What You’ll Do
Technical Leadership & Architecture
- Define and evolve the desktop architecture — including UI, networking stack, background services, update/installer strategy, observability, and error handling.
- Establish and enforce engineering standards across the team (coding, testing, threat modeling, performance SLOs).
- Break down complex problems, make sound trade-offs, and communicate architectural decisions clearly.
Development & Implementation
Security & Hardening
- Design for least privilege and defense-in-depth; mitigate DLL hijacking, code injection, and privilege escalation risks.
- Utilize DPAPI/ProtectedData, Windows Credential Manager, certificate store, TLS 1.3, certificate pinning, and secure secret handling.
- Own code signing (Authenticode) and ensure safe installation/update flows that are SmartScreen-friendly, rollbackable, and tamper-resistant
Quality, Observability & Release
- Drive automated testing: unit, integration, and UI-level tests; maintain CI/CD guardrails using GitHub Actions.
- Implement observability with ETW, Microsoft.Extensions.Logging, Serilog/NLog, and profile using WPR/WPA, dotnet-trace/dump, PerfView, or Sysinternals tools.
- Package and distribute applications via MSIX (preferred) or WiX Toolset 4, defining update strategies (delta packages, background updates, version pin/rollback).
Collaboration & Mentorship
- Collaborate with Product and Design teams on UX, and with Backend/DevOps on protocols, performance, and rollout plans.
- Mentor junior and mid-level engineers through code reviews, design discussions, and pair programming.
- Communicate progress and risks clearly while modeling technical excellence and professionalism.
What You’ll Bring
- Languages & Runtime: C#, async/await, pipelines, Memory, dependency injection (Microsoft.Extensions.DependencyInjection), NativeAOT.
- Windows App Stack: Windows App SDK, WinUI 3, WPF (XAML), MVVM, Fluent Design, accessibility (UIA).
- Networking: HttpClient, Sockets, WebSockets, HTTP/2/3, WinHTTP/WinInet, WinRT Networking, gRPC, memory-mapped files when appropriate.
- Security: DPAPI, Credential Manager, certificate stores, Authenticode, secure elevation, secret handling, and hardening against desktop-class attacks.
- Packaging & Deployment: MSIX, WiX 4, winget manifests; Store/enterprise channels; update/rollback strategies.
- Performance & Diagnostics: ETW, WPR/WPA, dotnet-trace/dump, PerfView, ProcMon, TCPView; UI responsiveness and memory optimization.
- Tooling & Process: Visual Studio 2022/2025, .NET SDK/CLI, Git, CI/CD, feature flags, documentation (Notion), structured issue tracking.
Behavioural qualifications
- Self-Organization & Professionalism: Plans and prioritizes work, anticipates risks, and maintains clean, navigable codebases.
- Motivated Fast Learner: Quickly masters new APIs and frameworks through documentation and exploration.
- Novel Problem Solving: Prototypes, measures, iterates, and balances delivery speed with long-term maintainability.
- Security Mindset: Designs with safety in mind, treating security as an essential product feature.
- Clear Communication & Collaboration: Delivers precise design docs, PRs, and async communication; offers constructive code reviews.
Technical qualifications
- Bachelor’s degree in Computer Science, Software Engineering, or equivalent experience.
- 7+ years of experience developing Windows desktop applications in C#/.NET, including leading major features or products.
- Proven expertise in Windows networking APIs and OS permissions (UAC, services, capabilities).
- Experience shipping secure, signed Windows applications using modern installers (MSIX/WiX) with automated updates at scale.
- Deep experience with diagnostics and performance tuning using ETW, WPA, PerfView, and other .NET tooling.