Staff Software Engineer, Athelas

• 5+ years of professional software engineering experience, building and operating production backend systems
• Strong experience building authentication and authorization systems, including OAuth 2.0, OpenID Connect (OIDC), JWTs, session management, service-to-service authentication, RBAC, ABAC, and policy-based authorization
• Strong understanding of application security fundamentals, including trust boundaries, identity propagation, secure API design, and secure software development practices
• Experience developing backend distributed systems using modern APIs, databases, caching, asynchronous processing, and cloud-native architectures
• Experience building and operating production services in Kubernetes or similar containerized environments
• Experience with CI/CD pipelines, observability, production monitoring, and operational best practices
• Strong programming skills in one or more backend languages such as Python or Go
• Excellent debugging, problem-solving, and communication skills with the ability to work effectively across multiple engineering teams
• A strong sense of ownership and a desire to build secure, reliable, and maintainable software

Desirable

• The Identity Platform team, within the broader Frameworks organization, builds and operates the foundational infrastructure that secures and enables every Commure + Athelas product and service
• The team owns the company’s authentication and authorization platform, including user identity, service-to-service authentication, authorization policy enforcement, token management, identity integrations, and shared security libraries that enable every engineering team to build secure software by default
• The team also owns the Commure Agent Platform, which provides the foundational runtime, orchestration, and shared capabilities for building and operating AI agents across the company
• As a Senior Software Engineer, you will design, build, and operate secure, scalable, and highly reliable authentication and authorization systems that protect millions of sensitive healthcare workflows
• You will also contribute to the evolution of our Agentic Security platform, helping ensure AI agents authenticate securely, receive only the permissions they require, operate within clearly defined trust boundaries, and safely access enterprise data and services
• While your primary focus will be identity and access management, you will also contribute to the broader Frameworks organization by improving shared engineering infrastructure, developer productivity, application performance, operational reliability, AI platform capabilities, database migration tooling, and reusable platform services used across the company
• This is a highly technical, hands-on role where you will work across application, platform, infrastructure, AI, and security teams to solve complex distributed systems challenges
• You will help build reusable platform capabilities, improve security by default, and enable engineering teams across the company to develop secure, reliable, and scalable software
• Design, build, and maintain the company’s authentication and authorization platform
• Build secure identity systems supporting OAuth 2.0, OpenID Connect (OIDC), JWTs, session management, workload identity, service-to-service authentication, API security, and token lifecycle management
• Implement scalable authorization models using RBAC, ABAC, policy-based authorization, and fine-grained access control
• Build reusable authentication and authorization services, SDKs, middleware, and shared libraries used across multiple engineering teams
• Help build our Agentic Security platform, including secure AI agent identity, delegated authorization, policy enforcement, tool permissions, and secure access to enterprise data and services
• Integrate with enterprise identity providers and customer SSO solutions
• Partner with Platform, Infrastructure, Security, and Product Engineering teams to strengthen the company’s security posture
• Contribute to shared platform services, developer frameworks, and reusable engineering infrastructure
• Improve application performance, scalability, and operational reliability across platform services
• Build tooling that improves developer productivity, including CI/CD, local development, testing, and platform automation
• Improve observability through monitoring, logging, tracing, dashboards, and alerting
• Contribute to foundational platform initiatives such as the Commure Agent Platform, database migration framework, and other shared engineering services
• Participate in architecture discussions, technical design reviews, and production incident response
• Mentor junior engineers and contribute to a culture of engineering excellence through thoughtful code reviews and technical collaboration