This role will play a key role in designing, building, and maintaining the Identity and Access Management (IAM) systems that power CharmHealth’s cloud-based Electronic Health Record (EHR) platform. This position blends secure software engineering, cloud systems architecture, and regulatory compliance, ensuring that all users, integrations, and systems can safely access and interact within CharmHealth’s ecosystem. This engineer will own end to end development of authentication and authorization features such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), federated identity, and role-based access control (RBAC) while embedding best practices for data protection and compliance with healthcare standards like HIPAA, NIST, SOC 2, and ISO 27001. The role requires a strong foundation in Java and Python, deep understanding of IAM protocols, and a passion for building secure, scalable distributed systems. The engineer will collaborate closely with Product Engineering, DevOps, and Security teams to implement new features, optimize performance, and ensure platform stability across CharmHealth’s fast-growing health technology environment. CharmHealth works like a startup and this candidate will need to be okay with wearing multiple hats and learning on the fly as well as be adaptable.