About the role
Our client, a large small-business accounting and financial software company, is extending its platform to handle healthcare-regulated data. Its core accounting workflows touch nearly every part of the product, and much of the stored data is not yet protected to HIPAA standards. They need a senior backend engineer who has already taken a non-healthcare product through HIPAA compliance and can drive the same change across many services with minimal ramp-up.
What you'll do
Assess the existing platform and identify where regulated data flows, is stored, and is exposed across services.
Design and implement encryption at rest and in transit, access controls, audit logging, and data-handling changes at the database and service level.
Work through multiple services and platforms to bring each into compliance, not just one.
Define a remediation approach for legacy customer data that was added before the compliance changes, so previously stored data is cleaned up and protected.
Translate HIPAA requirements into practical engineering standards, and help create the SOPs and documentation that a non-medical company doesn't already have in place.
Partner closely with a small team and work independently, with little hand-holding.
What we're looking for
Senior, Senior Staff or Architect-level backend engineer, hands-on at the database and systems level.
Direct experience making a non-healthcare product or platform HIPAA compliant. This is the key requirement. Experience at a healthcare organization where compliance programs and SOPs already exist is not the same thing.
Strong understanding of what HIPAA requires of a product (PHI handling, technical safeguards, encryption, access and audit controls, breach and retention considerations).
Deep backend skills: data stores, service architecture, data migration and remediation at scale.
Experience in multi-service SaaS, ERP, accounting, payroll, HR or similar business-software environments (for example, NetSuite-type platforms).
Comfortable ramping quickly from documentation and self-directed learning.
Nice to have
Experience with financial or accounting software.
Experience remediating or encrypting legacy data in place.
Experience with a company-level HIPAA program or certification effort.
![]()
