Staff Software Engineer

As a Staff Engineer, you will bridge the gap between core Java backend engineering, modern IAM protocols, cloud-native GitOps workflows, and modern AI-driven software engineering practices to accelerate development and boost team productivity.

\n

In this role, you will lead the technical direction for identity systems that secure millions of users, handle high-throughput authentication, and enforce fine-grained access control across our entire ecosystem.

\n

As a technical leader on the team, you will balance deep hands-on architectural design with cross-functional mentorship, working closely with Security, Infrastructure, and Product teams.

• Experience: 8+ years of software engineering experience, with demonstrated technical leadership at a Staff or Principal level in IAM, Security, or Core Infrastructure. \n

• Keycloak & Java Expertise: Deep hands-on experience extending, scaling, and operating Keycloak in production, alongside mastery of Java and JVM internals. \n

• AI-Driven Software Development: Proven experience incorporating AI tools and LLM workflows into daily software engineering (e.g., automated code generation, AI-assisted refactoring, test suite generation, and prompt engineering for development tasks). \n

• IAM Standards: Deep expertise in OAuth 2.0, OIDC, SAML, and SCIM for identity lifecycle management., * Prior background as a Software Architect or Lead Engineer. \n

• Experience with continuous process improvement informed by data, particularly using Kanban or Agile metrics. \n

• Proven track record of driving engineering teams to meet and exceed operational SLAs. \n

• Prior exposure to Identity & Access Management (IAM), OAuth 2.0, OIDC, SAML, or Keycloak environments.

n \n

• Core IAM Architecture: Drive the roadmap and architecture for our centralized authentication and authorization platforms, leveraging Keycloak as a core engine. \n

• Custom Development: Design, build, and maintain custom SPI extensions, providers, and high-performance services in Java. \n

• Identity Lifecycle & Provisioning: Architect robust SCIM integrations for user provisioning and streamline audit logging and security monitoring integrations with SIEM systems. \n

• GitOps & Infrastructure as Code: Lead the automation of our identity infrastructure using Terraform, Ansible, Helm, and ArgoCD to maintain secure, reproducible, and self-healing environments. \n

• Security & Protocol Leadership: Implement and harden OAuth 2.0, OIDC, SAML, and fine-grained access control across service-to-service and user-facing architectures. \n

• AI-Assisted Engineering: Leverage AI developer tools (e.g., GitHub Copilot, Cursor, LLM-driven coding assistants) to accelerate development workflows, automate unit test generation, optimize Keycloak extension code, and establish AI best practices across the team. \n

• Hands-On Development: Work on critical initiatives leading them to completion. \n

• Technical Ownership & Mentorship: Lead RFCs, conduct architecture reviews, and mentor senior engineers across the engineering organization. \n

\n

\n, * Cloud-Native IaC & CI/CD: Strong experience building automated deployment pipelines and managing infrastructure via code. \n

• Security Operations: Hands-on experience integrating application logs, telemetry, and security events into SIEM solutions. \n

\n

\n

Nice-to-Haves / Strong Pluses:

\n \n

• Container & GitOps Tooling: Hands-on experience with ArgoCD, Helm, Ansible, and Terraform for automated Kubernetes and infrastructure management. \n

• Experience integrating AI capabilities or anomaly detection models into identity workflows and threat detection. \n

• Experience with zero-downtime Keycloak cluster upgrades and multi-region deployments. \n

• Familiarity with service-to-service authentication (mTLS) and fine-grained authorization frameworks. \n

\n

\n, * Experience with cloud-native deployment practices, containers, and infrastructure-as-code concepts (Kubernetes, Helm, Terraform, ArgoCD). \n

• Experience promoting AI developer tool adoption within an engineering organization. \n

\n

\n

ModMed Benefits Highlight:

\n

At ModMed, we believe it’s important to offer a competitive benefits package designed to meet the diverse needs of our growing workforce. Eligible Modernizers can enroll in a wide range of benefits:

\n

\n

United States

\n \n

• Comprehensive medical, dental, and vision benefits, including a company Health Savings Account contribution, \n

• 401(k): ModMed provides a matching contribution each payday of 50% of your contribution deferred on up to 6% of your compensation. After one year of employment with ModMed, 100% of any matching contribution you receive is yours to keep. \n

• Generous Paid Time Off and Paid Parental Leave programs, \n

• Company paid Life and Disability benefits, Flexible Spending Account, and Employee Assistance Programs, \n

• Company-sponsored Business Resource & Special Interest Groups that provide engaged and supportive communities within ModMed, \n

• Professional development opportunities, including tuition reimbursement programs and unlimited access to LinkedIn Learning, \n

• Global presence and in-person collaboration opportunities; dog-friendly HQ (US), Hybrid office-based roles and remote availability for some roles, \n

• Weekly catered breakfast and lunch, treadmill workstations, Zen, and wellness rooms within our BRIC headquarters.

At ModMed, we’re not just building software-we’re reimagining the healthcare experience. Founded in 2010 by a practicing physician and a successful tech entrepreneur, we took a radically different approach: we hired doctors and taught them how to code. This “for doctors, by doctors” philosophy has allowed us to create an AI-enabled, specialty-specific cloud platform that places patients at the center of care.