> Markdown version of [/jobs/ext/4680629-staff-backend-engineer-security-compliance-architecture](https://www.wearedevelopers.com/jobs/ext/4680629-staff-backend-engineer-security-compliance-architecture). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Backend Engineer - Security & Compliance Architecture

- **Company:** Sidram Technologies
- **Location:** Millbrae, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Amazon Web Services, Audit Trail, Big Data, Business Software, C++ (Programming Language), Software as a Service, Cyber Security, Databases, Customer Data Management, Data Discovery, Data Integrity, Data Security, Distributed Data Store, Distributed Systems, Identity and Access Management, PostgreSQL, Microsoft Message Queuing, MySQL, NoSQL, PCI Data Security Standards, Query Optimization, RabbitMQ, Role-Based Access Control, Secure Coding, Service-Oriented Architecture, Software Engineering, Data Streaming, Spring-boot, Backend, Database Migration, Apache Kafka, Service Stack, Microservices
- **Published:** November 12, 2026
- **Apply:** https://www.careerbuilder.com/job-details/staff-backend-engineer-security-compliance-architecture-millbrae-ca--d62bcd8e-1164-404a-99cb-45673daf781d

## About the Role

Security Architecture, Billing, Small Business, Software as a Service (SaaS), Healthcare, Accounting, HIPAA (Health Insurance Portability and Accountability Act), Ecosystems, Cryptography, Information/Data Security (InfoSec), * Experience Level: 7+ years of hands-on backend software engineering experience, with significant time spent at a Senior, Staff, or Principal/Architect level designing distributed systems.

 * Proven HIPAA Transformation Background: Direct track record of implementing HIPAA Technical Safeguards within a commercial, non-healthcare native software company or product. (Candidates whose compliance experience is limited to established healthcare institutions with pre-existing compliance programs will not meet this requirement.)
 * Core Technology Stack:
 + Strong proficiency in Java and the Spring / Spring Boot ecosystem.
 + Hands-on expertise with distributed microservice architectures, enterprise messaging (Kafka, RabbitMQ, or AWS SQS/SNS), and cloud platforms (AWS preferred).
 + Deep database fluency (relational stores such as PostgreSQL/MySQL, distributed databases) including schema design, query optimization, and column-level encryption.
 * Enterprise Multi-Service Architecture: Prior engineering experience in complex multi-tenant SaaS, ERP, payroll, accounting, or business software platforms with interconnected schemas and high data integrity requirements.
 * Self-Directed Leadership: Demonstrated capability to ramp up quickly from technical documentation, make sound architectural trade-offs, and operate with minimal guidance.

Preferred Qualifications

 * Prior experience working on financial platforms, banking integrations, double-entry ledgers, or payroll systems.
 * Experience executing zero-downtime database migrations, large-scale data remediation, or blind indexing on encrypted fields.
 * Familiarity with broader regulatory, security, and audit frameworks (SOC 2 Type II, HITRUST, ISO 27001, PCI-DSS).
 * Familiarity with C++ or Go in performance-critical system components.

## Description

Job Description: Senior / Staff Backend Engineer HIPAA Compliance & Data Security, * Compliance Architecture & Data Discovery: Conduct end-to-end architectural audits of existing microservices to trace, catalog, and map data flows, identifying where regulated ePHI resides, traverses, or is inadvertently exposed.

 * Cryptographic & Safeguard Implementation: Architect and implement scalable encryption mechanisms at rest and in transit (e.g., envelope encryption, column/field-level encryption via KMS/Vault) across relational and NoSQL databases.
 * Audit Logging & Access Governance: Design centralized, immutable, and high-performance audit trails (45 CFR 164.312) and robust Role-Based/Attribute-Based Access Control (RBAC/ABAC) policies across distributed services.
 * Legacy Data Remediation: Formulate and execute in-place remediation pipelines to clean up, tokenize, or encrypt terabytes of historical customer data without taking services offline or degrading indexing performance.
 * Engineering Standards & SOPs: Translate statutory HIPAA/HITECH technical requirements into practical engineering guidelines, secure coding patterns, architectural blueprints, and compliance SOPs tailored for an engineering organization without an established healthcare background.
 * Cross-Service Execution: Partner with domain-specific backend teams (Ledger, Payroll, Invoicing, Platform) to drive implementation across multiple microservices with high autonomy.