MANTECH Software Engineer Interview Guide

The 60-second brief

As a Software Engineer at MANTECH, you will build and support critical software solutions that directly serve national security, defense, and federal enterprise operations. MANTECH operates at the intersection of technology and government mission fulfillment, delivering engineering expertise across cloud infrastructure, cyber operational platforms, low-level systems engineering, and enterprise software application support. In this role, your technical contributions directly affect mission readiness, system reliability, and critical data transport for defense agencies and intelligence partners. Whether you are modernizing legacy software, developing DevSecOps pipelines, engineering cloud solutions in Chantilly, VA, or analyzing low-level code in San Antonio, TX, your engineering work carries significant real-world responsibility.

This guide is scoped to a Software Engineer candidate at MANTECH.

Focus areas

• Pass-by-Value vs Pass-by-Reference
• Object-Oriented Programming (OOP)
• Java (language fundamentals)

The MANTECH interview process

MANTECH candidates report 3 rounds over 3-5 weeks. The stages below are what candidates describe, not a published process.

Phone Screening

Initial call with a recruiter to evaluate candidate's background and fit for the role.

What to demonstrate

• Initial call with a recruiter to evaluate candidate's background and fit for the role
• Depth in Pass-by-Value vs Pass-by-Reference

How to prepare

• Be able to walk your CV end to end in two minutes, and say why this company specifically.
• Have your salary expectations, notice period and location constraints ready, and ask for the rest of the loop in writing.

Technical Interviews

One or more interviews that may include coding challenges and problem-solving scenarios.

What to demonstrate

• One or more interviews that may include coding challenges and problem-solving scenarios
• Depth in Pass-by-Value vs Pass-by-Reference

How to prepare

• Answer aloud and timed: What are standard POSIX functions, and how do you handle low-level system calls in C or C++?
• Answer aloud and timed: How do Python data structures differ from basic C memory management primitives in terms of memory overhead and execution speed?

Onsite Interviews

In-depth discussions with team members and hiring managers, focusing on technical and behavioral questions.

What to demonstrate

• In-depth discussions with team members and hiring managers
• Focusing on technical and behavioral questions

How to prepare

• Answer aloud and timed: What considerations do you take into account when debugging compiled binaries or analyzing memory layouts?
• Answer aloud and timed: What is polymorphism in Java, and how do runtime and compile-time polymorphism differ?

Where candidates lose points

Review Your Resume Line-by-Line

MANTECH technical leads consistently build technical interview questions directly around the languages, tools, and databases listed on your resume. Be fully prepared to defend and explain any technical item you list.

Master Your Primary Language Fundamentals

Ensure you can easily explain core concepts such as polymorphism, memory allocation, and basic data structure implementations without hesitation during panel discussions.

Understand the Mission and Contract Context

Familiarize yourself with the general domain of the project team you are interviewing with. Showing awareness of defense mission requirements and software security standards makes a strong impression.

Treat Client Interactions with Care

If your interview process includes meeting a client or customer representative, maintain a polished, professional demeanor. Client feedback often carries significant weight in final hiring decisions.

Questions & practice

How are arguments passed using various calling conventions on the stack, and how do stack frames function?

Medium · Low-Level & Systems Programming

Approach

1. Say what the runtime actually does before reasoning about the code.
2. Name what is shared across threads and what owns each piece of state.
3. Identify the window where an invariant is briefly untrue.
4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

• What happens if two callers reach this at the same time?
• Where could this allocate more than you expect?

Can you explain the role and usage of general-purpose x86 assembly registers during software execution?

Medium · Low-Level & Systems Programming

Approach

1. Say what the runtime actually does before reasoning about the code.
2. Name what is shared across threads and what owns each piece of state.
3. Identify the window where an invariant is briefly untrue.
4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

• What happens if two callers reach this at the same time?
• Where could this allocate more than you expect?

How do Python data structures differ from basic C memory management primitives in terms of memory overhead and

Medium · Low-Level & Systems Programming

How do Python data structures differ from basic C memory management primitives in terms of memory overhead and execution speed?

