About the Opportunity
We are seeking a proactive, security-minded Full-Stack Developer to join a growing engineering team building modern software solutions for healthcare providers, clinicians, and patients.
This is an opportunity for a junior-to-mid-level developer to work alongside experienced engineers, product managers, clinicians, and compliance professionals to design, develop, and maintain secure, scalable healthcare applications.
You will work with a modern technology stack centered around Next.js, React, TypeScript, Tailwind CSS, Supabase, PostgreSQL, and Vercel, while contributing to applications where data privacy, security, usability, and reliability are critical.
The ideal candidate is someone who enjoys building polished user experiences, understands modern full-stack development practices, and approaches development with a security-first mindset.
What You'll Do
- Design, develop, test, and deploy end-to-end features using Next.js, React, TypeScript, Tailwind CSS, and Supabase.
- Build responsive, accessible, and high-performance user interfaces designed for healthcare providers, clinicians, and patients.
- Develop backend functionality, APIs, and serverless application components.
- Design and maintain relational database schemas and write clean, efficient PostgreSQL/SQL queries.
- Manage database migrations and implement appropriate data-access controls, including Supabase Row Level Security (RLS) policies.
- Develop secure authentication, authorization, session management, and least-privilege access controls.
- Build and maintain integrations with third-party APIs and external healthcare systems.
- Contribute to integrations involving EHR/EMR platforms, scheduling systems, billing systems, HL7, FHIR, and other healthcare technologies.
- Deploy and maintain production applications using Vercel or similar cloud/serverless platforms.
- Participate in CI/CD workflows, code reviews, automated testing, and security-focused development practices.
- Use automated security and vulnerability scanning, dependency auditing, and other DevSecOps practices.
- Troubleshoot application issues and optimize frontend, backend, database, and API performance.
- Develop automated tests to validate business requirements and reduce regression risk.
- Collaborate with product managers, clinicians, senior engineers, and compliance teams to refine requirements and deliver solutions iteratively.
- Create and maintain clear technical documentation.
- Follow established security and compliance practices when handling sensitive healthcare information.
Required Qualifications
- 1–4 years of professional full-stack web development experience in a modern JavaScript/TypeScript environment.
- Strong hands-on experience with React and Next.js.
- Strong proficiency with TypeScript.
- Experience with Tailwind CSS or a comparable modern CSS framework.
- Solid understanding of PostgreSQL and SQL, including relational database concepts and schema design.
- Experience building and consuming RESTful APIs; familiarity with GraphQL and serverless API routes is a plus.
- Experience deploying and maintaining production applications using Vercel or a similar cloud/serverless platform.
- Experience with Git and modern version-control/development workflows, including Azure DevOps or comparable tools.
- Strong debugging, troubleshooting, and application optimization skills.
- Understanding of secure software development principles, including least privilege, secure authentication/session management, authorization, and data access controls.
- Ability to organize and prioritize work in a fast-moving, collaborative environment.
- Strong attention to software quality, maintainability, and security.
Preferred Qualifications
- Experience developing applications in Healthcare or HealthTech.
- Experience working with applications or environments subject to HIPAA, SOC 2 Type II, HITRUST, or similar security/compliance requirements.
- Hands-on experience with Supabase, including PostgreSQL, Authentication, Edge Functions, Storage, and/or Row Level Security.
- Experience building healthcare-related integrations involving EHR/EMR systems, HL7, FHIR, scheduling, billing, or other healthcare APIs.
- Experience with automated testing frameworks such as Jest, Playwright, or Cypress.
- Familiarity with DevSecOps practices, including static application security testing, dependency auditing, vulnerability scanning, and automated compliance checks.
- Experience with CI/CD and modern DevOps practices.
- Experience with real-time application architectures, WebSockets, or Supabase Realtime.
- Experience with state-management solutions in modern React applications.
- Experience using AI-assisted development tools such as GitHub Copilot, Cursor, or Claude Code, with an understanding of how to use these tools responsibly when working with sensitive data.
- Experience developing applications that meet WCAG accessibility standards.
- Familiarity with healthcare data privacy, security, and regulatory requirements.
