About this role
Responsibilities
• Map where regulated data flows, is stored, and is exposed across services.
• Implement encryption at rest and in transit, access controls, audit logging, and data-handling changes at the database and service levels.
• Bring multiple services and platforms into compliance and define a remediation approach for legacy customer data.
• Translate HIPAA requirements into practical engineering standards, SOPs, and documentation. Work independently with a small team.
Required Experience
• Direct experience taking a non-healthcare product or platform through HIPAA compliance.
• Hands-on senior, senior staff, or architect-level backend engineering with deep experience in data stores, service architecture, migration, and remediation at scale.
• Knowledge of protected health information (PHI) handling, technical safeguards, encryption, access and audit controls, breach considerations, and retention.
• Multi-service SaaS, ERP, accounting, payroll, HR, or similar business software experience. Ability to ramp up quickly from documentation and self-directed learning.
Preferred Experience
• Financial or accounting software. Legacy data remediation or in-place encryption. Company-level HIPAA program or certification effort.
Listed skills — Java, Spring Boot, microservices, object-oriented programming in C++ or Java, SaaS, ERP, payroll, bank accounting, HIPAA, AWS, Confluence, and Jira.
Interview process — 30-minute screen followed by two to three rounds with the technical lead and manager, including a technical evaluation