API Security Developer - Hybrid or Remote

Position Overview

We are seeking an experienced API Security Developer to support enterprise interoperability and patient access initiatives within a large healthcare payer environment. This role will focus on identity and access management, API security modernization, and secure healthcare data integrations supporting FHIR-based interoperability solutions.

Key Responsibilities

• Support API security and identity modernization initiatives across enterprise healthcare applications
• Design, develop, and enhance secure authentication and authorization solutions
• Aid with migration activities from Okta to Auth0, including translation of security constructs and policies
• Refactor and modernize application authentication and authorization flows
• Implement and support OAuth 2.0 and OpenID Connect integrations, including PKCE, client credentials, ID tokens, scopes, and claims management
• Configure and support token transformation, claim mapping, and API authorization strategies
• Develop and maintain secure backend integrations and APIs using Node.js, JavaScript, Java, and Spring Boot
• Support SMART on FHIR authorization frameworks and interoperability initiatives
• Work with FHIR resources including Patient, Practitioner, and Observation
• Collaborate with cross-functional engineering, architecture, security, and interoperability teams
• Participate in solution analysis, technical design, development, testing, and implementation activities
• Help define and document API security standards, best practices, and governance approaches

Primary Requirements

• Healthcare insurance industry experience
• Experience with Identity and Access Management (IAM) concepts and enterprise authentication frameworks
• Strong hands-on experience with OAuth 2.0 and OpenID Connect
• API Gateway experience
• Experience with API security development and secure integration patterns
• Experience with Auth0 and/or Okta platforms
• Ability to translate security constructs such as Groups to roles/permissions, Policies to actions/rules, Authorization servers to APIs, and Token and claim transformations
• Understanding of Java
• Experience building or supporting RESTful APIs and backend integrations
• Strong understanding of secure authentication and authorization flows
• Experience working in Agile development environments

Desired Skills

• Healthcare payer industry experience
• Knowledge of Kong API gateway
• SMArt (Suitable Medical Applications and Reusable Technologies) on FHIR experience
• Experience supporting interoperability or patient access initiatives
• Familiarity with FHIR resources and healthcare API standards
• Experience supporting cloud-native or enterprise modernization initiatives
• Knowledge of API gateway or enterprise security tooling