Role Summary :

We are seeking a Full-Stack Developer to build and secure features for our Therapy Planning Software (TPS), which integrates with RMS/RIS, EMR systems, devices (DICOM, Bluetooth, VR, robotics, FES), and supports ICDICFICHI coding. The role involves ~40% frontend and 60% backend development, with end-to-end responsibility for security across application layers.

Responsibilities :

Frontend (40%) :

- Build responsive, accessible UI in React + TypeScript (or Angular/Vue).

- Implement multilingual (i18n/l10n) and WCAG 2.1 accessibility standards.

- Develop offline-capable PWAs for home programs.

- Integrate REST/FHIR APIs for patient workflows, scheduling, and reporting.

- Support features like voice-to-text, video capture, and compression.

Backend (60%)

- Design and scale REST APIs using Python (FastAPI/Django).

- Build modules for EMR storage, assessments, therapy plans, and data logging.

- Implement HL7/FHIR endpoints and secure integrations with external EMRs.

- Handle file uploads (virus scanning, HD video compression, secure storage).

- Optimize PostgreSQL schemas and queries for performance.

- Implement RBAC, MFA, PDPA compliance, edit locks, and audit trails.

Security Layer (Ownership) :

- Identity & Access: OAuth2/OIDC, JWT, MFA, SSO.

- Data Protection: TLS, AES-256 at rest, field-level encryption, immutable audit logs.

- Compliance: PDPA, HIPAA principles, MDA requirements.

- DevSecOps: Secure coding (OWASP ASVS), dependency scanning, secrets management.

- Monitoring: Logging/metrics (ELK/Prometheus), anomaly detection, DR/BCP preparedness.

Requirements :

- Strong skills in Python (FastAPI/Django) and React + TypeScript.

- Experience with HL7/FHIR, EMR data, and REST APIs.

- Knowledge of OAuth2/JWT authentication, RBAC, audit logging.

- Proficiency with PostgreSQL and database optimization.

- Cloud deployment (AWS/Azure) and containerization (Docker/K8s) a plus.

Added Advantage : Familiarity with ICD, ICF, ICHI coding systems or medical diagnosis workflows.

Success Metrics :

- Deliver secure end-to-end features with clinical workflow integration.

- Pass OWASP/ASVS L2 security baseline.

- Establish full audit trail and role-based access across at least one clinical workflow.