Scavenger Tech

The role

We’re taking over core development of a large, real-time public safety / mobility platform. It’s a hybrid system: you’ll work in a mix of legacy and modern code while we move the center of gravity toward .NET 8 and a clean CI/CD delivery model.

We’re also transitioning to a CIS-based team, and the truth is: the documentation isn’t perfect everywhere. You don’t need everything spelled out if you know how to read a system, ask smart questions, and improve things as you go.

If you like big systems, real production constraints, and modernization work that actually matters—this will feel interesting.

What you’ll do

• Build backend services in C# / .NET 8 (LTS).
  
   
• Maintain/refactor legacy areas (ASP.NET 4.8 / WCF) safely as we modernize.
  
   
• Build front-end features in React and/or Angular (TypeScript) for operational dashboards.
  
   
• Write and optimize queries across SQL Server and MySQL.
  
   
• Work in a strict SDLC:
  
   
  • PR-based workflow
    
     
  • branch protection (no pushing to main)
    
     
  • peer reviews
    
     
  • mandatory SAST scans before release
    
     
• Help move releases from “manual steps” toward CI/CD with logging, traceability, and rollback.
  
   
• Integrate with adjacent services (some Python) and mobile clients.
  
   

What we’re looking for

• 5+ years in production software engineering (enterprise or high-availability systems).
  
   
• Strong C# / .NET skills; comfortable touching ASP.NET 4.8 while writing most new work in .NET 8.
  
   
• Solid experience with React and/or Angular.
  
   
• Strong relational DB fundamentals (SQL Server, MySQL).
  
   
• You can handle imperfect docs and still deliver: you investigate, validate, and improve the system.
  
   

Nice to have

• Python integration work, mobile-facing APIs, or experience with real-time dashboards.
  
   
• Observability/performance tuning experience.
  
   
• Prior modernization experience (monolith → services, legacy cleanup, etc.).
  
   

A quick honesty section

• You’ll see messy parts. We’re not hiding that.
  
   
• You’ll also be part of the team that fixes them—steadily and safely.
  
   

Apply with: 2–3 bullets on systems you’ve worked on (scale, tech stack, what you shipped).

The Full Stack Developer is responsible for designing, developing, and maintaining both frontend user interfaces and backend services in alignment with approved enterprise architecture, security standards, and governance frameworks.

This role ensures that delivered features meet functional and non-functional requirements while providing seamless integration between UI, APIs, databases, and Azure cloud infrastructure.

The position operates within defined architectural boundaries and collaborates closely with Solution Architects, Product Owners, QA, DevSecOps, and UI/UX teams to deliver secure, scalable, high-performance digital solutions.

Role Purpose

Design, develop, and maintain end-to-end application features across frontend and backend layers while ensuring alignment with architectural, security, and performance standards.

Requirements

Must-have

• 4+ years of professional full-stack experience (enterprise web apps)
• Strong TypeScript + React and/or Angular experience (shipping production UIs)
• Strong .NET 6+ experience building ASP.NET Core Web APIs
• Solid SQL Server skills (queries, indexing basics, performance tuning mindset)
• Practical secure coding knowledge (OWASP Top 10; not just buzzwords)
• Experience with authentication/authorization in web apps (JWT/OAuth2)
• Testing culture: unit tests + basic integration/e2e where appropriate
• Git + PR workflows (code reviews, branch protection)
• English B2+ (you can explain security tradeoffs and write clear PRs)

Nice-to-have

• Azure production experience (App Services, Functions, Storage, Key Vault, App Insights)
• Docker basics; microservices patterns; API gateway familiarity
• Experience modernizing legacy codebases / imperfect documentation
• SAST tooling experience (Veracode/Sonar/etc.)
• Arabic fluency

Recommended Certifications

AZ-204 (Azure Developer Associate)

AZ-900 (Azure Fundamentals)

Secure Coding / OWASP Training

Microsoft Security Certifications (Optional but preferred)

Summary

Safe City Group is hiring a Lead DevSecOps / Azure Platform Engineer to build secure, automated delivery foundations for critical UAE traffic and public-sector systems. This role is not basic deployment support. The immediate mission is to move from manual releases and weak secrets handling to controlled CI/CD, secure environment promotion, automated scanning, Azure Key Vault integration, infrastructure-as-code, release traceability, and production observability.

