Key Facts

Remote From:

Full time

English

Hard Skills

Access Controls Authentication Servers Proof Of Concept (POC) Development Role-Based Access Control (RBAC) Informed Consent Application Programming Interface (API) Customer Experience Improvement Stakeholder Communications Business Software

Other Skills

•
Communication
•
Troubleshooting (Problem Solving)
•
Problem Solving

Roles & Responsibilities

5+ years of experience with FHIR integrations
Proficiency in SMART on FHIR and OAuth 2.0 development, including PKCE and authorization code flow
Familiarity with FHIR R4 data modeling and RESTful API integration
Advanced English (B2+) and ability to work with IT leadership and customer-facing stakeholders

Requirements:

Implement SMART on FHIR authorization flows (EHR launch and standalone) using PKCE and OAuth 2.0 authorization code flow with token exchange and scoped FHIR API calls
Design and implement FHIR R4 resource interactions (read, search, query) and manage token exchange and scope validation
Enforce patient- and user-level access controls aligned with SMART specifications and troubleshoot authentication, consent, and token expiration issues
Collaborate with IT leadership and stakeholders to deliver rapid POC and customer-facing solutions

Job description

Job Opportunity only available for professionals in Latin America.

This is an opportunity to work in a fast-paced healthcare environment driving real-world interoperability through focused, high-impact FHIR integration.

The ideal candidate will be proficient in SMART on FHIR and OAuth 2.0 development, with strong hands-on experience implementing authorization code flow (PKCE), managing scopes, and integrating directly with EHR FHIR endpoints. This role requires solid expertise in FHIR R4 data modeling and RESTful API integration, including working with core resources such as Patient, Condition, Observation, MedicationRequest, and Encounter.

Requirements:

Advanced English level (B2 or Higher) to ensure fluent communication.
+5 years of experience working with FHIR integrations.
Proficient in SMART on FHIR / OAuth 2.0 development.
Familiar with FHIR R4 data modeling and API integration.
Needs to be independent, collaborate with IT leadership and possible some business users.
Familiar in working with stakeholders, etc (customer facing).
The project is meant to have a rapid POC delivery; single condition (AD), single pilot site and no APIM layer.

Responsibilities:

Implement SMART on FHIR authorization flows (EHR launch & standalone launch).
Configure OAuth 2.0 authorization code flow with PKCE.
Implement the SMART EHR Launch sequence: launch context handoff from ModMed, OAuth 2.0 authorization code flow with PKCE, token exchange, and scoped FHIR API calls.
Design and implement FHIR R4 resource interactions (read/search/query).
Manage token exchange, refresh tokens, and scope validation.
Enforce patient- and user-level access controls aligned with SMART specifications.
Troubleshoot authentication, consent, and token expiration issues.