Full-Stack Developer for a Secure Healthcare Patient Portal

We are looking for an experienced full-stack developer to design and build a secure, web-based patient portal for a healthcare organisation. The platform will let patients and clinical staff securely upload, organise, and access medical records. It must meet high standards for data security, privacy, and data residency. The first phase covers the core web application and the medical document upload module. Scope of Work 1. Web Application Platform A single responsive web application optimised for desktop and mobile browsers (no native Android/iOS app in this phase) Support for the latest versions of Chrome, Safari, Edge, and Firefox A clean, intuitive UI that follows the client’s brand guidelines (logo, colour palette, typography) Deployment on the client’s domain or a dedicated subdomain 2. User Roles & Access Control Four user roles: Patient, Doctor, Clinical Coordinator, and Administrator Granular role-based access control (RBAC) for every action and data view Admin panel for managing users, roles, and permissions Ability for authorised staff to manage documents on a patient’s behalf (subject to permissions) 3. Authentication & Security Email/password authentication and Google sign-in (OAuth 2.0) Secure password policies, password reset, and email verification Session management with automatic timeout Audit logging of key actions (logins, uploads, edits, deletions, downloads) Protection against common web vulnerabilities (OWASP Top 10) 4. Medical Document Upload Supported formats: PDF, JPG/PNG, Word documents, ZIP archives, and DICOM exports Configurable file size limit (around 25 MB per file) Bulk upload of multiple files in a single batch, with a shared batch note File validation, upload progress, and error handling Detection and handling of duplicate uploads 5. Document Details & Organisation Details captured for each upload: record date, category, provider, facility, and tags/notes Configurable categories (e.g. Imaging, Lab Reports, Operative Notes, Prescriptions, Other) A chronological timeline of records, sorted by record date Search by file name, provider, or tag Filters by category and date range 6. Record Management Open/preview, download, edit details, and delete documents Permissions for each action set by user role Secure, time-limited access links for file viewing and download 7. Infrastructure & Data Compliance Hosting on AWS, India (Mumbai) region, with all data stored exclusively in India Document storage on AWS S3, encrypted at rest and in transit Secure, scalable architecture with automated backups Alignment with applicable healthcare data protection standards, including India’s DPDP Act 8. Quality & Handover Clean, modular, well-documented code Testing across supported browsers and devices Deployment to production, plus technical documentation Full transfer of source code and access credentials at completion A post-launch support period for bug fixes Required Skills & Experience Proven experience building secure web applications that handle sensitive data Strong skills in a modern stack such as React/Next.js, Node.js, and PostgreSQL (or an equivalent) Hands-on AWS experience (S3, EC2/ECS or similar, IAM, CloudFront) Solid understanding of authentication, RBAC, and secure file handling Prior work on healthcare, EMR/EHR, or document-management systems is a strong plus Excellent written communication and reliable availability during the project