5-7 years of experience in backend engineering or architecture roles.
Proven track record of guiding non-healthcare platforms through HIPAA compliance.
Deep understanding of data stores, service architecture, and large-scale remediation.
Familiarity with protected health information (PHI) and its technical safeguards.
Experience with multi-service SaaS or ERP systems, with a strong ability to learn independently.
Responsibilities
Map regulated data flows and storage across various services.
Implement encryption, access controls, and audit logging for data security.
Ensure compliance for multiple services and develop remediation strategies for legacy data.
Translate HIPAA requirements into actionable engineering standards and documentation.
Work independently within a small team to achieve compliance goals.
Benefits
Opportunity for advancement.
Paid time off.
Training and development opportunities.
Full Job Description
Benefits:
Opportunity for advancement
Paid time off
Training & development
Responsibilities
Map where regulated data flows, is stored, and is exposed across services.
Implement encryption at rest and in transit, access controls, audit logging, and data-handling changes at the database and service levels.
Bring multiple services and platforms into compliance and define a remediation approach for legacy customer data.
Translate HIPAA requirements into practical engineering standards, SOPs, and documentation. Work independently with a small team.
Required Experience
Direct experience taking a non-healthcare product or platform through HIPAA compliance.
Hands-on senior, senior staff, or architect-level backend engineering with deep experience in data stores, service architecture, migration, and remediation at scale.
Knowledge of protected health information (PHI) handling, technical safeguards, encryption, access and audit controls, breach considerations, and retention.
Multi-service SaaS, ERP, accounting, payroll, HR, or similar business software experience. Ability to ramp up quickly from documentation and self-directed learning.
Preferred Experience
Financial or accounting software. Legacy data remediation or in-place encryption. Company-level HIPAA program or certification effort.
Listed skills - Java, Spring Boot, microservices, object-oriented programming in C++ or Java, SaaS, ERP, payroll, bank accounting, HIPAA, AWS, Confluence, and Jira.
Interview process - 30-minute screen followed by two to three rounds with the technical lead and manager, including a technical evaluation
