Modern, Secure, and Compliant Portal

Looking for a team to help build a modern, secure, and highly intuitive portal ecosystem. This is a bid for 1st phase of the portal development - PHASE 1 - MVP. This phase includes the following to be delivered in 30 days: 1. Audit of existing portal and its capabilities to see what can be re-used - goal is to minimize changes 2. Security Hardening & SOC 2 Type I Foundation 3. Authentication, RBAC & Project Entitlements 4. Dashboard Links (Per-Client Controlled Access) 5. Feasibility Request Form (Lightweight Foundation) 6. Portal Shell & Navigation 7. Admin Panel & Audit Log The scope can change depending on the results of the audit and we may add additional requirements if existing functionality is sufficient to meet the long-term needs of the portal, as long as, overall work stays within the 30-day time frame. Detailed requirements will be shared upon hire and are not listed here. Payment Milestones are as follows: Milestone 1.1: Data Model, Auth & Security Foundation Deliverables: Codebase audit report submitted and approved. Proposed data model (all entities including ProjectEntitlement, FeasibilityRequest, DashboardAssignment) submitted and approved in writing before code is written. Authentication system with cookie-based auth, MFA for internal roles. Two-layer RBAC + project entitlement enforcement. Security hardening complete (HTTPS, CSP, OWASP scan clean, secrets in vault). Multi-tenant isolation regression-tested and verified. EF Core schema migrations. Audit log framework live. Payment gate: Payment 1 released on client written acceptance of Milestone 1.1 Milestone 1.2: Dashboard Links, Admin Panel & Feasibility Form Deliverables: Per-client dashboard link access: PM assigns links to projects, clients see only their entitled dashboards. Admin panel: user management, role assignment, entitlement management, dashboard management. Feasibility request form: all fields, inline insight, submission to FeasibilityRequest table, email notification to Feasibility Team. Branded portal shell and role-gated navigation for all roles. Payment gate: Payment 2 released on client written acceptance of Milestone 1.2 Milestone 1.3: Hardening, Penetration Test & Phase 1 Launch Deliverables: External or internal penetration test completed and all critical/high findings remediated. Load testing at 500 concurrent sessions. Full regression suite passing. SOC 2 Type I controls documented and reviewed with auditor. Full UAT with client stakeholders. Go-live deployment. Post-launch stabilization period (duration to be agreed in contract). Payment gate: Payment 3 released on go-live sign-off and completion of stabilization period We need a developer, tester, and a project manager who can bridge the gap between enterprise security and design excellence using ASP.NET Core Razor Pages. For this project, you will architect the Single Sign-On (SSO) experience and a secure portal that meets SOC2 requirements, help migrate dashboards to the new portal, and create work flows. There maybe need to integrate BI visualizations, and ensure the entire application is secure, fast, and user-friendly. Tech Stack (What You Will Use) Category Technologies Front-End / UI Razor Pages, Bootstrap 5, HTML5/CSS3, JavaScript (Vanilla/Chart.js), jQuery (legacy support) Back-End ASP.NET Core 8/9, C#, RESTful Web APIs, Entity Framework Core Security OIDC, OAuth 2.0, Auth0, Cookie Authentication, JWT What You Bring (Requirements) Must-Haves (Hard Skills) • 5+ years professional experience with .NET / C# and ASP.NET Core. • 3+ years building applications with Razor Pages (or MVC with heavy view logic). • Expert level with Bootstrap 5 (custom theming, grid system, utility classes, responsive design). • Proven experience building SSO into an ASP.NET Core application. • Experience building data entry forms with server-side validation (ModelState, ValidationAttribute). • Proficiency with Entity Framework Core (or similar ORM) and SQL. Nice-to-Haves (Bonus Skills) • UI Design Sensibility: You know when spacing, alignment, or color contrast is off, even if you're not a graphic designer. • BI Integration: Experience embedding Power BI reports or creating custom interactive charts. • Authorization: Deep understanding of claims-based and policy-based authorization in ASP.NET Core. • Testing: Experience writing unit tests for Razor Page handlers. • Project Management: Experience managing complex projects.