Consultant Full Stack Engineer

Your Role The Digital Platform team develops and maintains the core infrastructure and features supporting Stellarus technical products. As a Consultant Full Stack Engineer, you will report to the Senior Manager of Digital Applications. Your work will involve the design, development, and deployment of secure, high-quality software solutions, focusing on the comprehensive management of identity flows, including registration, authentication, authorization, account recovery, and lifecycle management. You will integrate with our Identity and Access Management (IAM) system to adopt modern standards such as OAuth 2.0, OIDC, SAML, and SCIM, while ensuring least privilege and delivering scalable, auditable solutions. Your responsibilities will include embedding security and automation throughout the software development lifecycle (SDLC). This entails writing clean, maintainable code and constructing infrastructure to support CI/CD pipelines, automated testing, and cloud-native deployment. You will implement DevSecOps best practices tailored for Azure, contribute to infrastructure as code, and collaborate closely with developers, testers, and cloud engineers to ensure secure, scalable, and production-ready code from day one. We seek a hands-on engineer who excels in a collaborative environment and is passionate about Security by Design, IAM integrations, code quality, automation, and secure cloud development. At our company, we value leadership at all levels and are committed to fostering opportunities for personal, professional, and financial growth. We are looking for energetic leaders passionate about creative thinking, building high-performing teams, achieving results ethically, and promoting continuous learning. Your Knowledge and Experience Bachelor's degree in Computer Science, Information Technology, Management Information Systems, or a related field (or equivalent experience), with at least 7 years of relevant experience in enterprise application support and cloud-based solutions. Identity & Access Management Core: OIDC applications, authorization servers, claims & scopes, custom authorization policies. MFA (TOTP, push, WebAuthn/FIDO2), adaptive policies, device assurance. SCIM connectors, group rules, inline hooks/event hooks, Okta Workflows for low-code automations. User schema extensions, profile mastering, group-based access control, API tokens/service accounts. Standards & Protocols: OAuth2, OIDC, SAML 2.0, SCIM 2.0, JWK/JWKS, JWT/JWE, WebAuthn/FIDO2, PKCE. Federation & SSO: enterprise federation, IdP-initiated vs SP-initiated flows, inbound/outbound SAML, B2B organization-to-organization. Experienced in modern front-end frameworks like React and/or Vue, with proven experience in component-based architecture and state management. Auth UX: best practices for sign-up/sign-in, MFA enrollment, passwordless, account recovery, device remembrance, and session timeout UX. SDKs: Okta Auth JS, OIDC client libraries, integrating with redirect flows and token storage (memory vs. httpOnly cookies). Backend / API Languages: Angular JavaScript, Java/Kotlin, Python. API Security: OAuth2 scopes, resource servers, token introspection, JWKS validation, rotating signing keys. Session & Token Management: access vs. ID vs. refresh tokens, TTLs, revocation, replay protections. Policy Enforcement: middleware for authorization, feature flags, contextual access (device, IP, risk signals). Cloud & Platform Cloud: Azure: API Gateway, App Services, Functions, Secrets Manager/KMS/Key Vault. Datastores: Postgres, Azure SQL, event streams (Kafka) for identity events. CI/CD: Bitbucket or GitHub Actions/Jenkins; gated releases, secret scanning, SAST/DAST. Soft Skills Adopt a product mindset; balancing seamless user experience with strong security. Exemplary communication of system design with clear tradeoffs. Empathy for developers and end users; maintaining strong documentation habits. Exceptional ability to influence and collaborate with stakeholders, vendors, and cross-functional teams, demonstrating excellent verbal and written communication skills to convey and execute technical deliverables. Preferred experience in the healthcare sector and familiarity with Facets software. #LI-EB1

Created: 2026-03-04