Cloud Platform Engineer - Connected Medical Devices

We are looking for an experienced Cloud Platform Engineer to build and operate the cloud services layer behind our connected medical device platform on Microsoft Azure - from device telemetry ingress through storage, orchestration, and clinical system integration, under HIPAA and GDPR constraints., * Design and operate the REST/HTTPS device-to-cloud ingestion path (TLS 1.2/1.3, mTLS or token-based device auth) and manage the device certificate lifecycle

• Implement tiered storage and data pipelines across Data Lake Gen2, Cosmos DB, Azure SQL, and Data Factory / Stream Analytics, with US-EU data residency separation
• Enforce platform security: encryption, Key Vault, Entra ID access control, Private Link isolation, audit logging, and secure SDLC
• Translate HIPAA and GDPR obligations into concrete Azure controls and continuous compliance evidence; align with IEC 62304 and ISO 13485 where applicable
• Integrate clinical systems via Azure Health Data Services (FHIR R4, DICOM, HL7v2) and SMART on FHIR authorization
• Build licensing and entitlement services, and integrate payment providers (Stripe, Adyen) with reliable webhook and billing lifecycle handling
• Operate multi-tenant device fleet and user management, including device twins, configuration distribution, and role-based access for clinicians and patients
• Deliver signed OTA updates via Azure Device Update, with staged rollout, rollback, and a full audit trail
• Own Azure infrastructure as code (Bicep/Terraform), CI/CD, observability, cost management, and DR/BCP

• 6+ years in cloud engineering, including 3+ years hands-on Azure in production
• Strong Node.js and TypeScript development experience for backend services and APIs, plus Python for data tooling
• Production experience with high-throughput REST/HTTPS APIs, TLS/mTLS, and certificate-based client authentication
• Demonstrated device-to-cloud IoT architecture at fleet scale
• Working knowledge of HIPAA and GDPR as engineering requirements, not just policy
• Infrastructure-as-code, CI/CD, and observability as everyday practice

Preferred Qualifications

• Azure Authentication, Azure Data Storage, Azure Health Data Services / FHIR experience
• Background in regulated industries (medical devices, aerospace, automotive) - IEC 62304, ISO 13485, EU MDR
• Multi-region, multi-tenant SaaS with data residency constraints
• Azure certifications (AZ-305, AZ-500, AZ-220)