Full Stack Developer – SMART on FHIR

Themesoft Inc.; City of Albany (NY); Hybrid; USD 96,000 - 165,000; Part time

Job summary

Themesoft Inc. in Albany, NY is seeking an experienced Full Stack Developer to build SMART on FHIR apps. You will work on frontend in React, ensure secure OAuth2 flows, and integrate with EHR iframe environments.

The contract role requires delivering secure, scalable web applications compatible with Epic, Cerner, and others. You will collaborate with stakeholders, implement token management, and optimize data delivery.

Qualifications

• Experience with React SPA development.
• Secure OAuth2.0 implementations and PKCE flows.
• Knowledge of EHR iframe environments and FHIR/SMART on FHIR.
• Ability to build secure backend services and manage tokens.

Responsibilities

• Frontend development – React SPA.
• Build secure backend services with OAuth2.0.
• Ensure EHR iframe compatibility (Epic, Cerner, Meditech).
• Token management and secure API communication.

Skills

React

OAuth2 PKCE

Secure token management

CORS/CSRF security

EHR integration awareness

API integration

Tools

Docker

Kubernetes

GraphQL

FHIR/SMART on FHIR tooling

Job description

Job Title:

Full Stack Developer – SMART on FHIR.

Location:

Albany, NY.

Work Arrangement:

Remote OR Hybrid.

Employment Type:

Contract.

Contract Duration:

Starts with 12 Months - Extendable Contract.

About the Role:

We are seeking an experienced Full stack Developer to join our team. The successful candidate will be responsible for Smart on FHIR App development and will work closely with team/stakeholders to deliver high-quality solutions.

Job Description:

• Frontend Development – (React SPA).


• Experience with iframe-based app design.


• Proficiency in building responsive, secure, and performant web applications using React.


• The application must be compatible with EHR Iframe environments such as Epic, Cerner, Meditech etc.


• Ability to build a secure backend service that handles OAuth2.0 authorization.


• Capability to manage frontend data delivery and optional user sessions securely.


• Secure Token and API Handling.


• Strong understanding of secure token management, including OAuth2 Authorization Code Flow with PKCE.


• Experience handling token refresh, access scope enforcement, and secure API interactions.


• Familiarity with implementing CORS policies and CSRF protection.


• EHR Workflow Integration Awareness.


• Understanding of how SMART on FHIR applications are launched and embedded within EHR platforms (e.g., Epic, Cerner, others).


• Awareness of Iframe behavior, patient context switching, and workflow limitations in clinical environments.


• Hands‑on experience implementing the SMART on FHIR EHR Launch flow.

Bonus:

GraphQL experience.

Familiarity with caching strategies.

Experience with building multi‑stage docker images for container deployment in Kubernetes environments.

Work Authorization:

Applicants must be legally authorized to work in the United States.

Themesoft Inc is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.