Senior/Lead Dot Net Developer

.

Build and scale a Healthcare-as-a-Service platform composed of secure, multi-tenant ASP.NET Core microservices running on Azure (AKS/App Service) fronted by API Management. You ll own services end-to-end, design, code, IaC, CI/CD, observability, while partnering with product, security, and clinical SMEs.

• Design & build high-throughput REST APIs in ASP.NET Core (minimal APIs/Controllers) with clean architecture & DDD-lite boundaries (Identity, Reference, Catalog, Screening, Consult, Clinical/Prescriptions, Commerce, Pricing).

• Implement authZ/authN via Microsoft Entra ID (client-credentials, app roles/scopes), JWT validation in APIM + service, optional mTLS, and tenant isolation.

• Model multi-tenant data in Azure SQL (composite keys, filtered unique indexes, soft delete), plus selective Cosmos DB/Blob Storage where appropriate.

• Add resilience (Polly timeouts/retries/circuit breakers), idempotency keys, and Outbox for reliable events; integrate Service Bus/Event Grid where needed.

• Ship OpenAPI contracts, enforce ETag/If-Match, support PUT/PATCH/:restore, and return ProblemDetails (RFC7807).

• Wire APIM policies (rate limit, JWT validate, request/response transform, caching) and API products/versioning.

• Instrument services with OpenTelemetry (traces/logs/metrics), publish to Application Insights/Azure Monitor, create actionable dashboards/alerts (SLOs/SLIs).

• Automate builds & releases using GitHub Actions or Azure DevOps, implement blue-green/rolling, and IaC with Bicep/Terraform.

• Practice secure coding and healthcare compliance (HIPAA), using synthetic data; implement data retention, audit events, and PII/PHI boundaries.

• Lead design reviews, coach peers, and raise the engineering bar with tests (unit/contract/integration/load) and docs.

How you ll work

• Architecture: DDD-inspired boundaries, versioned APIs (/v1), backward compatibility, task-oriented endpoints.

• Reliability: SLIs/SLOs, error budgets, canary releases, runbooks for incident response & secret rotation.

• Quality: Code reviews, ADRs, pair/mob sessions on complex flows, you build it, you run it .

Success metrics (first 90)

• Ship 3-4 production microservices with 99.9%+ availability and golden-path p95

• Zero P1 incidents tied to auth/tenant isolation; security posture verified in APIM/WAF.

• Dashboards & alerts in place (latency, errors, saturation, dependency health).

• Reusable Bicep modules and GitHub Actions templates adopted across repos.

• Contract tests established for at least 3 inter-service integrations.

Tech stack

• Language: C#/.NET 8+, ASP.NET Core, Minimal APIs

• Azure: AKS or App Service, APIM, Azure SQL, Service Bus, Event Grid, Key Vault, Storage, Monitor/App Insights, Container Registry

• Infra: Bicep/Terraform, GitHub Actions/Azure DevOps

• Obs: OpenTelemetry, Prometheus exporters (optional), Kusto/KQL

• Data: EF Core (code-first), Dapper (hot paths), Redis (cache)

• Security: Entra ID, Managed Identity, mTLS (internal), Private Endpoints/VNet .Qualifications

• 5-10+

• Strong in C# / .NET 8+, ASP.NET Core Web API, async/await, DI, configuration, and middleware.

• Proven Azure experience: AKS or App Service, API Management, Azure SQL, Key Vault, Storage, Service Bus/Event Grid.

• Deep understanding of OAuth2/OIDC, JWT, RBAC, app roles/scopes, and service-to-service security.

• Database design & performance tuning (indexes, query plans, transactions, isolation levels).

• CI/CD with GitHub Actions or Azure DevOps; IaC with Bicep/Terraform.

• Observability with OpenTelemetry and Application Insights.

• Solid testing discipline (xUnit/NUnit), test doubles, contract tests, and load testing.

Nice to have

• Healthcare standards familiarity (FHIR, LOINC/SNOMED/RxNorm), but we use synthetic data only.

• APIM policy authoring (rate-limit, JWT validate, set-variable, cache-store/retrieve).

• Event-driven design (sagas, choreography), Cosmos DB, Redis.

• Performance tuning of high-cardinality telemetry and hot paths.

• Experience with Security & Compliance (HIPAA, SOC 2) controls and runbooks.