Senior Developer Applications - API

Company Overview
ImmunityBio, Inc. (NASDAQ: IBRX) is a commercial-stage biotechnology company developing cell and immunotherapy products that are designed to help strengthen each patient's natural immune system, potentially enabling it to outsmart the disease and eliminate cancerous or infected cells. We envision a day when we no longer fear cancer, but can conquer it, thanks to the biological wonder that is the human immune system. Our scientists are working to develop novel therapies that harness that inherent power by amplifying both branches of the immune system, attacking cancerous or infected cells today while building immunological memory for tomorrow. The goal: to reprogram the patient's immune system and treat the host rather than just the disease.

Why ImmunityBio?
* ImmunityBio is developing cutting-edge technology with the goal to transform the lives of patients with cancer and develop next-generation therapies and vaccines that complement, harness and amplify the immune system to defeat cancers and infectious diseases.
* Opportunity to join a publicly traded biopharmaceutical company with headquarters in Southern California.
* Work with a collaborative team with the ability to work across different areas of the company.
* Ability to join a growing company with professional development opportunities.

Position Summary

The Senior Developer, Applications - API is responsible for designing and building business applications and support functions based upon identified business requirements and best practice. The role leads to the implementation of strategic business objectives with an emphasis on application architecture and applies advanced analysis skills and experience in principles of architecting, designing, demonstrating, and positioning. This position will help plan, coordinate, architect, and develop all activities related to the integration of software programs, applications, and third-party solutions as required to meet the business requirements of the organization.

Essential Functions

• Design and implement end-to-end API integrations, including authentication, error handling, rate limiting, and retries.
• Build and maintain scalable, secure, and well-documented RESTful and GraphQL APIs for internal and external consumption.
• Evaluate and integrate with third-party APIs from partners, vendors, and platforms (e.g., Stripe, Salesforce, Shopify, AWS, Twilio).
• Adhere to secure coding practices and ensure all integrations adhere to security and compliance standards (e.g., OWASP Top 10, data encryption, access control).
• Conduct regular code audits and security reviews of API implementations, both internal and third-party.
• Design authentication and authorization flows using best practices such as OAuth 2.0, API tokens, and JWT with expiration/refresh strategies.
• Develop reusable integration patterns and middleware services to streamline future API work.
• Ensure integration reliability with automated testing, monitoring, logging, and alerting.
• Collaborate with DevOps teams to manage API gateway configurations, reverse proxies, and load balancing (e.g., AWS API Gateway, NGINX, Kong).
• Secure API endpoints using industry-standard practices (e.g., OAuth2, OpenID Connect, HMAC, API key management).
• Optimize API performance and scalability using caching (e.g., Redis, CDN), pagination, and asynchronous processing where appropriate.
• Work with large datasets in transit and build resilient data synchronization mechanisms.
• Maintain backward compatibility and version control for public-facing APIs.
• Perform code reviews and enforce best practices around integration architecture and error handling.
• Create and maintain comprehensive documentation on all integrations, development, and changes.
• Participate in incident response and postmortems related to API outages or third-party failures.
• Create, edit and adhere to Standard Operating Procedures (SOPs), process improvements, and standardization of templates.
• Perform ad-hoc and cross-functional projects assigned to support business needs and provide developmental opportunities.

Education & Experience

• Bachelor's degree in computer science, Engineering, or a related field with 5+ years of backend development experience with a strong focus on API architecture and integration required.
• Experience withAPI schema managementtools likeSwagger/OpenAPI,Postman, orStoplight required.
• Experience withAPI Gateway platforms(e.g., AWS API Gateway, Kong, Apigee, NGINX) required.
• Experience withtransport layer security (TLS), HTTPS, certificate pinning, and secure transmission of sensitive data required.
• Experience usingstatic and dynamic analysis toolsfor security testing (e.g., Snyk, SonarQube, Burp Suite, OWASP ZAP) preferred.

Knowledge, Skills, & Abilities

• Proficiency in at least one backend language or framework:Node.js, Python (Django/Flask/FastAPI), Java (Spring Boot), or C# (.NET Core).
• Deep understanding ofREST, GraphQL, Webhooks, WebSockets, andgRPC.
• Knowledge ofHTTP/HTTPS protocols,status codes,CORS,content negotiation, andidempotency.
• Proficiency working withOAuth 2.0,JWT,API keys, andsecure token exchangemechanisms.
• Familiarity withmessage brokers and event-driven architectures(e.g., Kafka, RabbitMQ, SNS/SQS).
• Strong Git/GitHub (or GitLab/Bitbucket) workflow experience, including branching strategies and CI/CD.
• Familiarity withserverless integration modelsusingAWS Lambda, Azure Functions, orGCP Cloud Functions.
• Proficiency withdata transformation tools(e.g., JSONPath, JQ, XML/XSLT).
• Understanding ofOWASP API Security Top 10, with experience mitigating common vulnerabilities likeinjection, insecure object references, and excessive data exposure.
• Familiarity withIAM (Identity and Access Management)principles and tools (e.g., RBAC, ABAC, AWS IAM).
• Knowledge ofAPI rate limiting, throttling, IP whitelisting, and other protective measures to prevent abuse.
• Understanding ofmiddleware platforms(e.g., MuleSoft, Workato, Dell Boomi) oriPaaS tools.
• Exposure tomonitoring and tracing toolslikeDatadog, New Relic, Prometheus, Grafana, or OpenTelemetry.
• Working knowledge ofDockerand basic container orchestration withKubernetesor ECS/EKS.

Working Environment / Physical Environment

• This position works in El Segundo, CA
• Regular work schedule is Monday - Friday, within standard business hours. Flexibility is available with manager approval.
• Must possess mobility to work in a standard office setting and to use standard office equipment, including a computer.
• Lift and carry materials weighing up to 20 pounds.

This position is eligible for a discretionary bonus and equity award. The annual base pay range for this position is below. The specific rate will depend on the successful candidate's qualifications, prior experience as well as geographic location.

$153,000 (entry-level qualifications) to $170,000 (highly experienced) annually

The application window is anticipated to close on 60 days from when it is posted or sooner if the position is filled or closed.

ImmunityBio employees are as valuable as the people we serve. We have built a resource of robust benefit offerings to best support the total wellbeing of our team members and their families. Our competitive total rewards benefits package, for eligible employees, include: Medical, Dental and Vision Plan Options * Health and Financial Wellness Programs * Employer Assistance Program (EAP) * Company Paid and Voluntary Life/AD&D, Short-Term and Long-Term Disability * Healthcare and Dependent Care Flexible Spending Accounts * 401(k) Retirement Plan with Company Match * 529 Education Savings Program * Voluntary Legal Services, Identity Theft Protection, Pet Insurance and Employee Discounts, Rewards and Perks * Paid Time Off (PTO) includes: 11 Holidays * Exempt Employees are eligible for Unlimited PTO * Non-Exempt Employees are eligible for 10 Vacation Days, 56 Hours of Health Pay, 2 Personal Days and 1 Cultural Day * We are committed to providing you with the tools and resources you need to optimize your Health and Wellness.

At ImmunityBio, we are an equal opportunity employer dedicated to diversity in the workplace. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law.