Approach

1. Say what the runtime actually does before reasoning about the code.
2. Name what is shared across threads and what owns each piece of state.
3. Identify the window where an invariant is briefly untrue.
4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

• What happens if two callers reach this at the same time?
• Where could this allocate more than you expect?

What considerations do you take into account when debugging compiled binaries or analyzing memory layouts?

Medium · Low-Level & Systems Programming

Approach

1. Say what the runtime actually does before reasoning about the code.
2. Name what is shared across threads and what owns each piece of state.
3. Identify the window where an invariant is briefly untrue.
4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

• What happens if two callers reach this at the same time?
• Where could this allocate more than you expect?

What is polymorphism in Java, and how do runtime and compile-time polymorphism differ?

Medium · Object-Oriented & Core Language Fundamen

Approach

1. Say what the runtime actually does before reasoning about the code.
2. Name what is shared across threads and what owns each piece of state.
3. Identify the window where an invariant is briefly untrue.
4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

• What happens if two callers reach this at the same time?
• Where could this allocate more than you expect?

How would you implement a binary search on a sorted array, and what parameters are required to maintain optima

Medium · Object-Oriented & Core Language Fundamen

How would you implement a binary search on a sorted array, and what parameters are required to maintain optimal algorithm complexity?

Approach

1. Restate the input: its shape, its size, and what is guaranteed about it.
2. Name the brute-force solution and its complexity before improving on it.
3. Choose the data structure from the access pattern, not from familiarity.
4. State the target complexity and say which constraint rules the naive version out.

Follow-up

• How does this change if the input no longer fits in memory?
• What is the worst case, and how likely is it on real data?

Explain the difference between an abstract class and an interface, and describe when you would choose one over

Medium · Object-Oriented & Core Language Fundamen

Explain the difference between an abstract class and an interface, and describe when you would choose one over the other.

Approach

1. Say what the runtime actually does before reasoning about the code.
2. Name what is shared across threads and what owns each piece of state.
3. Identify the window where an invariant is briefly untrue.
4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

• What happens if two callers reach this at the same time?
• Where could this allocate more than you expect?

How do basic collection types work under the hood in languages like Python or Java?

Medium · Object-Oriented & Core Language Fundamen

Approach

1. Say what the runtime actually does before reasoning about the code.
2. Name what is shared across threads and what owns each piece of state.
3. Identify the window where an invariant is briefly untrue.
4. Distinguish a value from a reference to it, and say which one you handed out.

Follow-up

• What happens if two callers reach this at the same time?
• Where could this allocate more than you expect?

Write a program to search for a target value in an array and explain the time complexity of both linear and bi

Medium · Object-Oriented & Core Language Fundamen

Write a program to search for a target value in an array and explain the time complexity of both linear and binary search approaches.

Approach

1. Restate the input: its shape, its size, and what is guaranteed about it.
2. Name the brute-force solution and its complexity before improving on it.
3. Choose the data structure from the access pattern, not from familiarity.
4. State the target complexity and say which constraint rules the naive version out.

Follow-up

• How does this change if the input no longer fits in memory?
• What is the worst case, and how likely is it on real data?

What is the difference between an INNER JOIN and an OUTER JOIN in SQL, and how do left and right outer joi

Medium · Databases & Network Protocols

What is the difference between an INNER JOIN and an OUTER JOIN in SQL, and how do left and right outer joins differ?

Approach

1. Name the grain you start from and join outward from it.
2. Check whether any join is one-to-many before aggregating, or the sums inflate.
3. Say which index the query would use, and what makes it unusable.
4. Handle the rows that do not match: that is usually the actual question.

Follow-up

• How does the query change if that join becomes one-to-many?
• What happens to this when the table is ten times larger?

Keep soft-deleted accounts from blocking re-registration

Easy · soft delete · unique constraints · engine differences

app_user holds user_id, tenant_id, email CITEXT, password_hash (NULL for SSO principals), email_verified_at, auth_version, status ('invited','active','suspended','deactivated'), created_at, updated_at, deleted_at. Two live accounts for one address inside a tenant must be impossible, but an address freed by a soft delete must be reusable, and the same tenant may delete and re-register it repeatedly. Write the uniqueness DDL for PostgreSQL 16, then the equivalent for MySQL 8 where partial indexes do not exist, and say what each permits once three deleted rows already hold that address.

