Want to know if this job is worth applying to?
Mountain View, California, United States
Onsite
At Commure, we're building the AI Operating System for healthcare, the foundation that defines how care is delivered, documented, and financed. Our platform spans the full care journey: Ambient AI and Dictation eliminating documentation burden at the point of care, intelligent Agents automating patient and revenue workflows, and autonomous RCM processing billions in claims, all on a single AI-native platform integrated with 60+ EHRs.
Healthcare carries a $1 trillion administrative burden and we're at the center of transforming it. Today, 500,000+ clinicians across 500+ healthcare organizations nationwide trust Commure to handle $25B+ in annual claims and support over 200 million patient interactions. Our latest $70M raise at a $7B valuation reflects the confidence the market has placed in this mission. We've also been named to the Fortune Future 50 list and the 2026 AI Breakthrough Awards for “Overall NLP Company of the Year.”
Our team works directly alongside clinicians, not through layers of process, which means the gap between what you build and its impact on patient care is immediate. We move fast, deploy daily, and take full ownership from early thinking to production. If you're energized by hard problems, high stakes, and a team that holds itself to a high bar, you'll find your people here.
The future of healthcare is being built right now. Come deliver this transformation.
The Identity Platform team, within the broader Frameworks organization, builds and operates the foundational infrastructure that secures and enables every Commure + Athelas product and service.
The team owns the company’s authentication and authorization platform, including user identity, service-to-service authentication, authorization policy enforcement, token management, identity integrations, and shared security libraries that enable every engineering team to build secure software by default. The team also owns the Commure Agent Platform, which provides the foundational runtime, orchestration, and shared capabilities for building and operating AI agents across the company.
As a Senior Software Engineer, you will design, build, and operate secure, scalable, and highly reliable authentication and authorization systems that protect millions of sensitive healthcare workflows. You will also contribute to the evolution of our Agentic Security platform, helping ensure AI agents authenticate securely, receive only the permissions they require, operate within clearly defined trust boundaries, and safely access enterprise data and services.
While your primary focus will be identity and access management, you will also contribute to the broader Frameworks organization by improving shared engineering infrastructure, developer productivity, application performance, operational reliability, AI platform capabilities, database migration tooling, and reusable platform services used across the company.
This is a highly technical, hands-on role where you will work across application, platform, infrastructure, AI, and security teams to solve complex distributed systems challenges. You will help build reusable platform capabilities, improve security by default, and enable engineering teams across the company to develop secure, reliable, and scalable software.
Design, build, and maintain the company’s authentication and authorization platform.
Build secure identity systems supporting OAuth 2.0, OpenID Connect (OIDC), JWTs, session management, workload identity, service-to-service authentication, API security, and token lifecycle management.
Implement scalable authorization models using RBAC, ABAC, policy-based authorization, and fine-grained access control.
Build reusable authentication and authorization services, SDKs, middleware, and shared libraries used across multiple engineering teams.
Help build our Agentic Security platform, including secure AI agent identity, delegated authorization, policy enforcement, tool permissions, and secure access to enterprise data and services.
Integrate with enterprise identity providers and customer SSO solutions.
Partner with Platform, Infrastructure, Security, and Product Engineering teams to strengthen the company’s security posture.
Contribute to shared platform services, developer frameworks, and reusable engineering infrastructure.
Improve application performance, scalability, and operational reliability across platform services.
Build tooling that improves developer productivity, including CI/CD, local development, testing, and platform automation.
Improve observability through monitoring, logging, tracing, dashboards, and alerting.
Contribute to foundational platform initiatives such as the Commure Agent Platform, database migration framework, and other shared engineering services.
Participate in architecture discussions, technical design reviews, and production incident response.
Mentor junior engineers and contribute to a culture of engineering excellence through thoughtful code reviews and technical collaboration.
5+ years of professional software engineering experience, building and operating production backend systems.
Strong experience building authentication and authorization systems, including OAuth 2.0, OpenID Connect (OIDC), JWTs, session management, service-to-service authentication, RBAC, ABAC, and policy-based authorization.
Strong understanding of application security fundamentals, including trust boundaries, identity propagation, secure API design, and secure software development practices.
Experience developing backend distributed systems using modern APIs, databases, caching, asynchronous processing, and cloud-native architectures.
Experience building and operating production services in Kubernetes or similar containerized environments.
Experience with CI/CD pipelines, observability, production monitoring, and operational best practices.
Strong programming skills in one or more backend languages such as Python or Go.
Excellent debugging, problem-solving, and communication skills with the ability to work effectively across multiple engineering teams.
A strong sense of ownership and a desire to build secure, reliable, and maintainable software.
Experience building Identity Platform or IAM services used across multiple products or engineering teams.
Experience integrating enterprise identity providers such as AWS Cognito, Okta, Azure AD, Google Workspace, or Auth0.
Experience working on AI platforms or implementing Agentic Security concepts such as agent identity, delegated authorization, policy enforcement, or secure tool execution.
Experience with technologies in our stack, including Python, FastAPI, Go, PostgreSQL, Kubernetes, cloud-native infrastructure, and distributed micro-services.
Please be aware that all official communication from us will come exclusively from email addresses ending in @commure.com. Any emails from other domains are not affiliated with our organization.
Employees will act in accordance with the organization’s information security policies, to include but not limited to protecting assets from unauthorized access, disclosure, modification, destruction or interference nor execute particular security processes or activities. Employees will report to the information security office any confirmed or potential events or other risks to the organization. Employees will be required to attest to these requirements upon hire and on an annual basis.