| Backend Development | C#, ASP.NET MVC, ASP.NET Web API, .NET Framework 4.x, REST APIs | Must |
| Architecture | Enterprise application architecture, scalable architecture, SOLID, design patterns, clean architecture, technical design | Must |
| Database | SQL Server, database design, queries, migrations, data transformation | Must |
| Authentication | Authentication, authorization, password management, password reset, password history, session management | Must |
| Password Security | bcrypt, Argon2id, password migration, lazy re-hashing, random salt generation | Must |
| Cryptography | RSA, AES/symmetric encryption, hashing, encryption/decryption, key rotation, secure key management | Must |
| Azure Security | Azure Key Vault, keys, secrets, Managed Identity, RBAC/access control | Must |
| API Security | Secure APIs, rate limiting, secure error handling, sensitive-data protection | Must |
| Application Security | OWASP, secure coding, vulnerability remediation, security reviews | Must |
| Secure Cookies | Secure, HttpOnly, SameSite, session security | Must |
| DevOps | Azure DevOps, Git, CI/CD, repository security | Must |
| Code Quality | SonarQube, static code analysis, code review, dependency/vulnerability scanning | Must |
| Observability | Application Insights, Azure Monitor, structured logging, security-event logging, correlation IDs | Must |
| Reliability | Retry policies, timeout handling, circuit breaker concepts, dependency failure handling, resilience | Must |
| Messaging | Dead-letter queues / asynchronous failure handling | Preferred |
| Testing | Unit testing, integration testing, API testing, performance testing | Must |
| Performance | Authentication/API performance testing and optimization | Must |
| Cloud | Azure services, application hosting, secure configuration | Must |
| AI Development | GitHub Copilot, Claude Code, AI-assisted coding, specification-driven development | Must |
| AI Architecture | AI agents, MCP, AI orchestration, Microsoft AI ecosystem | Preferred |