Staff Software Engineer, Frameworks

Athelas; San Francisco (CA); On-site; USD 210,000 - 250,000; Full time

Job summary

Commure is building an AI-powered healthcare platform. We are seeking a Staff Software Engineer to own and evolve the authentication and authorization surfaces across multiple products, ensuring secure, scalable, and reliable systems.

You will work across application, platform, and security boundaries, shaping the company’s core platform and developer tooling. You will mentor engineers, drive architectural decisions, and partner with platform teams to protect customer data while balancing

Qualifications

• 8+ years of software engineering experience designing, building, and operating complex production systems at scale.

Responsibilities

• Own and evolve authentication and authorization architectures across multiple products and services.
• Design secure identity workflows, including OAuth 2.0/OIDC, token issuance/validation, session management, and service-to-service authentication.
• Lead the design and evolution of shared platform services and reusable engineering patterns.
• Drive application performance and scalability across APIs, databases, caching, and distributed services.
• Improve developer productivity via CI/CD, tooling, test infra, and self-service capabilities.
• Establish observability standards with monitoring, logging, tracing, dashboards, and SLOs.
• Collaborate with platform/product teams to protect data, strengthen security boundaries, and meet compliance.
• Lead complex initiatives end-to-end from design to rollout and production operations.
• Make pragmatic decisions balancing security, reliability, performance, and velocity.
• Mentor senior engineers and raise the technical bar through reviews and direction.

Skills

Authentication & authorization

Backend & distributed systems

Security fundamentals

Technical leadership

Platform & services design

Observability & reliability

Kubernetes & infra as code

Tools

AWS Cognito

Python

FastAPI

Pydantic

PostgreSQL

Go

Kubernetes

Cloud-native infrastructure

Job description

At Commure, we're building the AI Operating System for healthcare, the foundation that defines how care is delivered, documented, and financed. Our platform spans the full care journey: Ambient AI and Dictation eliminating documentation burden at the point of care, intelligent Agents automating patient and revenue workflows, and autonomous RCM processing billions in claims, all on a single AI-native platform integrated with 60+ EHRs.

Healthcare carries a $1 trillion administrative burden and we're at the center of transforming it. Today, 500,000+ clinicians across 500+ healthcare organizations nationwide trust Commure to handle $25B+ in annual claims and support over 200 million patient interactions. Our latest $70M raise at a $7B valuation reflects the confidence the market has placed in this mission. We've also been named to the Fortune Future 50 list and the 2026 AI Breakthrough Awards for "Overall NLP Company of the Year".

Our team works directly alongside clinicians, not through layers of process, which means the gap between what you build and its impact on patient care is immediate. We move fast, deploy daily, and take full ownership from early thinking to production. If you're energized by hard problems, high stakes, and a team that holds itself to a high bar, you'll find your people here.

The future of healthcare is being built right now. Come deliver this transformation.

About The Role

The Frameworks Team at Commure builds and operates foundational software systems used across the Engineering organization. The team owns shared libraries, frameworks, services, and developer tooling that power critical platform capabilities, including authentication and authorization, database migrations, AI agent platform, application performance, security, and developer productivity.

As a Staff Software Engineer, you will own and influence critical technical surfaces that span multiple products and engineering teams. You will design and evolve secure, scalable, and highly reliable authentication and authorization systems, while also contributing to broader platform initiatives that improve application performance, operational reliability, and developer velocity.

This is a highly technical and hands-on role with significant organizational impact. You will work across application, platform, infrastructure, and security boundaries—solving complex distributed systems problems, making long‑term architectural tradeoffs, and creating durable patterns that can be adopted across the company.

You will also help shape the technical direction of the company’s core platform, including how teams interact with our AI agent platform, how services authenticate users and workloads, enforce authorization policies, communicate securely, and are built, tested, observed, and deployed. Beyond delivering individual systems, you will create frameworks, abstractions, and engineering practices that enable teams across the organization to build secure and reliable software faster.

What You’ll Do

• Own and evolve the architecture of authentication and authorization systems used across multiple products and services.
• Design and build secure identity workflows, including OAuth 2.0/OIDC flows, token issuance and validation, session management, service-to-service authentication, and fine‑grained authorization.
• Lead the design and evolution of shared platform services and reusable engineering patterns, enabling teams to build and operate microservices consistently and safely.
• Drive improvements to application performance and scalability, identifying systemic bottlenecks across APIs, databases, caching layers, middleware, and distributed service interactions.
• Improve developer productivity and experience through faster CI/CD workflows, reusable service tooling, test infrastructure, local development environments, and self‑service platform capabilities.
• Establish strong standards for observability and operational readiness, including monitoring, logging, distributed tracing, dashboards, alerting, SLOs, and safe production rollouts.
• Partner closely with platform and product teams to protect sensitive customer data, strengthen security boundaries, and meet regulatory and compliance requirements.
• Lead complex technical initiatives that span multiple systems and teams, from architecture and design through implementation, migration, rollout, and production operations.
• Make pragmatic technical decisions that balance security, correctness, reliability, performance, simplicity, and delivery velocity.
• Mentor Senior and other Staff engineers, lead architecture and design reviews, and raise the technical bar through clear technical direction, high‑quality engineering practices, and thoughtful feedback.
• Operate with strong end‑to‑end ownership in a fast‑moving environment, proactively identifying systemic risks and driving durable solutions rather than local fixes.

What You Have

Required

• 8+ years of software engineering experience, with a strong track record of designing, building, and operating complex production systems at scale.
• Strong experience with authentication and authorization systems, including practical knowledge of OAuth 2.0, OIDC, JWTs, session and token management, service-to-service authentication, RBAC, ABAC, and policy‑based authorization.
• Deep expertise in backend and distributed systems, including service architecture, APIs, databases, caching, asynchronous processing, and cloud‑native systems.
• Strong technical judgment and security fundamentals, with the ability to reason about trust boundaries, identity propagation, least privilege, failure modes, and secure‑by‑default system design, while balancing security, reliability, performance, simplicity, and delivery velocity.
• Experience leading large, multi‑component technical initiatives across team boundaries, from architecture and design through implementation, migration, rollout, and production operations.
• A strong operational and platform mindset, with experience in areas such as Kubernetes, infrastructure as code, observability, CI/CD, safe migrations, incremental rollouts, and production reliability.
• Demonstrated ability to influence and multiply the effectiveness of other engineers through technical leadership, architecture reviews, clear communication, mentorship, and reusable frameworks and tooling.
• A high degree of ownership and curiosity: you are comfortable moving between architecture and implementation, diving deeply into unfamiliar systems when necessary, and staying accountable for end-to‑end outcomes.

Preferred

• Experience building centralized identity, authentication, or authorization platforms used across multiple products or engineering teams.
• Experience with technologies in our ecosystem, including AWS Cognito, Python, FastAPI, Pydantic, PostgreSQL, Go, Kubernetes, and cloud‑native infrastructure.
• Experience mentoring engineers and leveling up an engineering organization.
• Knowledge of healthcare security and compliance standards (HIPAA, SOC 2)

Please be aware that all official communication from us will come exclusively from email addresses ending in @commure.com.

Employees will act in accordance with the organization’s information security policies, to include but not limited to protecting assets from unauthorized access, disclosure, modification, destruction or interference nor execute particular security processes or activities. Employees will report to the information security office any confirmed or potential events or other risks to the organization. Employees will be required to attest to these requirements upon hire and on an annual basis.

Compensation Range: $210K - $250K