Immediate priorities

• Build baseline Azure DevOps pipelines for .NET / ASP.NET Core applications.
• Add build, test, SAST, SCA, secret scanning, artifact versioning, and deployment gates.
• Remove plaintext secrets from config/code and migrate to Azure Key Vault or equivalent.
• Establish environment promotion across Dev / Test / Staging / Production.
• Create rollback-ready deployment procedures.
• Implement secure variable groups, service connections, managed identities, and least-privilege access.
• Support Azure App Services / Azure SQL / Storage / APIM / WAF / Application Insights / Azure Monitor.
• Partner with security/governance to align releases with OWASP, ISO 27001, and internal change controls.
• Train developers on practical pipeline usage without turning process into bureaucracy.

Must-have experience

• 7+ years in DevOps, platform engineering, cloud engineering, or release engineering.
• Strong Azure DevOps Pipelines experience.
• Strong Azure production experience: App Services, Azure SQL, Storage, Key Vault, Entra ID, Application Insights, Azure Monitor.
• Hands-on CI/CD for .NET / C# / ASP.NET Core systems.
• Infrastructure as Code: Bicep or Terraform.
• Secrets management and credential rotation.
• SAST/SCA/secret scanning integration.
• Branching, PR gates, artifact management, deployment approvals, rollback.
• Docker/containerization experience.
• Strong English, B2+ minimum.

Strong preference

• Experience in regulated, government, financial, transport, telecom, or security-sensitive systems.
• Experience modernizing manual deployment environments.
• Experience with APIM, WAF, private endpoints, NSGs, managed identity, RBAC.
• Familiarity with SonarQube, Snyk, GitHub Advanced Security, Microsoft Defender for Cloud, OWASP ZAP, Trivy, Checkov, Dependabot, or equivalent tools.
• Azure certifications: AZ-400, AZ-104, AZ-305, AZ-500.

Executive Summary

You will design, develop, and maintain backend and system-level components aligned with approved enterprise architecture, security standards, and governance frameworks. You’ll deliver features that meet functional and non-functional requirements, follow secure coding practices, and integrate cleanly across our ecosystem: Azure, APIs, databases, and CI/CD pipelines.

You will operate within defined architectural boundaries and collaborate with Architects, Product Owners, QA, DevSecOps, and business stakeholders to ship high-quality, scalable, secure solutions.  You must have a secure-by-design mindset (OWASP Top 10, RBAC, identity integration) for this role.

Role Purpose

Design, build, and maintain backend/system-level components aligned with architectural standards.

About the project 

We’re taking ownership of a large, mission-critical enterprise platform currently operated by an external vendor. The system is live and security-sensitive, and we’re modernizing it over time:

• Primary backend stack: C# / .NET (6+), with most new work on .NET 8 (LTS)
• Legacy areas exist: ASP.NET Framework 4.8 and some WCF
• Cloud: Microsoft Azure
• Data: SQL Server primarily, some MySQL
• Frontend exists (React/Angular), but this role is backend/system-level

• Documentation is mixed due to the transition; part of the work is improving clarity as you go.

   

Core Responsibilities

1) Software Development & Implementation

• Develop backend services, APIs, and system components based on approved backlog items and technical designs.
• Translate user stories and functional requirements into scalable solutions.
• Implement business logic following clean architecture and principles.
• Follow coding standards, architectural guidelines, and agreed design patterns.

2) Code Quality & Maintainability

• Write clean, maintainable, testable, well-documented code.
• Perform peer reviews and address review feedback.
• Refactor legacy code where needed to improve performance and maintainability.
• Maintain strong version control discipline: branching strategy, pull requests, merges.

