Senior/Staff Backend Engineer-HIPAA Compliance

Senior/Staff Backend Engineer, HIPAA Compliance (Non-Healthcare Product Experience)

Location: Mountain View, CA, onsite 3 days a week
Start: ASAP

About the role
Our client, a large small-business accounting and financial software company, is extending its platform to handle healthcare-regulated data. Its core accounting workflows touch nearly every part of the product, and much of the stored data is not yet protected to HIPAA standards. They need a senior backend engineer who has already taken a non-healthcare product through HIPAA compliance and can drive the same change across many services with minimal ramp-up.

What you'll do

• Assess the existing platform and identify where regulated data flows, is stored, and is exposed across services.
• Design and implement encryption at rest and in transit, access controls, audit logging, and data-handling changes at the database and service level.
• Work through multiple services and platforms to bring each into compliance, not just one.
• Define a remediation approach for legacy customer data that was added before the compliance changes, so previously stored data is cleaned up and protected.
• Translate HIPAA requirements into practical engineering standards, and help create the SOPs and documentation that a non-medical company doesn't already have in place.
• Partner closely with a small team and work independently, with little hand-holding.

What we're looking for

• Senior, Senior Staff or Architect-level backend engineer, hands-on at the database and systems level.
• Direct experience making a non-healthcare product or platform HIPAA compliant. This is the key requirement. Experience at a healthcare organization where compliance programs and SOPs already exist is not the same thing.
• Strong understanding of what HIPAA requires of a product (PHI handling, technical safeguards, encryption, access and audit controls, breach and retention considerations).
• Deep backend skills: data stores, service architecture, data migration and remediation at scale.
• Experience in multi-service SaaS, ERP, accounting, payroll, HR or similar business-software environments (for example, NetSuite-type platforms).
• Comfortable ramping quickly from documentation and self-directed learning.

Nice to have

• Experience with financial or accounting software.
• Experience remediating or encrypting legacy data in place.
• Experience with a company-level HIPAA program or certification effort.