In this role, you will build these partner-facing surfaces and the core APIs powering them—ranging from embeddable widgets, preview applications, and booking flows to SDKs and remote MCP servers. ? AI-Native Culture: This is a hands-on, AI-native engineering role. You will leverage coding agents and reusable AI skills daily to ship high-quality, secure code at an accelerated pace. ?

Key Responsibilities
• Embeddable Surfaces: Build embeddable widgets using Web Components / iframes featuring style isolation, CSP compatibility, postMessage communication protocols, and strict versioning.
• Core Application & UX: Develop WCAG 2.1 AA-compliant questionnaire and booking flows, white-label theming systems, and partner preview environments.
• Backend & API Architecture: Implement Python services and REST API endpoints based on shared OpenAPI contracts, managing multi-tenancy and partner authentication.
• Developer Experience & SDKs: Generate client SDKs from OpenAPI specs, write developer documentation, and build partner sandbox environments.
• Security & Compliance: Ensure strict handling and protection of Protected Health Information (PHI).
• Quality & Operations: Write unit, integration, and E2E tests,



ship continuously through CI/CD pipelines, monitor production applications, and participate in incident response. ✅ Mandatory Requirements
•

Experience:
6+ years of full-stack engineering experience shipping production web applications.
• Embeddable Tech Stack: Proven experience building embeddable widgets, third-party Web Components, or SDKs running inside partner products.
• Core Tech Stack: Strong TypeScript + React on the frontend, and Python (e.g., FastAPI) for backend services.
• Web Platform Mastery: Deep understanding of Custom Elements, Shadow DOM, iframe sandboxing, Content Security Policy (CSP), and postMessage.
• API & Auth: REST API design with OpenAPI (including SDK generation). Practical knowledge of OAuth 2.0, OIDC, and SSO.
• Healthcare & Compliance: Direct experience working with PII and/or PHI under HIPAA regulations.
• AI Tooling: Daily proficiency with AI coding tools (e.g., Claude Code) combined with strong technical judgment for security and testing.
• Ownership Mindset: Focus on driving features to landed and monitored in production, not just merged.

📌 ? Senior Full-Stack Engineer (México)
🏢 Luxoft
📍 México