3) Testing & Quality Assurance

• Develop and maintain unit tests using approved frameworks (xUnit / NUnit / MSTest).
• Use mocking frameworks appropriately (e.g., Moq/NSubstitute equivalents).
• Participate in integration testing and support QA during testing cycles.
• Meet quality gates (coverage/standards) before release.
• Support debugging, root-cause analysis, and defect resolution.

4) Security & Compliance

• Apply secure coding practices aligned with OWASP Top 10.
• Identify and mitigate vulnerabilities; follow DevSecOps quality controls.
• Correctly handle authentication, authorization, encryption, and data protection.
• Implement RBAC and identity-based access patterns (JWT/OAuth2; Entra ID integration where applicable).
• Comply with mandatory SAST scanning gates prior to release.

5) Performance & Reliability

• Optimize database queries and system performance (SQL Server/MySQL).
• Build scalable, resilient services and APIs.
• Implement logging/monitoring/exception handling best practices (e.g., Application Insights, Serilog).
• Use performance profiling techniques when needed to diagnose bottlenecks.

6) DevOps & Deployment Support

• Support CI/CD pipeline integration and delivery workflows (Azure DevOps).
• Assist in staging and production deployments under governance checkpoints.
• Participate in troubleshooting production incidents when required.

7) Cross-Functional Collaboration

• Work closely with Solution Architects, Product Owners, QA, DevSecOps, and UI/UX teams.
• Escalate technical risks and architectural concerns early and clearly.

Authority

• Own implementation decisions within approved architectural boundaries.
• Cannot redefine scope or bypass architecture/security standards.
• Must escalate technical risks, architectural concerns, or scope-impacting issues to the Architect and Product Owner.
• Cannot approve production deployment outside defined governance checkpoints.

Required Qualifications

Education

• Bachelor’s degree in Computer Science / Software Engineering / Information Systems (or similar).
• Master’s degree is a plus.

Experience

• 5+ years backend development experience.
• Proven experience delivering enterprise-grade applications.
• Experience working in Agile/Scrum environments.
• Experience with production-grade Azure-hosted applications.

Required Technical Stack

Core Technologies

• C# / .NET Core / .NET 6+ (most new work on .NET 8 LTS)
• ASP.NET Core Web API
• Entity Framework and/or other ORM tools
• SQL Server (advanced querying and performance tuning mindset)

API & Integration

• RESTful APIs
• Data exchange: JSON / XML
• API auth: JWT, OAuth2, identity integration (Entra ID)

Cloud & DevOps

• Microsoft Azure (App Services, Storage, Functions)
• Azure DevOps (CI/CD pipelines)
• Git

Security

• OWASP Top 10 awareness
• Secure coding best practices
• RBAC implementation patterns

Testing

• xUnit / NUnit / MSTest
• Mocking frameworks
• Unit + integration testing practices

Technical Awareness

• Microservices architecture basics
• Logging/monitoring tools (Application Insights, Serilog, etc.)
• Docker basics (preferred)
• CI/CD best practices
• Performance profiling techniques

Core Competencies

Technical

• Strong problem solving and analytical skills
• Code optimization and debugging expertise
• Understanding of system design principles
• Secure development mindset

Behavioral

• Accountability and ownership
• Structured thinking
• Attention to detail
• Ability to work under pressure
• Clear communication with technical and non-technical stakeholders
• Continuous learning mindset

Maturity / Level Expectations

• Lead technical modules and drive them to completion.
• Mentor less experienced engineers when needed.
• Participate in design discussions and contribute improvements.
• Review critical code changes and uphold engineering standards.

Recommended Certifications (Nice-to-have)

• AZ-204 (Azure Developer Associate)
• AZ-900 (Azure Fundamentals)
• Secure coding / OWASP training
• Microsoft security certifications (optional)

Interview Process

1. 20–30 min intro call
2. Technical interview (system design + deep .NET/API/SQL + security mindset)
3. Final discussion + offer