• Hands-on design and implementation of Kotlin backend services to improve our device management workflows for customers. • Lead the design and development of the next generation of Toast’s software services and applications. • Collaborate with Product Management, Hardware, QA and other Software teams on the product roadmap and requirements. • Create technical requirements and detailed designs of the software system being developed. • Lead effort estimation sessions and use sound judgment to enable planning of projects. • Diagnose performance bottlenecks and implement optimizations. • Help set the standard for software quality by adopting modern software test frameworks and practices in day to day development.

• Develop and evolve microservices responsible for processing and distributing clinical and laboratory data. • Build integrations between internal systems and external partners. • Develop REST APIs for querying and managing patient information and consents. • Implement asynchronous processing flows using AWS SQS and SNS. • Participate in the evolution of the platform's event-driven architecture. • Work with data transformation and processing following the FHIR standard. • Develop integrations with MongoDB, Redis, and external services. • Ensure quality through automated tests and code reviews. • Perform troubleshooting of distributed flows and analyze production incidents. • Participate in technical definitions and architectural decisions for platform services. • Collaborate with multidisciplinary teams for continuous product and integration improvements. • Contribute to observability, monitoring, and performance optimization of services.

• Own and operate CyberArk PAM Suite globally — vault configuration, safe structure, session recording, JIT workflows, rotation schedules, and CyberArk for OT session gating • Develop and maintain the PAM roadmap, aligning it with overall cybersecurity strategy and business objectives • Design and implement Just-In-Time privileged access for all Tier 0, Tier 1, and Tier 2 accounts — no standing privilege, all sessions vaulted and recorded • Own the Non-Human Identity governance program — service account vaulting, rotation automation, NHI inventory, and governance framework • Govern PAM for OT alongside the OT Architect — vendor session gating, session recordings, and OT privileged account management • Define and enforce PAM design standards — vault structure, safe naming conventions, rotation schedules, and session recording retention policies • Own the Privileged Access Management technical roadmap and vendor relationship — product roadmap briefings, TAM relationship, upgrade schedule • Integrate CyberArk Threat Analytics with MSSP and SIEM for privileged account anomaly detection • Lead the design, architecture, and implementation of complex Privileged Access Management (PAM) solutions • Translate business requirements and security policies into technical PAM solutions and configurations • Collaborate with various IT teams (e.g., infrastructure, applications, network) to ensure seamless integration of PAM solutions • Provide technical expertise and guidance on PAM best practices, security controls, and compliance requirements (e.g., NIST, ISO 27001, GDPR) • Conduct security assessments, vulnerability analyses, and penetration testing related to privileged access • Develop and implement automation scripts and tools to streamline PAM operations and enhance security posture • Create and maintain comprehensive documentation, including architectural designs, solution configurations, and operational procedures • Support incident response activities related to privileged access breaches or anomalies • Mentor junior security engineers and provide technical leadership within the cybersecurity team • Stay current with emerging PAM technologies, threats, and industry trends.

• Decompose complex business problems into precise technical specifications that enable AI agents to implement code directly and accurately. • Develop and own domain services in TypeScript and Node.js, including case lifecycle state machines, pricing engines, and payment-schedule logic. • Lead "business-rule archaeology" by extracting logic from legacy Java and PL/SQL packages to reimplement them in a modern, test-driven environment. • Ensure financial-grade correctness by building append-only audit trails, segregation-of-duties enforcement, and reproducible calculations for federal audits. • Deliver complete vertical slices of business capability across the full stack, from UI components in React to infrastructure-as-code in AWS CDK. • Perform rigorous peer reviews and maintain an always-green main branch through continuous integration and automated testing (Vitest/Playwright). • Collaborate with stakeholders to provide a "always-on" beta environment, ensuring quick iterations and mission alignment.