EMR --PHP/MySQL Developer (Polaris EMR)

• Feature Development: Build, maintain, and optimize core EMR features including patient scheduling, clinical charting, and billing/revenue cycle workflows using PHP and MySQL.
• HIPAA & Technical Safeguards: Implement strict role-based access controls (RBAC), automatic session timeouts, and immutable application audit logs tracking PHI data access.
• Secure Infrastructure & CI/CD: Develop and maintain automated GitHub Actions pipelines to build, test, and safely deploy code to Microsoft Azure using secure OpenID Connect (OIDC) authentication.
• Secret & Storage Security: Ensure zero secrets are hardcoded in the repository; utilize Azure Key Vault and Managed Identities for runtime credential management and enforce database encryption at rest.
• DevSecOps & Code Security: Cleanly address automated security checks (SAST/SCA) and dependency alerts before pushing code to production.

Do you have experience in Version control?, (Note: We are also concurrently hiring for an AI-driven C#/.NET platform redesign project. Candidates with strong cross-functional skills in both stacks are highly encouraged to apply.), * Technical Stack: Strong, production-grade experience with PHP and MySQL.

• Healthcare IT & HIPAA Experience: Prior experience working on EMR/EHR platforms or medical billing systems is strongly preferred. Must have a deep understanding of the HIPAA Security Rule and handling PHI.
• CI/CD & Source Control: Deep familiarity with GitHub, branching strategies, Pull Request workflows, and managing deployment pipelines via GitHub Actions.
• Cloud Security: Practical experience with Microsoft Azure (Kubernetes/AKS is a major plus), Azure Key Vault, and setting up isolated network environments.
• Contractor Mindset: Ability to work independently as a 1099 contractor, manage your own deliverables, and accurately scope out technical phases.

Pulled from the full job description

• Flexible schedule, Because this platform handles sensitive Protected Health Information (PHI), HIPAA compliance and rigid technical safeguards must be baked into every line of code you write. We are flexible on the compensation structure and are open to negotiating either a competitive hourly rate or a fixed-rate, milestone-driven contract.