Senior Software Engineer (Trust Foundations)

1 in 4 people in the US have a treatable mental health condition, but most providers don't accept insurance, making therapy too expensive for most people. Headway’s mission is to fix this by building a new mental healthcare system everyone can access. We started by solving the biggest barrier to care: insurance. The admin work - credentialing, claims, payment reconciliation - is a nightmare. We've automated that. But we're going further. Over 75,000 providers across all 50 states run their practice on our software, serving over 1 million patients. We are building the best tools for therapists to run their entire practice, reimagining the experience of finding a therapist, and investing in the platform foundations to enable this at scale. We aren't just a billing layer; we are becoming the platform where care actually happens. We're a Series D company with $325M+ in funding (a16z, Accel, Spark Capital, etc.), looking for exceptional people to help us achieve this mission. We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better. About this role: Building for trust is non‑negotiable in our mission of making mental healthcare more accessible and affordable across the US: patients share sensitive information, payers demand demonstrably strong controls, and providers depend on reliable, secure infrastru [... source excerpt omitted ...] ware Engineer on our Trust Foundations team, you’ll be working on 0-1 access control (RBAC/ABAC), OAuth 2.0/OIDC platforms while shaping the long‑term vision for trust at Headway. You will translate open identity and authorization standards into scalable building blocks; embed privacy‑by‑design and reliability principles into everything we build; and mentor engineers across the company in Trust first thinking. What you’ll do here: Design, build, and operate core trust primitives - authentication providers, authorization engines, data governance, stratified encrypted data stores, and tamper‑evident audits. Embed security & privacy by design - Partner with Legal / Compliance to [... source excerpt omitted ...] rol patterns that enable product teams to move quickly while ensuring security-by-default (least‑privilege access, encryption in transit and at rest, audit hooks). Turn ambiguous requirements into incremental delivery plans - Lead architecture reviews; break large problems into testable milestones; and make pragmatic build‑vs‑buy decisions in a regulated domain. Champion operational excellence - Instrument services, tune alerting, own on‑call runbooks, and drive post‑incident hardening. Elevate engineering culture - Mentor teammates, document patterns, and help recruit the next generation of Headway engineers. Who you are: Security Mindset: You are passionate about cybersecurity