Staff Software Engineer, Frameworks

About The Role

The Frameworks Team at Commure builds and operates foundational software systems used across the Engineering organization. The team owns shared libraries, frameworks, services, and developer tooling that power critical platform capabilities, including authentication and authorization, database migrations, AI agent platform, application performance, security, and developer productivity.

As a Staff Software Engineer, you will own and influence critical technical surfaces that span multiple products and engineering teams. You will design and evolve secure, scalable, and highly reliable authentication and authorization systems, while also contributing to broader platform initiatives that improve application performance, operational reliability, and developer velocity. This is a highly technical and hands-on role with significant organizational impact. You will work across application, platform, infrastructure, and security boundaries—solving complex distributed systems problems, making long-term architectural tradeoffs, and creating durable patterns that can be adopted across the company. You will also help shape the technical direction of the company's core platform, including how teams interact with our AI agent platform, how services authenticate users and workloads, enforce authorization policies, communicate securely, and are built, tested, observed, and deployed. Beyond delivering individual systems, you will create frameworks, abstractions, and engineering practices that enable teams across the organization to build secure and reliable software faster.

What You'll Do

• Own and evolve the architecture of authentication and authorization systems used across multiple products and services.
• Design and build secure identity workflows, including OAuth 2.0/OIDC flows, token issuance and validation, session management, service-to-service authentication, and fine-grained authorization.
• Lead the design and evolution of shared platform services and reusable engineering patterns, enabling teams to build and operate microservices consistently and safely.
• Drive improvements to application performance and scalability, identifying systemic bottlenecks across APIs, databases, caching layers, middleware, and distributed service interactions.
• Improve developer productivity and experience through faster CI/CD workflows, reusable service tooling, test infrastructure, local development environments, and self-service platform capabilities.
• Establish strong standards for observability and operational readiness, including monitoring, logging, distributed tracing, dashboards, alerting, SLOs, and safe production rollouts.
• Partner closely with platform and product teams to protect sensitive customer data, strengthen security boundaries, and meet regulatory and compliance requirements.
• Lead complex technical initiatives that span multiple systems and teams, from architecture and design through implementation, migration, rollout, and production operations.
• Make pragmatic technical decisions that balance security, correctness, reliability, performance, simplicity, and delivery velocity.
• Mentor Senior and other Staff engineers, lead architecture and design reviews, and raise the technical bar through clear technical direction, high-quality engineering practices, and thoughtful feedback.
• Operate with strong end-to-end ownership in a fast-moving environment, proactively identifying systemic risks and driving durable solutions rather than local fixes.

Required

• 8+ years of software engineering experience, with a strong track record of designing, building, and operating complex production systems at scale.
• Strong experience with authentication and authorization systems, including practical knowledge of OAuth 2.0, OIDC, JWTs, session and token management, service-to-service authentication, RBAC, ABAC, and policy-based authorization.
• Deep expertise in backend and distributed systems, including service architecture, APIs, databases, caching, asynchronous processing, and cloud-native systems.
• Strong technical judgment and security fundamentals, with the ability to reason about trust boundaries, identity propagation, least privilege, failure modes, and secure-by-default system design, while balancing security, reliability, performance, simplicity, and delivery velocity.
• Experience leading large, multi-component technical initiatives across team boundaries, from architecture and design through implementation, migration, rollout, and production operations.
• A strong operational and platform mindset, with experience in areas such as Kubernetes, infrastructure as code, observability, CI/CD, safe migrations, incremental rollouts, and production reliability.
• Demonstrated ability to influence and multiply the effectiveness of other engineers through technical leadership, architecture reviews, clear communication, mentorship, and reusable frameworks and tooling.
• A high degree of ownership and curiosity: you are comfortable moving between architecture and implementation, diving deeply into unfamiliar systems when necessary, and staying accountable for end-to-end outcomes.

Preferred

• Experience building centralized identity, authentication, or authorization platforms used across multiple products or engineering teams.
• Experience with technologies in our ecosystem, including AWS Cognito, Python, FastAPI, Pydantic, PostgreSQL, Go, Kubernetes, and cloud-native infrastructure.
• Experience mentoring engineers and leveling up an engineering organization.
• Knowledge of healthcare security and compliance standards (HIPAA, SOC 2).