Backend / AWS Engineer — Secure Healthcare App (HIPAA, FastAPI, AWS)

We're looking for a senior backend engineer to own the server side and cloud infrastructure for a secure healthcare mobile app. This is the person who stands up our AWS environment correctly on day one, moves us off a single VPS, and closes our HIPAA gap. The app serves healthcare field representatives who need secure workflows for managing documents, profile information, status visibility, and access-related functionality. You'll own the API, the cloud migration, and the security foundation the rest of the product depends on. What you'll own: - Backend/API: Python + async FastAPI, PostgreSQL + SQLAlchemy, Redis + background jobs, keeping business logic in the API (thin-client pattern) - AWS/DevOps: migrating off a single VPS to AWS (ECS Fargate, RDS, ElastiCache, S3), infrastructure-as-code (Terraform or CDK), CI/CD, secrets management, observability - A well-architected AWS landing zone with separate non-prod and prod environments (no real customer/PII data in non-prod) - Amazon Bedrock migration so document parsing is HIPAA-covered - Security: secure document handling, auth/session workflows, least-privilege IAM, encryption, audit logging - Building with SOC 2 in mind from day one Must have: - Python with async web frameworks (FastAPI strongly preferred) - PostgreSQL and an ORM with real migration experience (SQLAlchemy a plus) - Hands-on AWS: ECS/Fargate or equivalent, RDS, S3, IAM, Secrets Manager - Infrastructure-as-code (Terraform or CDK) and CI/CD (GitHub Actions) - Security fundamentals: token auth, secrets handling, least-privilege IAM Strongly preferred: - Redis / background job queues - HIPAA or other regulated-data experience (PHI, encryption at rest/in flight, audit logging) - Amazon Bedrock or other LLM-API integration experience - Docker / containerization