Approach

1. Start from what is actually unique: not (tenant_id, email), but (tenant_id, email) among live rows. PostgreSQL says that directly — CREATE UNIQUE INDEX app_user_live_email ON app_user (tenant_id, email) WHERE deleted_at IS NULL. A full constraint over the same two columns burns the address permanently the first time someone deletes an account.
2. Keep case-insensitivity in the type or the index, never in the application: CITEXT as given, or UNIQUE (tenant_id, lower(email)) as an expression index where the extension is unavailable. A case-sensitive unique column is exactly how two accounts for one human appear.
3. For MySQL 8 the predicate has to move inside the key: add a discriminator column that is a constant 0 while the row is live and is set to user_id on delete, with UNIQUE (tenant_id, email, deleted_marker). Live rows share the constant and still collide; deleted rows differ from each other and stop colliding.
4. State the NULL variant and its dependency: leaving the marker NULL for deleted rows also works, because a unique index treats NULLs as distinct — true in MySQL, and true in PostgreSQL only under the default NULLS DISTINCT, which PostgreSQL 15 lets you reverse. Check the polarity against the three existing deleted rows: constant-on-live is what preserves the collision you want, and reversing it silently admits duplicate live accounts.

Follow-up

• A deleted account re-registers with the same address the next day. Do the old resource rows follow the new user_id, and how does the API keep the two principals apart?
• How do you honour an erasure request while resource_revision.actor_user_id still references this table?

Walk us through the end-to-end process and protocol interactions that occur when a user opens a web page in a

Medium · Databases & Network Protocols

Walk us through the end-to-end process and protocol interactions that occur when a user opens a web page in a web browser.

Approach

1. Clarify what is being asked and what a complete answer contains.
2. State your assumptions explicitly before working the problem.
3. Say what you would check first and why it is the highest-information step.
4. Work from the requirement backwards to the design.

Follow-up

• What assumption would you test first?
• How would you know your answer was wrong?

How do TCP and UDP differ in transport behavior, and when is each protocol preferred in mission systems?

Medium · Databases & Network Protocols

Approach

1. Clarify what is being asked and what a complete answer contains.
2. State your assumptions explicitly before working the problem.
3. Say what you would check first and why it is the highest-information step.
4. Work from the requirement backwards to the design.

Follow-up

• What assumption would you test first?
• How would you know your answer was wrong?

How do you design applications to interface efficiently with enterprise relational databases like Oracle 11G o

Medium · Databases & Network Protocols

How do you design applications to interface efficiently with enterprise relational databases like Oracle 11G or SQL databases?

Approach

1. Fix the scope first: who calls this, how often, and what they do when it fails.
2. Name the read and write paths separately; they rarely have the same bottleneck.
3. Choose a partition key and say what query it makes expensive.
4. State the consistency you need, and where you are willing to be stale.

Follow-up

• What breaks first when traffic grows ten times?
• How does this behave when that dependency is down for an hour?

What key network protocols are involved in establishing secure communication links across restricted networks?

Medium · Databases & Network Protocols

Approach

1. Clarify what is being asked and what a complete answer contains.
2. State your assumptions explicitly before working the problem.
3. Say what you would check first and why it is the highest-information step.
4. Work from the requirement backwards to the design.

Follow-up

• What assumption would you test first?
• How would you know your answer was wrong?

How do you approach gathering application requirements from non-technical stakeholders to improve the end-user

Medium · Application Support & Project Requiremen

How do you approach gathering application requirements from non-technical stakeholders to improve the end-user experience?

Approach

1. Clarify what is being asked and what a complete answer contains.
2. State your assumptions explicitly before working the problem.
3. Say what you would check first and why it is the highest-information step.
4. Work from the requirement backwards to the design.

Follow-up

• What assumption would you test first?
• How would you know your answer was wrong?

Describe your hands-on experience using frameworks or specialized enterprise platforms such as Pega or Service

Medium · Application Support & Project Requiremen

Describe your hands-on experience using frameworks or specialized enterprise platforms such as Pega or ServiceNow.

