Staff Software Engineer, Frameworks

What You’ll Do

• Own and evolve the architecture of authentication and authorization systems used across multiple products and services.
• Design and build secure identity workflows, including OAuth 2.0/OIDC flows, token issuance and validation, session management, service-to-service authentication, and fine-grained authorization.
• Lead the design and evolution of shared platform services and reusable engineering patterns, enabling teams to build and operate microservices consistently and safely.
• Drive improvements to application performance and scalability, identifying systemic bottlenecks across APIs, databases, caching layers, middleware, and distributed service interactions.
• Improve developer productivity and experience through faster CI/CD workflows, reusable service tooling, test infrastructure, local development environments, and self-service platform capabilities.
• Establish strong standards for observability and operational readiness, including monitoring, logging, distributed tracing, dashboards, alerting, SLOs, and safe production rollouts.
• Partner closely with platform and product teams to protect sensitive customer data, strengthen security boundaries, and meet regulatory and compliance requirements.
• Lead complex technical initiatives that span multiple systems and teams, from architecture and design through implementation, migration, rollout, and production operations.
• Make pragmatic technical decisions that balance security, correctness, reliability, performance, simplicity, and delivery velocity.
• Mentor Senior and other Staff engineers, lead architecture and design reviews, and raise the technical bar through clear technical direction, high-quality engineering practices, and thoughtful feedback.
• Operate with strong end-to-end ownership in a fast-moving environment, proactively identifying systemic risks and driving durable solutions rather than local fixes.

What You Have

Required

• 8+ years of software engineering experience, with a strong track record of designing, building, and operating complex production systems at scale.
• Strong experience with authentication and authorization systems, including practical knowledge of OAuth 2.0, OIDC, JWTs, session and token management, service-to-service authentication, RBAC, ABAC, and policy-based authorization.
• Deep expertise in backend and distributed systems, including service architecture, APIs, databases, caching, asynchronous processing, and cloud-native systems.
• Strong technical judgment and security fundamentals, with the ability to reason about trust boundaries, identity propagation, least privilege, failure modes, and secure-by-default system design, while balancing security, reliability, performance, simplicity, and delivery velocity.
• Experience leading large, multi-component technical initiatives across team boundaries, from architecture and design through implementation, migration, rollout, and production operations.
• A strong operational and platform mindset, with experience in areas such as Kubernetes, infrastructure as code, observability, CI/CD, safe migrations, incremental rollouts, and production reliability.
• Demonstrated ability to influence and multiply the effectiveness of other engineers through technical leadership, architecture reviews, clear communication, mentorship, and reusable frameworks and tooling.
• A high degree of ownership and curiosity: you are comfortable moving between architecture and implementation, diving deeply into unfamiliar systems when necessary, and staying accountable for end-to-end outcomes.

Preferred

• Experience building centralized identity, authentication, or authorization platforms used across multiple products or engineering teams.
• Experience with technologies in our ecosystem, including AWS Cognito, Python, FastAPI, Pydantic, PostgreSQL, Go, Kubernetes, and cloud-native infrastructure.
• Experience mentoring engineers and leveling up an engineering organization.
• Knowledge of healthcare security and compliance standards (HIPAA, SOC 2).