> Markdown version of [/jobs/ext/3874860-senior-software-engineer-health-data-interoperability](https://www.wearedevelopers.com/jobs/ext/3874860-senior-software-engineer-health-data-interoperability). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Software Engineer, Health Data & Interoperability

- **Company:** Italic, Inc.
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $200,000.0 - $250,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Software System Penetration Testing, Audit Trail, Clinical Data Repository, Cloud Computing, Data Deduplication, EHealth, Interoperability, Key Management, PostgreSQL, Machine Learning, Node.Js, OAuth, Open Web Application Security, Openid Connect, Next.js, TypeScript, Web Applications, Google Cloud, ReactJS, Fast Healthcare Interoperability Resources, Software Security, Agentic-AI
- **Published:** October 22, 2026
- **Apply:** https://arc.dev/remote-jobs/j/redirect/pthm7xnqbl

## About the Role

* Extensive production experience with our core stack: TypeScript, Next.js, React and PostgreSQL.
 * Several years in health tech, ideally at a digital health company or a health data platform.
 * Shipped software that handles PHI under HIPAA.
 * A security background: threat modeling, secure design review, and hands-on application security covering authentication, authorization, secrets and key management, and the OWASP Top 10.
 * Hands-on FHIR R4 work with real clinical data, including the duplicates and messy coding.
 * Owned a data model that other teams or companies relied on.

Bonus

 * Hono in production.
 * Working knowledge of LOINC, RxNorm, SNOMED CT and ICD-10-CM.
 * SMART on FHIR, OAuth and OpenID Connect, including their attack surface.
 * SOC 2 or HITRUST audits, penetration testing or incident response.
 * Vercel or Google Cloud in production.
 * HIE, TEFCA, Carequality or CommonWell experience.
 * C-CDA to FHIR conversion.
 * MCP servers, tool calling, or retrieval over clinical data.
 * OAuth 2.1 delegation for AI agents.

## Description

* Build how we retrieve clinical records from health information exchange networks.
 * Own the FHIR R4 data model: normalization, deduplication across sources and provenance.
 * Turn clinical records into structured data that AI models and agents can use, with every fact cited to its source.
 * Build the APIs that partner developers use to read that data.
 * Build the authorization that lets AI agents access records on a patient's behalf, and own its attack surface.
 * Own the security of what you build: threat models, access control, encryption and key management, audit trails and consent.
 * Help run our security program, including security reviews, SOC 2 controls and incident response.

You'll work directly with our CEO and Founding Engineer. We write decisions down before we code, build with coding agents every day, and design our docs, APIs, and SDK so another team's coding agent can integrate Italic without a human reading them.

Our stack

One TypeScript monorepo, written in a functional style: functions and plain data, no classes.

 * Language: TypeScript on Node.js
 * Frameworks: Next.js and React for web apps, Hono for APIs
 * Data: PostgreSQL
 * Standards: FHIR, OAuth and OpenID Connect
 * Cloud: Vercel, Google Cloud