Windows Kiosk Golf Simulator Developer

# Job Description — Windows Kiosk Application Developer
*Contract / Fixed-Scope Engagement*

---

## Engagement Details

| | |
|---|---|
| **Engagement Type** | Fixed-scope contract |
| **Estimated Duration** | 2–4 weeks |
| **Location** | Remote |
| **Tech Stack** | C#, WPF, .NET 8, MSIX, GitHub Actions |

---

## Overview

We are building a Windows kiosk application for indoor golf simulator bays. The application must restrict users to two approved apps — a custom WPF overlay and a third-party simulator — while preventing access to any other system functionality. The finished product must be distributed via the Microsoft Store.

This role covers the full Windows-side build: the kiosk lockdown overlay, system tray admin interface, watchdog service, MSIX packaging, Store submission, and CI/CD pipeline.

---

## Scope of Work

**1. WPF Fullscreen Kiosk Overlay**
- Fullscreen, topmost, borderless WPF window covering the desktop
- Intercept and block Win key, Alt+Tab, Ctrl+Esc, Win+R, Win+E and similar shortcuts via low-level keyboard hook (`SetWindowsHookEx`)
- Hide the Windows taskbar via Win32 API (`SetWindowPos` on taskbar HWND)
- Display session UI: bay status, start/stop simulator button, countdown timer
- Communicate with a REST backend to receive lock/unlock state per bay, get bay configuration, etc.
- Auto-lock failsafe: re-lock if backend is unreachable or session expires

**2. System Tray Admin Interface**
- Persistent system tray icon using `NotifyIcon` (visible even when overlay is active)
- PIN-protected context menu to disable kiosk mode for admin access (PIN obtained from REST API)
- Options to unlock bay, view current session, and restart simulator
- Settings panel for backend URL, bay ID, and PIN configuration

**3. Watchdog Windows Service**
- C# Windows Service that monitors the overlay process
- Automatically restarts the overlay if it crashes or is killed
- Starts on Windows boot; survives user session changes
- Logs events to the Windows Event Log

**4. MSIX Packaging & Windows Store Submission**
- Package the WPF app using a Windows Application Packaging Project in Visual Studio
- Declare Full Trust capability (`rescap:Capability Name="runFullTrust"`) in the manifest
- Sign the MSIX package using Azure Trusted Signing
- Prepare and submit the Store listing via Microsoft Partner Center
- Support the manual review process through to approval

**5. CI/CD Pipeline (GitHub Actions)**
- Automated build, test, and MSIX packaging on push to `main`
- Code signing via Azure Trusted Signing action
- Automated Store submission via Windows Store Submission API
- Automated version bumping on each release
- Secrets management for signing credentials and Partner Center API keys

---

## Technical Requirements

| | |
|---|---|
| **Language** | C# |
| **UI Framework** | WPF (.NET 8) |
| **Service** | C# Windows Service (.NET 8) |
| **Packaging** | MSIX via Windows Application Packaging Project |
| **Code Signing** | Azure Trusted Signing |
| **CI/CD** | GitHub Actions (windows-latest runner) |
| **Store** | Microsoft Store — Full Trust MSIX |
| **Backend Integration** | REST API over HTTPS |
| **Windows Version** | Windows 11 Pro or higher |

---

## Deliverables

- Working WPF kiosk overlay with fullscreen lockdown and keyboard hook
- System tray admin interface with PIN-protected unlock
- C# Windows Service watchdog with auto-restart
- MSIX package with Full Trust capability declared
- GitHub Actions CI/CD workflow file (build, sign, submit)
- Approved Microsoft Store listing (or submission in review)
- README documenting configuration, environment variables, and deployment steps

---

## Ideal Candidate

- Strong C# and WPF experience with .NET 8
- Proven experience with Win32 API interop (keyboard hooks, window manipulation)
- Experience packaging and publishing apps to the Microsoft Store via MSIX
- Familiarity with Azure Trusted Signing or equivalent EV certificate signing
- GitHub Actions CI/CD experience, particularly on Windows runners
- Bonus: experience with kiosk or enterprise lockdown applications
- Bonus: familiarity with Windows Group Policy for Task Manager / Ctrl+Alt+Del restrictions