Principal Software Engineer, User Management
Arcadia’s mission is to improve healthcare outcomes through better data and smarter technology. A critical pillar of this mission is the User Management system, which governs authentication, authorization, and user provisioning across all Arcadia’s applications.
We’re looking for a Principal Software Engineer to take technical ownership of this area—leading the rearchitecture and implementation of a robust, scalable, and secure access control framework. By the time you join, the team will have completed key architectural planning decisions; your focus will be on translating that architecture into reality.
Beyond the core platform work, this role will drive adoption of AI-augmented engineering practices across the team—bringing modern agentic development approaches that raise the standard for how we build software.
- Gain deep familiarity with Arcadia's existing User Management system — Auth0 tenants, Chimera authorization model, Hydra session management, and event-driven provisioning workflows
- Complete design handoff for the new access and grants architecture, collaborating closely with product and platform teams to understand business and security requirements
- Begin staged implementation of the new system, focusing on core backend services and foundational APIs
- Lead the implementation of a centralized access control framework that replaces legacy patterns across the platform
- Drive integration of new user and access models into key Arcadia applications with zero-downtime migration for internal and external users
- Own and operate a fully modernized User Management system that delivers secure, reliable, and high-performance authentication and authorization at scale
- Define and begin executing on a unified access control strategy across services — establishing the roadmap to eliminate duplicated auth logic and reduce integration surface area
- Mentor engineers and guide teams across Arcadia in secure, distributed, and scalable system design — including adoption of AI-augmented development practices
What You'll Be Doing
- Leading the rearchitecture and modernization of the User Management platform — authentication (Auth0, SAML 2.0, OAuth2, JWT), authorization, access control, and user provisioning across Arcadia products
- Building backend services and APIs across a polyglot stack (TypeScript/NestJS, Go, Python) supporting secure, multi-tenant access models
- Owning Auth0 tenant management, cross-application SSO, and session infrastructure — including SAML integrations, identity provider relationships, and Hydra session management
- Managing cloud infrastructure through Infrastructure-as-Code (Terraform/Terragrunt) and AWS-native services (Lambda, API Gateway, DynamoDB, Cognito, SNS)
- Defining SLOs and designing telemetry for key features, ensuring robust monitoring, canary, and standard rollout strategies — with shared ownership of on-call reliability
- Partnering with cross-functional stakeholders — including Product, Security, and SRE — to ensure alignment between technical execution and organizational priorities
- Providing leadership, mentorship, and clarity in complex, ambiguous problem spaces
What You'll Bring
- 10+ years of professional full-stack software engineering experience with a focus on backend and distributed systems
- Proven success building and scaling identity and access management systems, including authentication (SAML 2.0, OAuth2, JWT) and fine-grained authorization frameworks
Want more jobs like this?
Get jobs in Flexible / Remote delivered to your inbox every week.

Would Love for You to Have
- Experience modernizing identity and access systems or other critical, cross-cutting platform services
- Familiarity with API gateway design, centralized JWT validation, and event-driven architectures
- Exposure to data streaming or message-driven systems (Kafka, Kinesis, SNS/SQS)
- Experience in healthcare technology, HIPAA compliance, or other regulated data environments
- Polyglot engineering experience — comfortable working across multiple languages and frameworks (e.g., Python, Java, Go) when solving complex distributed system challenges
- Experience building internal developer tooling, custom agents, or platform-level AI integrations that go beyond individual productivity — shaping how an engineering organization adopts and scales AI-assisted development
What You'll Get
- The opportunity to own one of Arcadia's most critical platform domains and drive its evolution for scale and reliability
- A mission-driven culture where your work improves patient outcomes and healthcare delivery
- Competitive compensation, comprehensive benefits, and Flexible Time Off (~22-day company average)
- A collaborative, remote-friendly engineering culture that values innovation, curiosity, and technical excellence
- A team that is actively investing in AI-augmented engineering practices — you won't just use these tools, you'll help define how the organization adopts them
Perks and Benefits
Health and Wellness
- Pet Insurance
- Health Insurance
- Dental Insurance
- Vision Insurance
- FSA
- HSA
- HSA With Employer Contribution
- Life Insurance
- Short-Term Disability
- Long-Term Disability
- Fitness Subsidies
- Mental Health Benefits
Parental Benefits
- Family Support Resources
- Non-Birth Parent or Paternity Leave
- Adoption Leave
- Fertility Benefits
- Birth Parent or Maternity Leave
Work Flexibility
- Hybrid Work Opportunities
- Flexible Work Hours
- Remote Work Opportunities
Office Life and Perks
- Casual Dress
- Pet-friendly Office
- Snacks
- Company Outings
- Commuter Benefits Program
Vacation and Time Off
- Paid Vacation
- Unlimited Paid Time Off
- Paid Holidays
- Personal/Sick Days
- Leave of Absence
Financial and Retirement
- 401(K) With Company Matching
- 401(K)
- Performance Bonus
Professional Development
- Work Visa Sponsorship
- Promote From Within
- Access to Online Courses
- Lunch and Learns
Diversity and Inclusion
- Diversity, Equity, and Inclusion Program
- Employee Resource Groups (ERG)
Company Videos
Hear directly from employees about what it is like to work at Arcadia.