Staff Software Engineer, Frameworks

About the role

Commure is developing an AI operating system for the healthcare industry to manage documentation, patient workflows, and revenue cycle processing. As a Staff Engineer on the Frameworks team, you will design the core systems and developer tools that support our entire engineering organization.

Key facts

What you'll do

• Architect and maintain authentication and authorization systems across the platform.
• Build secure identity workflows including OIDC, OAuth 2.0, token management, and RBAC/ABAC policies.
• Develop shared platform services and reusable patterns to standardize microservice operations.
• Optimize system performance by addressing bottlenecks in APIs, databases, and distributed service layers.
• Enhance developer velocity through improved CI/CD pipelines, local tooling, and test infrastructure.
• Define standards for observability, including distributed tracing, logging, alerting, and SLO monitoring.
• Collaborate with product and security teams to ensure compliance and protect sensitive patient data.
• Mentor senior engineering staff and guide technical strategy through architecture reviews.

Requirements

• 8+ years of professional software engineering experience building large-scale production systems.
• Hands-on experience with authentication protocols like OAuth 2.0, OIDC, and JWTs.
• Proficiency in distributed systems, backend service architecture, and database design.
• Ability to manage security boundaries, identity propagation, and least-privilege access models.
• Proven track record of leading complex technical projects across multiple teams.
• Experience with operational tooling including Kubernetes, CI/CD, and infrastructure as code.
• Demonstrated ability to influence engineering practices and mentor technical teams.

Nice to have

• Background in building centralized identity or authorization platforms.
• Familiarity with the Commure tech stack: Python, FastAPI, Pydantic, PostgreSQL, Go, AWS Cognito, and Kubernetes.
• Experience with healthcare-specific security standards such as HIPAA and SOC 2.

Skills & tools

• Python, Go, FastAPI, Pydantic, PostgreSQL, AWS Cognito, Kubernetes, OAuth 2.0, OIDC, JWT, RBAC, ABAC, CI/CD, Distributed Systems.

Practical notes

• All official correspondence originates from @commure.com email addresses.
• Employees must adhere to information security policies, protect company assets, and complete annual security attestations.