Mid-level .NET Developer

ASM Research•Bethesda, MD

1d•Hybrid

About The Position

The Mid-level .NET Developer supports operations and maintenance of existing enterprise applications in a regulated federal client environment. The role designs, enhances, tests, deploys, and maintains React and modern .NET application components while applying secure coding, quality, and configuration-management practices throughout the software development lifecycle. Working within a hybrid delivery model, the Developer partners with software engineering, DevSecOps, cloud, security, data, and business teams to resolve application issues, deliver approved enhancements, and improve the reliability and security of existing applications. The role supports Azure-based development and deployment practices, including CI/CD pipeline integration, vulnerability remediation, security automation, and cloud-hosted data services as needed.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Software Engineering, or a related technical field, or equivalent relevant experience.
At least 3 years of progressively responsible software-development, application-maintenance, cybersecurity, application-security, system-security, or DevSecOps experience supporting enterprise applications in a regulated environment.
Hands-on experience developing, enhancing, testing, and supporting applications using modern .NET technologies and C#.
Experience supporting React-based web applications, including development, troubleshooting, maintenance, testing, and deployment of user-interface components.
Working knowledge of secure software-development practices, including secure coding, code review, vulnerability remediation, dependency management, and security testing.
Experience using source-code management and CI/CD practices to build, test, and deploy application changes in a controlled environment.
U.S. citizenship and the ability to obtain and maintain a Public Trust suitability determination are required.

Nice To Haves

Experience with Azure DevOps, Git-based repositories, pipeline security tooling, Azure Monitor, Microsoft Sentinel, Defender for Cloud, or comparable cloud-security platforms.
Experience supporting Azure-hosted applications, Azure data lakes, Azure Storage, Azure Data Factory, or comparable cloud data services.
Security certification such as Security+, SSCP, CISSP, CISM, Azure Security Engineer Associate, or an equivalent credential.
Experience supporting public-trust or other highly regulated government systems, including continuous monitoring, security-control assessments, audit-evidence preparation, and remediation tracking.

Responsibilities

Design, develop, test, debug, document, and maintain enhancements and defect corrections for existing React and modern .NET applications.
Translate approved functional and technical requirements into maintainable, reusable application code, user-interface components, APIs, and supporting documentation.
Apply secure architecture and secure coding practices during application maintenance and enhancement activities, including peer review, remediation validation, and security-requirements traceability.
Participate in code reviews and work with engineering and security teams to identify, prioritize, remediate, and validate application, dependency, configuration, and infrastructure vulnerabilities.
Integrate and maintain security controls within CI/CD pipelines, including static and dynamic testing, software composition analysis, secret scanning, artifact-integrity checks, and release security gates appropriate to the risk of each release.
Support secure Azure-hosted application and data-service operations by implementing approved configuration baselines, access controls, logging, encryption, and cloud-security practices.
Create and execute unit, functional, integration, and regression tests; analyze test results; and resolve defects and security findings before release.
Support continuous monitoring, application logging, incident-response activities, technical troubleshooting, and root-cause analysis for production issues affecting assigned systems.
Collaborate with development, cloud, DevSecOps, and business stakeholders to document technical findings, remediation plans, release impacts, and compliance evidence.
Use approved AI-enabled development tools, such as CodeX, to improve developer productivity while following established security, code-quality, and data-handling requirements.