Apply on Employer Site

Blue Shield of California · 2 days ago

Full Stack Engineer, Consultant

California, United States

Full-time

Hybrid

Senior Level

7+ years exp

Blue Shield of California is seeking a Full Stack Engineer to join their Digital Platform team. The role involves designing, developing, and deploying secure software solutions with a focus on identity management, integration, and automation, while collaborating with cross-functional teams to ensure high-quality delivery.

Financial ServicesHealth InsuranceNon Profit

H1B Sponsor Likely

Responsibilities

Build full stack features for web and mobile (frontend + backend) with production-grade quality

Own IAM integrations: implement and maintain OAuth2/OIDC flows (Auth Code + PKCE, Client Credentials), MFA, adaptive policies, session management, and SSO across apps

Provisioning & lifecycle: implement SCIM/Just-in-Time (JIT) user provisioning, automated deprovisioning, and role management

Authorization: design and enforce RBAC/ABAC; implement fine-grained policy checks in APIs and UIs

Security by design: follow OWASP ASVS/Top 10; threat model identity flows; secure tokens, secrets, and cookies

Observability & auditability: structured logging for auth events, SIEM integration, audit trails, and anomaly detection hooks

DevOps & IaC: CI/CD pipelines, automated tests (unit/integration/e2e), IaC for IAM system and cloud resources

Performance & reliability: caching strategies for JWKS/metadata, rate limiting, graceful degradation when IdP is degraded

Compliance-aware development: align with SOC 2, HIPAA/HITRUST (if applicable), GDPR/CCPA for identity data

Cross-functional collaboration: partner with Security, Infrastructure, and Product to evolve IAM standards and developer experience

Design and develop user interfaces and application programs using technical specifications and design documents, with a focus on cloud-native solutions and modern frameworks

Develop the most efficient and cost-effective implementation, leveraging reusable features where possible

Drive operational excellence, including but not limited to Incident Management, process automation leveraging AI, and ensuring smooth deployments for your technology products/platform features

Recommend and implement improvements to departmental processes to enhance agility and efficiency

Enhance the reliability, scalability, and utilization of systems and applications through continuous integration and continuous deployment (CI/CD) practices

Monitor and manage software configuration changes to anticipate and address data reliability and customer satisfaction issues, leveraging cloud monitoring tools and practices

Coordinate sustaining support for multiple application platforms or business processes, ensuring seamless integration and operation in a cloud environment

Be self-directed, work with limited management direction and exercise considerable latitude in determining the technical objectives of the assignment

Apply significant knowledge of IT and healthcare industry trends

Qualification

Identity & Access ManagementOAuth2OIDCCloud AzureCI/CDMFASCIMJava/KotlinReactSoft Skills

Required

Bachelor's degree in computer science, Information Technology, Management Information Systems, or a related field (or equivalent experience), with a minimum of 7 years of relevant experience in enterprise application support and cloud-based solution delivery

Identity & Access Management Core: OIDC apps, authorization servers, claims & scopes, custom authorization policies

MFA (TOTP, push, WebAuthn/FIDO2), adaptive policies, device assurance

SCIM connectors, group rules, inline hooks/event hooks, Okta Workflows for low-code automations

User schema extensions, profile mastering, group-based access control, API tokens/service accounts

Standards & Protocols: OAuth2, OIDC, SAML 2.0, SCIM 2.0, JWK/JWKS, JWT/JWE, WebAuthn/FIDO2, PKCE

Federation & SSO: enterprise federation, IdP-initiated vs SP-initiated flows, inbound/outbound SAML, B2B org-to-org

Skilled in modern front-end frameworks such as React and/or Vue, with proven experience in component-based architecture and state management

Auth UX: best practices for sign-up/sign-in, MFA enrollment, passwordless, account recovery, device remembrance, and session timeout UX

SDKs: Okta Auth JS, OIDC client libs, integrating with redirect flows and token storage (memory vs. httpOnly cookies)

Backend / API Languages: Angular Javascript, Java/Kotlin, Python

API security: OAuth2 scopes, resource servers, token introspection, JWKS validation, rotating signing keys

Session & token management: access vs. ID vs. refresh tokens, TTLs, revocation, replay protections

Policy enforcement: middleware for authorization, feature flags, contextual access (device, IP, risk signals)

Cloud: Azure: API Gateway, App Services, Functions, Secrets Manager/KMS/Key Vault

Datastores: Postgres, Azure SQL, event streams (Kafka) for identity events

CI/CD: Bitbucket or GitHub Actions/Jenkins; gated releases, secret scanning, SAST/DAST

Product mindset; can balance frictionless UX with strong security

Excellent system design communication with clear tradeoffs

Empathy for developers and end users; strong documentation habits

Excellent ability to influence and collaborate with stakeholders, vendors, and cross-functional teams, with excellent verbal and written communication skills to translate and execute technical deliverable

Preferred

Preferred experience in the healthcare industry and working knowledge of Facets software

Company

Blue Shield of California

Glassdoor3.8

Blue Shield of California is a health insurance service provider.

Founded in 1939

San Francisco, California, USA

5001-10000 employees

https://www.blueshieldca.com

H1B Sponsorship

Blue Shield of California has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2023 (1)

2022 (41)

2021 (20)

2020 (31)