HIPAA-compliant system handling real patient data

We're building a modern, secure patient portal that actually fixes how healthcare communication should work - fast, simple, and safe. This is a HIPAA-compliant system handling real patient data, so security isn't a checkbox for us - it's the foundation of everything. We're looking for a strong Full Stack Developer who's excited to build real product, not just tickets. What you'll build You'll help create a patient + provider platform where people can: - Log in securely and access health info anytime - View records, appointments, and updates - Message healthcare providers safely - Upload and manage sensitive documents - Receive reminders and notifications that actually matter On the provider side: - Manage patients in a clean dashboard - Communicate securely with patients - Handle documents and clinical workflows - Control access with proper roles and permissions What you'll own - End-to-end feature development (frontend + backend) - Secure auth, roles, and permissions (HIPAA-grade) - APIs for core healthcare workflows - Data security (encryption, safe storage, transmission) - Scalable architecture decisions - Clean, reliable, production-ready code What we're looking for - Solid Full Stack experience (React, Next.js, Node, etc.) - Strong API design skills - Experience with auth systems (JWT, OAuth, sessions) - Comfortable with PostgreSQL or similar databases - Strong understanding of web security (OWASP basics at minimum) - Experience working with cloud (AWS/GCP/Azure) Bonus points if you've touched healthcare or regulated systems before. Why this is interesting You're not joining a feature factory - you're helping design a system that will be used in real clinical environments. That means your decisions actually matter. If you like building things that are secure, scalable, and meaningful - this is a good one. How to apply Send: - A short intro about your full-stack experience - Projects where you've built secure or production systems - Your stack preferences - Anything you've done with sensitive data or complex auth