Approach

1. Clarify what is being asked and what a complete answer contains.
2. State your assumptions explicitly before working the problem.
3. Say what you would check first and why it is the highest-information step.
4. Work from the requirement backwards to the design.

Follow-up

• What assumption would you test first?
• How would you know your answer was wrong?

Walk us through a complex project on your resume, detailing your specific contributions, architecture decision

Medium · Application Support & Project Requiremen

Walk us through a complex project on your resume, detailing your specific contributions, architecture decisions, and challenges overcome.

Approach

1. Fix the scope first: who calls this, how often, and what they do when it fails.
2. Name the read and write paths separately; they rarely have the same bottleneck.
3. Choose a partition key and say what query it makes expensive.
4. State the consistency you need, and where you are willing to be stale.

Follow-up

• What breaks first when traffic grows ten times?
• How does this behave when that dependency is down for an hour?

How do you balance software development speed with continuous testing, DevSecOps compliance, and documentation

Medium · Application Support & Project Requiremen

How do you balance software development speed with continuous testing, DevSecOps compliance, and documentation?

Approach

1. Clarify what is being asked and what a complete answer contains.
2. State your assumptions explicitly before working the problem.
3. Say what you would check first and why it is the highest-information step.
4. Work from the requirement backwards to the design.

Follow-up

• What assumption would you test first?
• How would you know your answer was wrong?

One customer endpoint stalls deliveries to every other destination

Medium · bulkhead · timeouts · saturation

The egress service delivers about 1.5k webhooks/second across 40,000 destinations, with a per-destination concurrency cap of 4 and a 10-second connect-plus-read timeout. Throughput falls to 300/second, queue depth climbs, and p99 delivery latency for unaffected destinations goes from 200 ms to minutes, while the error rate barely moves. One tenant holds 900 destination rows whose URLs share a hostname that now answers in 9.5 seconds. Explain the mechanism with the arithmetic, then give the containment in the order you would apply it.

Approach

1. Look at saturation before errors. A flat error rate with collapsing throughput says nothing is failing, things are waiting, so the first signal to pull is in-flight request count or pool wait time rather than the error counter. This is the distinction that decides the whole investigation.
2. Group in-flight work by resolved host, not by destination id. The cap is keyed per destination row, so 900 rows sharing one hostname buy 3,600 concurrent slots against a single host, each held for 9.5 seconds. The bulkhead was never a bulkhead for that host, and grouping by the wrong dimension is why the dashboard looked healthy.
3. Do the arithmetic in both directions. Required concurrency is arrival rate times latency, so 1.5k/second at 200 ms needs about 300 in flight, which is entirely consumed by 3,600 slow slots; conversely whatever concurrency is left sustains rate equals concurrency divided by 9.5 seconds, which is the 300/second you are seeing. Matching both numbers is what promotes this from a plausible story to the mechanism.
4. Explain why the circuit breaker never helped. It opens on consecutive failures, and a 9.5-second response inside a 10-second timeout is a success. Slow is not failing, so an error-rate breaker cannot see this; you need a slow-call ratio, a deadline propagated from the caller's remaining budget, or a concurrency limiter.

Follow-up

• The host recovers to 80 ms. How long does the queue take to drain, and what does the drain do to the recovered host?
• Where should the 10-second timeout number actually come from?

Suggested practice checklist

Built from the rounds and topics MANTECH candidates report.

Day 1 — Map the MANTECH loop

• Write out the reported sequence: Phone Screening, Technical Interviews, Onsite Interviews.
• For each round, write one sentence on what it is judging, from the description above, and mark the one you are least ready for.

Deliverable: A one-page map of the 3 reported rounds, with the weakest marked.

Day 2 — Work Pass-by-Value vs Pass-by-Reference

• Spend the session on Pass-by-Value vs Pass-by-Reference, which MANTECH candidates report being tested on.
• Write one worked example in Pass-by-Value vs Pass-by-Reference and time yourself on it.

Deliverable: One timed worked example in Pass-by-Value vs Pass-by-Reference.

