Principal Engineer API Platform - cvshealth

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time.

About the Role

At CVS Health, we are building a developer platform that sets the standard for how hundreds of engineers across Retail, Pharmacy, Health Solutions, and Aetna design, build, secure, and publish APIs. Our platform spans an internal and external developer portal, an API catalog that drives discovery and prevents duplication across the enterprise, and the systems responsible for delivering APIs, agent-to-agent integrations, and MCP servers to both cloud and on-premises gateways. As a Principal Engineer on this platform, you will own the technical direction and architecture across several teams building these capabilities. This is a senior, cross-cutting role with significant organizational influence.

You will establish the engineering practices that teams build on, define how APIs are designed and governed at scale, and lead the effort to embed AI-powered capabilities into the developer experience itself, from intelligent coding assistance that guides engineers toward compliant API patterns to MCP servers that make the enterprise API catalog available as a live, queryable context for AI-enabled workflows.

This is a rare opportunity to shape the developer experience for a Fortune 6 company from the ground up, working with a high level of autonomy and leaving a long-term imprint on how CVS engineers build and deliver software.

What We Expect of You

API Design, Architecture & Governance

• You are a recognized authority on API design, able to define and enforce standards for REST, GraphQL, event-driven, and MCP-based interfaces across the enterprise
• You understand API lifecycle management from specification and contract-first design through versioning, deprecation, and eventual retirement
• You can architect systems for delivering APIs and integrations to multi-environment targets, including public cloud (GCP, AWS, Azure) and on-premises gateways
• You have deep experience with API gateway technologies, service mesh, and the infrastructure concerns that underpin reliable, high-throughput API delivery
• You understand what it takes to build and operate an API catalog at enterprise scale, including taxonomy, discoverability, and ownership models

Security & Compliance

• You approach API security as a first-class architectural concern, with hands-on expertise in OAuth 2.0, OIDC, mTLS, scopes, rate limiting, and threat modeling for APIs