Azure Cosmos DB, including partition-key design, change-feed processors, and RU/s budget management, using parameterized queries
Integrate with Azure Key Vault for secrets management and Azure App Configuration for environment-labeled settings and feature flags (DEV/SIT/UAT/PROD)
Author and troubleshoot Azure API Management policies for API gateway and backend system integrations
Contribute to observability: Application Insights custom telemetry/KQL queries, Azure Monitor alerting, and the Bicep templates that provision them
Submit pull requests with mandatory peer/Lead Developer review before merge
Maintain minimum 70% unit test coverage on new code (xUnit or MSTest, Coverlet)
Write and maintain integration tests against Dev/Staging environments
Resolve findings from automated security scans (Snyk SAST on every PR) and DAST scans (OWASP ZAP/StackHawk) before release
Follow Microsoft C# coding conventions and team style guide, enforced via .editorconfig and Roslyn analyzers
Enforce SOLID principles and Domain-Driven Layered Architecture boundaries during code review
Work from Functional Requirements Documents (FRDs) authored by Business Analysts and contribute to Functional Technology Approach (FTA) documents for significant features, new API endpoints, or infrastructure changes
Participate in STRIDE threat modeling and PII impact assessments for features that expose new endpoints, integrate external systems, or handle personal data
Decompose accepted requirements into Azure DevOps user stories and work within the team’s Git branching strategy (feature/, hotfix/, protected main and develop branches)
Support release readiness: CI pipeline checks (build, test, SAST), QA/UAT sign-off, and documentation needed for CAB/RFC change approval
Collaborate with QA Engineers, Business Analysts, and Cloud Operations/InfoSec throughout the development lifecycle
Follow segregation-of-duties requirements — developers implement and submit for review but do not promote their own code to production
Ensure no production data is used in non-production environments (synthetic or masked data only)
Handle PII and confidential data in accordance with the team’s data classification standards (encryption at rest/in transit, masking in non-prod)
Use only Security-team-approved AI tools, and never submit secrets, PII, or proprietary business logic to any AI tool prompt