Role Summary
We are seeking a Full-Stack Developer to build and secure features for our Therapy
Planning Software (TPS), which integrates with RMS/RIS, EMR systems, devices (DICOM,
Bluetooth, VR, robotics, FES), and supports ICDICFICHI coding. The role involves 40%
frontend and 60% backend development, with end-to-end responsibility for security across
application layers.
Responsibilities
Frontend (40%)
- Build responsive, accessible UI in React + TypeScript (or Angular/Vue).
- Implement multilingual (i18n/l10n) and WCAG 2.1 accessibility standards.
- Develop offline-capable PWAs for home programs.
- Integrate REST/FHIR APIs for patient workflows, scheduling, and reporting.
- Support features like voice-to-text, video capture, and compression.
Backend (60%)
- Design and scale REST APIs using Python (FastAPI/Django).
- Build modules for EMR storage, assessments, therapy plans, and data logging.
- Implement HL7/FHIR endpoints and secure integrations with external EMRs.
- Handle file uploads (virus scanning, HD video compression, secure storage).
- Optimize PostgreSQL schemas and queries for performance.
- Implement RBAC, MFA, PDPA compliance, edit locks, and audit trails.
Security Layer (Ownership)
- Identity & Access: OAuth2/OIDC, JWT, MFA, SSO.
- Data Protection: TLS, AES-256 at rest, field-level encryption, immutable audit logs.
- Compliance: PDPA, HIPAA principles, MDA requirements.
- DevSecOps: Secure coding (OWASP ASVS), dependency scanning, secrets management.
- Monitoring: Logging/metrics (ELK/Prometheus), anomaly detection, DR/BCP
preparedness.
Requirements
- Strong skills in Python (FastAPI/Django) and React + TypeScript.
- Experience with HL7/FHIR, EMR data, and REST APIs.
- Knowledge of OAuth2/JWT authentication, RBAC, audit logging.
- Proficiency with PostgreSQL and database optimization.
- Cloud deployment (AWS/Azure) and containerization (Docker/K8s) a plus.
Added Advantage: Familiarity with ICD, ICF, ICHI coding systems or medical diagnosis
workflows.
Success Metrics
- Deliver secure end-to-end features with clinical workflow integration.
- Pass OWASP/ASVS L2 security baseline.
- Establish full audit trail and role-based access across at least one clinical workflow.
Skills: django,python,react,postgresql,angular,typescript
