Principal .NET Full Stack Engineer

Principal .
NET Full Stack Engineer

Location:
Latin America preferred; Start: ASAP Employer: Kanda Software (www.kandasoft.com) Long term, full-time, remote job Security requirements
• The engineer will use an SRS-provided PC with Microsoft security settings.
• The engineer will undergo a criminal background check prior to engagement.
• The engineer will complete annual SRS HITRUST training.
• The engineer will participate in a virtual assessment of home-office security and provide screenshots of home-network settings. Communication

skills:
C1 Advanced or Fluent English. Role overview SRS Medical is seeking a hands-on Principal .
NET Full Stack Engineer to provide technical leadership for a clinical medical decision-support platform used with diagnostic instruments in hospital and surgical-center environments. The platform combines a cloud-hosted, multi-tenant Azure web application with Windows-based instrument software and a replication service that securely transfers completed diagnostic studies to the cloud. The ideal candidate is a senior technical leader who can shape architecture, guide implementation, improve reliability and security, and work across ASP.
NET applications, Windows Services, Azure infrastructure, PowerShell automation, security remediation, and production support in a regulated medical-device environment. This role requires strong experience in digital health, clinical software, medical devices, EHR-connected workflows, or other PHI-sensitive healthcare systems. The engineer should understand how clinical users, site administrators, support teams, and regulated release processes affect technical design and operational decisions. Responsibilities
• Provide principal-level technical leadership for full-stack C#/.
NET and ASP.
NET applications, including the primary clinical application and administrative/user-management applications.
• Define and evolve application, integration, security, data, and deployment architecture in collaboration with SRS Medical’s technical lead and product stakeholders.
• Lead design reviews, technical decision-making, architecture documentation, and implementation standards for a multi-tenant clinical platform.
• Develop and support Windows desktop-side components, including Windows Services and replication/agent software running on instrument-connected all-in-one Windows PCs.
• Improve secure and reliable synchronization of diagnostic-study data from local instruments to Azure-hosted services, including monitoring, error handling, retries, logging, and investigation of failed replications.
• Work with an Azure-hosted, multi-tenant architecture in which each client has an isolated database and hierarchical client, site, instrument, and user-access relationships.
• Build and maintain secure APIs, data-processing workflows, and integrations that support EHR-connected customers and clinical workflows.
• Implement and maintain authentication, authorization, role-based access, data separation, PHI redaction, auditability, and least-privilege controls appropriate for clinical users, site administrators, analysts, and internal support personnel.
• Create, improve, and maintain PowerShell scripts used for deployments, environment management, operational automation, and infrastructure-related tasks.
• Contribute to CI/CD workflows using GitHub Actions, Git branching, pull requests, release processes, and Jira-based work tracking.
• Diagnose and resolve complex production, desktop, deployment, integration, database, and cloud-infrastructure issues.
• Lead security remediation, including addressing vulnerability findings, supporting OWASP ZAP testing, and assisting with Azure/Microsoft Defender for Cloud, firewall, database, and configuration improvements.
• Write maintainable, well-tested code and establish engineering standards for unit, integration, and regression testing.
• Collaborate with QA on manual checklist-based testing, regression testing, release candidates, and Selenium test-automation efforts.
• Mentor engineers, review pull requests, improve development practices, and help the team deliver reliable software in a regulated healthcare environment.
• Produce clear technical notes in Jira and communicate effectively with a small, technically involved U.
S. client team. Required qualifications
• 10+ years of professional software-development experience, including principal, staff, lead, or senior-architecture-level ownership of production systems.
• Strong C# and .
NET / ASP.
NET development experience, including modern backend application design, RESTful APIs, authentication/authorization, and relational database integration.
• Demonstrated experience defining or significantly influencing architecture for cloud-hosted, multi-tenant, distributed, or mission-critical applications.
• Full-stack web-development experience with server-rendered ASP.
NET applications and/or modern .
NET web UI technologies.
• Demonstrated experience building, maintaining, or troubleshooting Windows Services, background agents, desktop-side integrations, or Windows-based client applications.
• Practical Azure experience, including application hosting, databases, networking, security configuration, monitoring, secrets/certificates, and production troubleshooting.
• Strong PowerShell scripting experience for Windows automation, deployment, environment setup, operational support, or infrastructure maintenance.
• Experience with certificate-based authentication, secure device/service communication, and Windows/network troubleshooting.
• Proficiency with GitHub, pull-request workflows, branching strategies, GitHub Actions or comparable CI/CD tooling, and Jira.
• Experience with SQL databases and designing data access, tenant isolation, and authorization models for multi-tenant systems.
• Strong debugging and problem-solving ability across cloud, backend, web, desktop, service, and integration layers.
• Experience in digital health, medical devices, clinical software, EHR integrations, HIPAA-regulated environments, or systems handling PHI.
• Excellent spoken and written English, with the ability to work directly with U.
S.-based technical, clinical, and compliance stakeholders. Preferred qualifications
• Experience as a principal engineer, software architect, technical lead, or staff engineer on healthcare, medical-device, clinical decision-support, diagnostics, or life-sciences platforms.
• Experience developing data replication, synchronization, offline-capable, device-connected, or telemetry-style applications.
• Familiarity with device provisioning, MAC-address/device identity patterns, X.509 certificates, and secure endpoint registration.
• Experience with Azure Defender for Cloud / Microsoft Defender for Cloud, OWASP ZAP, secure SDLC practices, penetration-test remediation, and vulnerability management.
• Experience with Selenium or other browser test-automation frameworks.
• Familiarity with regulated software-development practices, formal regression testing, traceability, engineering-change processes, design controls, risk management, or medical-device quality systems.
• Familiarity with clinical workflows, diagnostic instruments, hospital or surgical-center environments, EHR interoperability, HL7/FHIR, or healthcare data standards.
• Azure DevOps, infrastructure automation, or DevOps experience beyond the core development role. Candidate profile The strongest candidate will be a pragmatic principal-level engineer who can move comfortably between an Azure-hosted clinical web platform and Windows-based software deployed alongside physical diagnostic instruments. They should be able to own ambiguous technical problems, make sound architecture decisions, improve reliability and security, mentor other engineers, and work within a disciplined release and testing process. This is not primarily an AI/algorithm-development role. SRS Medical expects to retain ownership of its clinical recommendation engine in-house; however, the engineer must be able to integrate with, support, and troubleshoot the surrounding clinical workflows and services.