Staff Engineer (HIPAA)

Quick Facts

• Role: Staff Engineer (HIPAA)

• Focus: Hands-on backend engineering for HIPAA compliance (PHI handling, technical safeguards, and legacy data remediation)

Description

Assess the existing platform to find where regulated data flows, is stored, and is exposed across services. Design and implement encryption at rest and in transit, access controls, audit logging, and database/service-level data-handling changes. Deliver compliance across multiple services and platforms, including remediation of legacy customer data, and translate HIPAA requirements into engineering standards, SOPs, and documentation.

Responsibilities

• Identify regulated data flows, storage, and exposure points across services

• Implement HIPAA technical safeguards: encryption at rest/in transit, access controls, and audit logging

• Apply data-handling changes at both the database and service level

• Remediate legacy customer data added before compliance changes

• Convert HIPAA requirements into practical engineering standards and help create SOPs/documentation

• Collaborate with a small team and work independently with limited hand-holding

Requirements

• Senior, Senior Staff, or Architect-level backend engineer; hands-on at the database and systems level

• Direct experience making a non-healthcare product or platform HIPAA compliant

• Strong understanding of HIPAA requirements for product PHI handling, technical safeguards, encryption, access and audit controls, breach, and retention considerations

• Deep backend skills in data stores, service architecture, data migration, and remediation at scale

• Experience with multi-service SaaS, ERP, accounting, payroll, HR, or similar business-software environments (e.g., NetSuite-like platforms)

• Ability to ramp quickly from documentation and self-directed learning

Benefits

• Work on real-world HIPAA compliance engineering across multiple services and legacy data

• High-ownership role within a small team with strong independence