Senior Software Engineer, Auth & Identity

About the role

The Senior Software Engineer on the Auth & Identity team is responsible for designing, implementing, and maintaining the authentication and authorization systems that every Welltower application depends on. This role spans workforce and application identity, access control models, and the services that enforce them. This is a small team. You will work closely with the team lead on architecture, own well-scoped components end-to-end, and have direct input on the design of systems you’ll be running. We are looking for someone who can be an active thinking partner in that process, not just execute a spec.

Responsibilities

• Implement authorization models — relationship-based access control, layered with role and attribute models — and the enforcement points that apply them consistently across services
• Design and maintain the APIs and client libraries application teams use to integrate with the platform, including schema governance and a stable client contract
• Migrate existing applications onto the platform: partner with application teams, security, and compliance to capture current authorization decisions, backfill data, prove parity, and cut over behind a flag
• Establish automated testing for access control logic, including negative and privilege-escalation cases, and replay recorded decisions to prove an application’s current behavior is reproduced before cutover
• Design and manage grant and credential lifecycles
• Support audit and regulatory requirements, including access reviews and evidence collection (SOC 2 / HIPAA)
• Instrument authorization paths for auditability, alerting, and incident response
• Create comprehensive documentation for platform architecture, access models, and integration patterns