Role: Senior/Staff Backend Engineer, HIPAA Compliance (Non-Healthcare Product Experience)
Location: Mountain View, CA, onsite 3 days a week
Skills
Java + spring boot + Microservices, Payroll, OOP -C++/ Java, Bank Accounting, Java SpringBoot, SaaS, ERP, HIPPA and others), AWS, Confluence, Jira
About the role
Our client, a large small-business accounting and financial software company, is extending its platform to handle healthcare-regulated data. Its core accounting workflows touch nearly every part of the product, and much of the stored data is not yet protected to HIPAA standards. They need a senior backend engineer who has already taken a non-healthcare product through HIPAA compliance and can drive the same change across many services with minimal ramp-up.
What you'll do
- Assess the existing platform and identify where regulated data flows, is stored, and is exposed across services.
- Design and implement encryption at rest and in transit, access controls, audit logging, and data-handling changes at the database and service level.
- Work through multiple services and platforms to bring each into compliance, not just one.
- Define a remediation approach for legacy customer data that was added before the compliance changes, so previously stored data is cleaned up and protected.
- Translate HIPAA requirements into practical engineering standards, and help create the SOPs and documentation that a non-medical company doesn't already have in place.
- Partner closely with a small team and work independently, with little hand-holding.
What we're looking for
- Senior, Senior Staff or Architect-level backend engineer, hands-on at the database and systems level.
- Direct experience making a non-healthcare product or platform HIPAA compliant. This is the key requirement. Experience at a healthcare organization where compliance programs and SOPs already exist is not the same thing.
- Strong understanding of what HIPAA requires of a product (PHI handling, technical safeguards, encryption, access and audit controls, breach and retention considerations).
- Deep backend skills: data stores, service architecture, data migration and remediation at scale.
- Experience in multi-service SaaS, ERP, accounting, payroll, HR or similar business-software environments (for example, NetSuite-type platforms).
- Comfortable ramping quickly from documentation and self-directed learning.
- Experience with financial or accounting software.
- Experience remediating or encrypting legacy data in place.
- Experience with a company-level HIPAA program or certification effort.
—
—
