Athelas logo

Staff Software Engineer (Frameworks)

Athelas

RemoteFull timeMid level$210k – $250kPosted today
Apply with JobAssist

About the role

  • The Frameworks Team at Commure builds and operates foundational software systems used across the Engineering organization
  • The team owns shared libraries, frameworks, services, and developer tooling that power critical platform capabilities, including authentication and authorization, database migrations, AI agent platform, application performance, security, and developer productivity
  • As a Staff Software Engineer, you will own and influence critical technical surfaces that span multiple products and engineering teams
  • You will design and evolve secure, scalable, and highly reliable authentication and authorization systems, while also contributing to broader platform initiatives that improve application performance, operational reliability, and developer velocity
  • This is a highly technical and hands-on role with significant organizational impact
  • You will work across application, platform, infrastructure, and security boundaries—solving complex distributed systems problems, making long-term architectural tradeoffs, and creating durable patterns that can be adopted across the company
  • You will also help shape the technical direction of the company’s core platform, including how teams interact with our AI agent platform, how services authenticate users and workloads, enforce authorization policies, communicate securely, and are built, tested, observed, and deployed
  • Beyond delivering individual systems, you will create frameworks, abstractions, and engineering practices that enable teams across the organization to build secure and reliable software faster
  • Own and evolve the architecture of authentication and authorization systems used across multiple products and services
  • Design and build secure identity workflows, including OAuth 2.0/OIDC flows, token issuance and validation, session management, service-to-service authentication, and fine-grained authorization
  • Lead the design and evolution of shared platform services and reusable engineering patterns, enabling teams to build and operate microservices consistently and safely
  • Drive improvements to application performance and scalability, identifying systemic bottlenecks across APIs, databases, caching layers, middleware, and distributed service interactions
  • Improve developer productivity and experience through faster CI/CD workflows, reusable service tooling, test infrastructure, local development environments, and self-service platform capabilities
  • Establish strong standards for observability and operational readiness, including monitoring, logging, distributed tracing, dashboards, alerting, SLOs, and safe production rollouts
  • Partner closely with platform and product teams to protect sensitive customer data, strengthen security boundaries, and meet regulatory and compliance requirements
  • Lead complex technical initiatives that span multiple systems and teams, from architecture and design through implementation, migration, rollout, and production operations
  • Make pragmatic technical decisions that balance security, correctness, reliability, performance, simplicity, and delivery velocity
  • Mentor Senior and other Staff engineers, lead architecture and design reviews, and raise the technical bar through clear technical direction, high-quality engineering practices, and thoughtful feedback
  • Operate with strong end-to-end ownership in a fast-moving environment, proactively identifying systemic risks and driving durable solutions rather than local fixes- Experience leading large, multi-component technical initiatives across team boundaries, from architecture and design through implementation, migration, rollout, and production operations
  • 8+ years of software engineering experience, with a strong track record of designing, building, and operating complex production systems at scale
  • A strong operational and platform mindset, with experience in areas such as Kubernetes, infrastructure as code, observability, CI/CD, safe migrations, incremental rollouts, and production reliability
  • Strong experience with authentication and authorization systems, including practical knowledge of OAuth 2.0, OIDC, JWTs, session and token management, service-to-service authentication, RBAC, ABAC, and policy-based authorization
  • A high degree of ownership and curiosity: you are comfortable moving between architecture and implementation, diving deeply into unfamiliar systems when necessary, and staying accountable for end-to-end outcomes
  • Strong technical judgment and security fundamentals, with the ability to reason about trust boundaries, identity propagation, least privilege, failure modes, and secure-by-default system design, while balancing security, reliability, performance, simplicity, and delivery velocity
  • Demonstrated ability to influence and multiply the effectiveness of other engineers through technical leadership, architecture reviews, clear communication, mentorship, and reusable frameworks and tooling
  • Deep expertise in backend and distributed systems, including service architecture, APIs, databases, caching, asynchronous processing, and cloud-native systems
  • Experience building centralized identity, authentication, or authorization platforms used across multiple products or engineering teams
  • Experience with technologies in our ecosystem, including AWS Cognito, Python, FastAPI, Pydantic, PostgreSQL, Go, Kubernetes, and cloud-native infrastructure
  • Knowledge of healthcare security and compliance standards (HIPAA, SOC 2)
  • Experience mentoring engineers and leveling up an engineering organization

Millions of jobs, with real people getting hired every day

20,000+
New jobs added daily
7,000,000+
Verified job listings
500,000+
Tailored applications submitted
FAQ

Questions, answered

Click "Apply with JobAssist" – we tailor your resume and application to this role and submit it for your approval.

Yes. This role at Athelas was screened before publishing – we confirmed the employer before listing it.

The employer didn't disclose a salary range for this listing. JobAssist shows pay whenever it's available.

This position can be done from anywhere, with no in-office requirement.

Yes – every application is tailored from your profile and this job's requirements, and you can review and edit before it's sent.