Senior Software Engineer, Login Identity Platform

Hi, we're Oscar. We're hiring a Senior Software Engineer, Login Identity Platform to join our Engineering team.

Oscar is the first health insurance company built around a full stack technology platform and a focus on serving our members. We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves—one that behaves like a doctor in the family.

About the role

The Senior Software Engineer is responsible for architecting and building the next generation of authentication and authorization for Oscar Health. This role requires a deep understanding of Python, as well as expertise in Flask, and interest or experience with protocols such as OAuth 2.0, SAML, SCIM, and OpenID Connect, and experience with projects such as Ory Hydra. 

You will report to the Senior Engineering Manager.

Work Location: 

Oscar is a blended work culture where everyone, regardless of work type or location, feels connected to their teammates, our culture and our mission. 

If you live within commutable distance to our New York City office (in Hudson Square), our Tempe office (off the 101 at University Dr), or our Los Angeles office (in Marina Del Rey), you will be expected to come into the office at least two days each week. Otherwise, this is a remote / work-from-home role.  

You must reside in one of the following states: Alabama, Arizona, California, Colorado, Connecticut, Florida, Georgia, Illinois, Iowa, Kansas, Kentucky, Maine, Maryland, Massachusetts, Michigan, Minnesota, Missouri, Nevada, New Hampshire, New Jersey, New Mexico, New York, North Carolina, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, Tennessee, Texas, Utah, Vermont, Virginia, Washington, or Washington, D.C. Note, this list of states is subject to change. #LI-Remote

Pay Transparency:

The base pay for this role is: $174,400 - $228,900 per year. You are also eligible for employee benefits, participation in Oscar’s unlimited vacation program, company equity grants, and annual performance bonuses. 

Responsibilities

• Work closely with cross-functional teams to implement and manage identity tooling and identity governance engines.
• Design, develop, and maintain software applications using Python & Javascript.
• Experience with modern web back and frontend React, Flask, Twisted, and similar technologies.
• Implementation of identity protocols such as SAML, OIDC, OAUTH2 and SCIM.
• Work, and collaborate with cross-functional teams, on customer identity tools and integrations such as (FusionAuth, Auth0, Ory, Keycloak, Zitadel, Stytch, Propelauth, Clerk, Frontegg, or Supertokens).
• Work, and collaborate with cross-functional teams, on governance engines such as IIQ.
• Integrate and optimize workforce identity tools like Okta into SAAS tools.
• Deploy, monitor and manage the deployment of tools in Kubernetes. 
• Assist in creating training and user documentation, and maintain ongoing documentation for processes.
• Troubleshoot and resolve issues related to identity management and authentication tools.
• Perform additional tasks related to software development as needed.
• Other duties as assigned.

Qualifications

• 4+ years of experience as a Software Developer / Software Engineer in Python.
• Strong understanding of identity protocols such as SAML, OIDC, and SCIM.

Bonus Points

• Experience with identity stacks, ideally Ory, or FusionAuth, Auth0, Keycloak, Zitadel, Stytch, Propelauth, Clerk, Frontegg, or Supertokens.
• Experience with identity governance engines like SailPoint IdentityIQ (IIQ).
• Experience with Java
• Knowledge of best practices in identity management and data security.
• Experience in the healthcare or health insurance industry.