Staff Engineer (HIPPA)

Project overview

hat you'll do

What we're looking for

• Assess the existing platform and identify where regulated data flows, is stored, and is exposed across services.
• Design and implement encryption at rest and in transit, access controls, audit logging, and data-handling changes at the database and service level.
• Work through multiple services and platforms to bring each into compliance, not just one.
• Define a remediation approach for legacy customer data that was added before the compliance changes, so previously stored data is cleaned up and protected.
• Translate HIPAA requirements into practical engineering standards, and help create the SOPs and documentation that a non-medical company doesn't already have in place.
• Partner closely with a small team and work independently, with little hand-holding.
• Senior, Senior Staff or Architect-level backend engineer, hands-on at the database and systems level.
• Direct experience making a non-healthcare product or platform HIPAA compliant. This is the key requirement. Experience at a healthcare organization where compliance programs and SOPs already exist is not the same thing.
• Strong understanding of what HIPAA requires of a product (PHI handling, technical safeguards, encryption, access and audit controls, breach and retention considerations).
• Deep backend skills: data stores, service architecture, data migration and remediation at scale.
• Experience in multi-service SaaS, ERP, accounting, payroll, HR or similar business-software environments (for example, NetSuite-type platforms).
• Comfortable ramping quickly from documentation and self-directed learning.

Nice to have

Job Facts: Contract Independent | Contract W2 | 6 Months | Hybrid | Depends on Experience

Skills: Java + spring boot + Microservices, Payroll, OOP -C++/ Java, Bank Accounting, Java SpringBoot, SaaS, ERP, HIPPA and others), AWS, Confluence, Jira

Reference: Dice Id: 91102852 | Position Id: 9137191

• Experience with financial or accounting software.
• Experience remediating or encrypting legacy data in place.
• Experience with a company-level HIPAA program or certification effort.

Project details

• Start: flexible
• Duration: 6 Months
• Remote: hybrid
• Location: Mountain View, CA, US, US
• Languages: English