API Security Developer - Hybrid

Genesis
10 is currently seeking an API Security Developer for a remote or hybrid position with a Regional Health Insurance Provider located in Eagan, MN. This is a 4-6+ month contract opportunity.

Pay range: $62.60 - $72.60 per hour

We are seeking an experienced API Security Developer to support enterprise interoperability and patient access initiatives within a large healthcare payer environment. This role will focus on identity and access management, API security modernization, and secure healthcare data integrations supporting FHIR-based interoperability solutions. The ideal candidate will bring a blend of security analysis, application development, and healthcare API integration experience, with strong knowledge of OAuth 2.0, OpenID Connect, and modern API authentication frameworks.

• Support API security and identity modernization initiatives across enterprise healthcare applications
• Design, develop, and enhance secure authentication and authorization solutions
• Assist with migration activities from Okta to Auth0, including translation of security constructs and policies
• Refactor and modernize application authentication and authorization flows
• Implement and support OAuth 2.0 and OpenID Connect integrations, including PKCE, client credentials, s, scopes, and claims management
• Configure and support token transformation, claim mapping, and API authorization strategies
• Develop and maintain secure backend integrations and APIs using Node.js, JavaScript, Java, and Spring Boot
• Support SMART on FHIR authorization frameworks and interoperability initiatives
• Work with FHIR resources including Patient, Practitioner, and Observation
• Collaborate with cross‑functional engineering, architecture, security, and interoperability teams
• Participate in solution analysis, technical design, development, testing, and implementation activities
• Help define and document API security standards, best practices, and governance approaches

• Healthcare payer industry experience
• SMART (Suitable Medical Applications and Reusable Technologies) on FHIR experience
• Experience with Identity and Access Management (IAM) concepts and enterprise authentication frameworks
• Experience working on migration effort with Okta to Auth0
• Knowledge of Kong API gateway
• Strong hands‑on experience with OAuth 2.0 and OpenID Connect
• Experience with API security development and secure integration patterns
• Experience with Auth0 and/or Okta platforms
• Ability to translate security constructs such as Groups to roles/permissions, Policies to actions/rules, Authorization servers to APIs, and Token and claim transformations
• Development experience with JavaScript / Node.js (most important) and Java / Spring Boot (plus)
• Experience building or supporting RESTful APIs and backend integrations
• Strong understanding of secure authentication and authorization flows
• Experience working in Agile development environments

• Experience supporting interoperability or patient access initiatives
• Familiarity with FHIR resources and healthcare API standards
• Experience supporting cloud‑native or enterprise modernization initiatives
• Knowledge of API gateway or enterprise security tooling

• Access to hundreds of clients, most who have been working with Genesis
  10 for 5-20+ years.
• The opportunity to have a career‑home in Genesis
  10; many of our consultants have been working exclusively with Genesis
  10 for years.
• Access to an experienced, caring recruiting team (more than 7 years of experience, on average.)
• Behavioral Health Platform
• Medical, Dental, Vision
• Health Savings Account
• Voluntary Hospital Indemnity (Critical Illness & Accident)
• Voluntary Term Life Insurance
• 401K
• Sick Pay (for applicable states/municipalities)
• Commuter Benefits (Dallas, NYC, SF, and Illinois)

Genesis
10 is an Equal Opportunity Employer. Candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.