Full Stack Engineer, Consultant

Full Stack Engineer

The Digital Platform team creates and maintains the foundation and features upon which Stellarus technical products are built. The Full Stack Engineer will report to the Senior Manager, Digital Applications. You will be deeply involved in the design, development, and deployment of secure, high-quality software solutions, with a focus on end-to-end ownership of identity flows (registration, authentication, authorization, account recovery, and lifecycle management), integration with our Identity and Access Management (IAM) System and related IAM services to implement modern standards (OAuth 2.0, OIDC, SAML, SCIM), enforce least privilege, and deliver robust, scalable, auditable solutions. Your role will focus on integrating security and automation throughout the software development lifecycle (SDLC), with an emphasis on writing clean, maintainable code and building infrastructure that supports CI / CD pipelines, automated testing, and cloud-native delivery. You'll implement and enforce DevSecOps best practices tailored for Azure, contribute to infrastructure as code, and work closely with developers, testers, and cloud engineers to ensure code is secure, scalable, and production-ready from day one. This role requires a hands-on engineer who thrives in a collaborative environment and is passionate about Security by design, IAM integrations, code quality, automation, and secure cloud development. Our leadership model is about developing great leaders at all levels and creating opportunities for our people to grow personally, professionally, and financially. We are looking for leaders that are energized by creative and critical thinking, building and sustaining high-performing teams, getting results the right way, and fostering continuous learning.

Responsibilities

In this role, you will :

• Build full stack features for web and mobile (frontend + backend) with production-grade quality.
• Own IAM integrations : implement and maintain OAuth2 / OIDC flows (Auth Code + PKCE, Client Credentials), MFA, adaptive policies, session management, and SSO across apps.
• Provisioning & lifecycle : implement SCIM / Just-in-Time (JIT) user provisioning, automated deprovisioning, and role management.
• Authorization : design and enforce RBAC / ABAC; implement fine-grained policy checks in APIs and UIs.
• Security by design : follow OWASP ASVS / Top 10; threat model identity flows; secure tokens, secrets, and cookies.
• Observability & auditability : structured logging for auth events, SIEM integration, audit trails, and anomaly detection hooks.
• DevOps & IaC : CI / CD pipelines, automated tests (unit / integration / e2e), IaC for IAM system and cloud resources.
• Performance & reliability : caching strategies for JWKS / metadata, rate limiting, graceful degradation when IdP is degraded.
• Compliance-aware development : align with SOC 2, HIPAA / HITRUST (if applicable), GDPR / CCPA for identity data.
• Cross-functional collaboration : partner with Security, Infrastructure, and Product to evolve IAM standards and developer experience.
• Design and develop user interfaces and application programs using technical specifications and design documents, with a focus on cloud-native solutions and modern frameworks
• Develop the most efficient and cost-effective implementation, leveraging reusable features where possible
• Drive operational excellence, including but not limited to Incident Management, process automation leveraging AI, and ensuring smooth deployments for your technology products / platform features
• Recommend and implement improvements to departmental processes to enhance agility and efficiency
• Enhance the reliability, scalability, and utilization of systems and applications through continuous integration and continuous deployment (CI / CD) practices
• Monitor and manage software configuration changes to anticipate and address data reliability and customer satisfaction issues, leveraging cloud monitoring tools and practices
• Coordinate sustaining support for multiple application platforms or business processes, ensuring seamless integration and operation in a cloud environment
• Be self-directed, work with limited management direction and exercise considerable latitude in determining the technical objectives of the assignment
• Apply significant knowledge of IT and healthcare industry trends

Qualifications

Your Knowledge and Experience

Core : OIDC apps, authorization servers, claims & scopes, custom authorization policies.

Cloud : Azure : API Gateway, App Services, Functions, Secrets Manager / KMS / Key Vault.

Product mindset; can balance frictionless UX with strong security.

About Us

About Stellarus and the Ascendiun Family of Companies

Stellarus, launched in January 2025, is designed to scale innovative healthcare solutions that support customers in creating a health care experience deserving of their family, friends, and neighbors. Stellarus is part of a family of organizations that is overseen by a nonprofit corporate entity named Ascendiun. The Ascendiun Family of Companies also includes Blue Shield of California and its subsidiary, Blue Shield of California Promise Health Plan and Altais, a clinical services company.

Stellarus' vision is to empower its customers to create a healthcare experience that is worthy of their family, friends, and neighbors. Stellarus' objective is to offer innovative, modern, scalable solutions that challenge the health care status quo. This very closely aligns with Blue Shield of California's vision by using innovation to improve quality, affordability, and experience for members.

To achieve our mission, we foster an environment where all employees can thrive and contribute fully to address the needs of the various communities we serve. We are committed to creating and maintaining a supportive workplace that upholds our values and advances our goals.

Our Values :

At Stellarus, our core values of agility, trust, drive, courage and service shape our approach to developing innovative product offerings.

Our Workplace Model :