Full Stack Developer

Role SummaryWe are seeking a Full-Stack Developer to build and secure features for our Therapy Planning Software (TPS), which integrates with RMS/RIS, EMR systems, devices (DICOM, Bluetooth, VR, robotics, FES), and supports ICD–ICF–ICHI coding. The role involves ~40% frontend and 60% backend development, with end-to-end responsibility for security across application layers.ResponsibilitiesFrontend (40%)Build responsive, accessible UI in React + TypeScript (or Angular/Vue).Implement multilingual (i18n/l10n) and WCAG 2.1 accessibility standards.Develop offline-capable PWAs for home programs.Integrate REST/FHIR APIs for patient workflows, scheduling, and reporting.Support features like voice-to-text, video capture, and compression.Backend (60%)Design and scale REST APIs using Python (FastAPI/Django).Build modules for EMR storage, assessments, therapy plans, and data logging.Implement HL7/FHIR endpoints and secure integrations with external EMRs.Handle file uploads (virus scanning, HD video compression, secure storage).Optimize PostgreSQL schemas and queries for performance.Implement RBAC, MFA, PDPA compliance, edit locks, and audit trails.Security Layer (Ownership)Identity & Access: OAuth2/OIDC, JWT, MFA, SSO.Data Protection: TLS, AES-256 at rest, field-level encryption, immutable audit logs.Compliance: PDPA, HIPAA principles, MDA requirements.DevSecOps: Secure coding (OWASP ASVS), dependency scanning, secrets management.Monitoring: Logging/metrics (ELK/Prometheus), anomaly detection, DR/BCP preparedness.RequirementsStrong skills in Python (FastAPI/Django) and React + TypeScript.Experience with HL7/FHIR, EMR data, and REST APIs.Knowledge of OAuth2/JWT authentication, RBAC, audit logging.Proficiency with PostgreSQL and database optimization.Cloud deployment (AWS/Azure) and containerization (Docker/K8s) a plus.Added AdvantageFamiliarity with ICD, ICF, ICHI coding systems or medical diagnosis workflows.Success MetricsDeliver secure end-to-end features with clinical workflow integration.Pass OWASP/ASVS L2 security baseline.Establish full audit trail and role-based access across at least one clinical workflow.