Staff Backend Engineer - Security & Compliance Architecture

Key Responsibilities Compliance Architecture & Data Discovery: Conduct end-to-end architectural audits of existing microservices to trace, catalog, and map data flows, identifying where regulated ePHI resides, traverses, or is inadvertently exposed. Cryptographic & Safeguard Implementation: Architect and implement scalable encryption mechanisms at rest and in transit (e.g., envelope encryption, column/field-level encryption via KMS/Vault) across relational and NoSQL databases.

Job Description: Senior / Staff Backend Engineer HIPAA Compliance & Data Security

Role Title: Senior / Staff Backend Engineer Security & Compliance Architecture

Location: Mountain View, CA (Hybrid: Onsite 3 days/week)

Department: Core Platform / Data Engineering

About the Role

Our client, a leading provider of small-business financial and accounting SaaS solutions, is expanding its core platform architecture to support healthcare-regulated data. Their mission-critical platform powers ledger management, payroll, billing, and tax workflows across millions of small businesses.

As the platform expands to serve healthcare and allied business verticals, they are looking for a Senior or Staff Backend Engineer to lead the technical initiative to bring an established, non-healthcare multi-service ecosystem into full compliance with HIPAA Technical Safeguards.

This is not a maintenance role in an existing healthcare environment. You will design, architect, and execute the technical strategy to identify, isolate, encrypt, and audit Protected Health Information (PHI) across legacy services, databases, and multi-tenant accounting pipelines.

Key Responsibilities

• Compliance Architecture & Data Discovery: Conduct end-to-end architectural audits of existing microservices to trace, catalog, and map data flows, identifying where regulated ePHI resides, traverses, or is inadvertently exposed.

• Cryptographic & Safeguard Implementation: Architect and implement scalable encryption mechanisms at rest and in transit (e.g., envelope encryption, column/field-level encryption via KMS/Vault) across relational and NoSQL databases.

• Audit Logging & Access Governance: Design centralized, immutable, and high-performance audit trails (45 CFR 164.312) and robust Role-Based/Attribute-Based Access Control (RBAC/ABAC) policies across distributed services.

• Legacy Data Remediation: Formulate and execute in-place remediation pipelines to clean up, tokenize, or encrypt terabytes of historical customer data without taking services offline or degrading indexing performance.

• Engineering Standards & SOPs: Translate statutory HIPAA/HITECH technical requirements into practical engineering guidelines, secure coding patterns, architectural blueprints, and compliance SOPs tailored for an engineering organization without an established healthcare background.

• Cross-Service Execution: Partner with domain-specific backend teams (Ledger, Payroll, Invoicing, Platform) to drive implementation across multiple microservices with high autonomy.

Required Qualifications

• Experience Level: 7+ years of hands-on backend software engineering experience, with significant time spent at a Senior, Staff, or Principal/Architect level designing distributed systems.

• Proven HIPAA Transformation Background: Direct track record of implementing HIPAA Technical Safeguards within a commercial, non-healthcare native software company or product. (Candidates whose compliance experience is limited to established healthcare institutions with pre-existing compliance programs will not meet this requirement.)

• Core Technology Stack:

  • Strong proficiency in Java and the Spring / Spring Boot ecosystem.

  • Hands-on expertise with distributed microservice architectures, enterprise messaging (Kafka, RabbitMQ, or AWS SQS/SNS), and cloud platforms (AWS preferred).

  • Deep database fluency (relational stores such as PostgreSQL/MySQL, distributed databases) including schema design, query optimization, and column-level encryption.

• Enterprise Multi-Service Architecture: Prior engineering experience in complex multi-tenant SaaS, ERP, payroll, accounting, or business software platforms with interconnected schemas and high data integrity requirements.

• Self-Directed Leadership: Demonstrated capability to ramp up quickly from technical documentation, make sound architectural trade-offs, and operate with minimal guidance.

Preferred Qualifications

• Prior experience working on financial platforms, banking integrations, double-entry ledgers, or payroll systems.

• Experience executing zero-downtime database migrations, large-scale data remediation, or blind indexing on encrypted fields.

• Familiarity with broader regulatory, security, and audit frameworks (SOC 2 Type II, HITRUST, ISO 27001, PCI-DSS).

• Familiarity with C++ or Go in performance-critical system components.

Best Regards,

Arun | Sr US IT Recruiter

SIDRAM TECHNOLOGIES

IT Services | Development | Staffing

URL: http:/www.sidramtech.com | Email:arun

Adam@sidramtech.com