Staff Backend Engineer - Security & Compliance Architecture

Job Description: Senior / Staff Backend Engineer HIPAA Compliance & Data Security, * Compliance Architecture & Data Discovery: Conduct end-to-end architectural audits of existing microservices to trace, catalog, and map data flows, identifying where regulated ePHI resides, traverses, or is inadvertently exposed.

• Cryptographic & Safeguard Implementation: Architect and implement scalable encryption mechanisms at rest and in transit (e.g., envelope encryption, column/field-level encryption via KMS/Vault) across relational and NoSQL databases.
• Audit Logging & Access Governance: Design centralized, immutable, and high-performance audit trails (45 CFR 164.312) and robust Role-Based/Attribute-Based Access Control (RBAC/ABAC) policies across distributed services.
• Legacy Data Remediation: Formulate and execute in-place remediation pipelines to clean up, tokenize, or encrypt terabytes of historical customer data without taking services offline or degrading indexing performance.
• Engineering Standards & SOPs: Translate statutory HIPAA/HITECH technical requirements into practical engineering guidelines, secure coding patterns, architectural blueprints, and compliance SOPs tailored for an engineering organization without an established healthcare background.
• Cross-Service Execution: Partner with domain-specific backend teams (Ledger, Payroll, Invoicing, Platform) to drive implementation across multiple microservices with high autonomy.

Security Architecture, Billing, Small Business, Software as a Service (SaaS), Healthcare, Accounting, HIPAA (Health Insurance Portability and Accountability Act), Ecosystems, Cryptography, Information/Data Security (InfoSec), * Experience Level: 7+ years of hands-on backend software engineering experience, with significant time spent at a Senior, Staff, or Principal/Architect level designing distributed systems.

• Proven HIPAA Transformation Background: Direct track record of implementing HIPAA Technical Safeguards within a commercial, non-healthcare native software company or product. (Candidates whose compliance experience is limited to established healthcare institutions with pre-existing compliance programs will not meet this requirement.)
• Core Technology Stack:
• Strong proficiency in Java and the Spring / Spring Boot ecosystem.
• Hands-on expertise with distributed microservice architectures, enterprise messaging (Kafka, RabbitMQ, or AWS SQS/SNS), and cloud platforms (AWS preferred).
• Deep database fluency (relational stores such as PostgreSQL/MySQL, distributed databases) including schema design, query optimization, and column-level encryption.
• Enterprise Multi-Service Architecture: Prior engineering experience in complex multi-tenant SaaS, ERP, payroll, accounting, or business software platforms with interconnected schemas and high data integrity requirements.
• Self-Directed Leadership: Demonstrated capability to ramp up quickly from technical documentation, make sound architectural trade-offs, and operate with minimal guidance.

Preferred Qualifications

• Prior experience working on financial platforms, banking integrations, double-entry ledgers, or payroll systems.
• Experience executing zero-downtime database migrations, large-scale data remediation, or blind indexing on encrypted fields.
• Familiarity with broader regulatory, security, and audit frameworks (SOC 2 Type II, HITRUST, ISO 27001, PCI-DSS).
• Familiarity with C++ or Go in performance-critical system components.

Our client, a leading provider of small-business financial and accounting SaaS solutions, is expanding its core platform architecture to support healthcare-regulated data. Their mission-critical platform powers ledger management, payroll, billing, and tax workflows across millions of small businesses.