Day 3 — Work Object-Oriented Programming (OOP)

• Spend the session on Object-Oriented Programming (OOP), which MANTECH candidates report being tested on.
• Write one worked example in Object-Oriented Programming (OOP) and time yourself on it.

Deliverable: One timed worked example in Object-Oriented Programming (OOP).

Day 4 — Work Java (language fundamentals)

• Spend the session on Java (language fundamentals), which MANTECH candidates report being tested on.
• Write one worked example in Java (language fundamentals) and time yourself on it.

Deliverable: One timed worked example in Java (language fundamentals).

Day 5 — Answer out loud: Low-Level & Systems Programming

• Answer aloud, timed: How are arguments passed using various calling conventions on the stack, and how do stack frames function?
• Answer aloud, timed: Can you explain the role and usage of general-purpose x86 assembly registers during software execution?

Deliverable: Spoken answers to 2 reported Low-Level & Systems Programming question(s), under time.

Day 6 — Answer out loud: Object-Oriented & Core Language Fundamentals

• Answer aloud, timed: What is polymorphism in Java, and how do runtime and compile-time polymorphism differ?
• Answer aloud, timed: How would you implement a binary search on a sorted array, and what parameters are required to maintain optimal algorithm complexity?

Deliverable: Spoken answers to 2 reported Object-Oriented & Core Language Fundamentals question(s), under time.

Day 7 — Answer out loud: Databases & Network Protocols

• Answer aloud, timed: What is the difference between an INNER JOIN and an OUTER JOIN in SQL, and how do left and right outer joins differ?
• Answer aloud, timed: Walk us through the end-to-end process and protocol interactions that occur when a user opens a web page in a web browser.

Deliverable: Spoken answers to 2 reported Databases & Network Protocols question(s), under time.

Behavioural preparation

Behavioural rounds judge the decision you made and what it cost.

What are standard POSIX functions, and how do you handle low-level system calls in C or C++?

Medium · Low-Level & Systems Programming

Approach

1. Pick a story where you made the decision, not one where you watched it.
2. State the situation in two sentences and spend the rest on the reasoning.
3. Give the blast radius: what could have broken, and what you measured.
4. Name the disagreement and how you resolved it with evidence.

Follow-up

• What would you do differently if you ran that again?
• How did you know your change caused the improvement?

How do you handle a scenario where client requirements change mid-way through a development sprint?

Medium · Application Support & Project Requiremen

Approach

1. Pick a story where you made the decision, not one where you watched it.
2. State the situation in two sentences and spend the rest on the reasoning.
3. Give the blast radius: what could have broken, and what you measured.
4. Name the disagreement and how you resolved it with evidence.

Follow-up

• What would you do differently if you ran that again?
• How did you know your change caused the improvement?

Turn a code review disagreement into a decision

Easy · code review · optimistic concurrency · communication

A colleague's change updates a row with UPDATE resource SET version = version + 1 WHERE resource_id = $1 AND version = $2 and treats an affected-row count of zero as a successful no-op. You read that as a silently lost update; they think returning 200 is friendlier to clients than returning a conflict. Describe how you have handled a review disagreement of this shape: what goes in the comment, when you leave the thread, and who decides. Then write the comment you would leave here, in under 80 words.

Approach

1. Sort the disagreement before writing anything. A silently discarded write is a correctness claim about data; the choice between 409 and 412 is taste. Only the first justifies blocking a merge, and saying which one you are doing is most of the value of the comment.
2. Make the claim reproducible in the comment itself with an interleaving rather than a principle: A reads version 7, B reads version 7, B commits version 8, A's predicate matches zero rows, A is told it succeeded and A's edit is gone.
3. Offer the alternative with its cost attached: return 409 carrying the current version and the revision that won, so the client can re-read and re-apply. Note that automatic retry is not the fix, because a retry re-reads the winner's state and reapplies an intent formed against data that no longer exists.
4. Apply an escalation rule you can state: two round trips on the thread, then a call, and the service's owner decides rather than the reviewer. A reviewer who cannot be overruled is a bottleneck with extra steps.

Follow-up

• Where would you put the test that fails if someone reintroduces the swallowed zero rowcount?
• The author says clients cannot handle a 409. How do you check whether that is true?