Talent.com
Senior Full Stack Developer

Senior Full Stack Developer

Zenara HealthIN
6 days ago
Job type
  • Remote
  • Quick Apply
Job description

Role summary

Own a healthcare web application endtoend across backend (Python / Flask / Celery / Postgres) and frontend (Node.js / Express / HTML / CSS / JS), leading feature delivery, integrations, security, and operations.

Key responsibilities

  • End to end ownership
  • Plan, design, implement, test, deploy, and monitor features across frontend and backend.
  • Maintain high code quality, documentation, and developer experience.
  • Backend (Python / Flask)
  • Design REST APIs, proxy endpoints, and vendor integrations (e.g., EHR systems, form platforms).
  • Implement asynchronous processing pipelines with Celery + Redis (audio / transcripts).
  • Optimize Postgres schemas / queries; manage connection pools (psycopg / psycopg_pool).
  • Enforce consistent authentication / authorization (API key headers), manage secrets via environment variables.
  • Operate with Gunicorn and Docker Compose; maintain conda / venv environments.
  • Frontend (Node.js / Express)
  • Build secure serverside routes and robust proxy layers to backend APIs.
  • Implement sessions, CSRF protection, rate limiting, and security headers (helmet + CSP).
  • Integrate thirdparty form systems; implement file uploads (multer) and streaming (PDF / audio).
  • Develop pages and flows : login / register, dashboard, patients, action items, billing, invoice generation.
  • Media ingestion
  • Implement browser recording UX, file validation, and resilient upload / processing flows.
  • Coordinate FFmpeg / ffprobe and pydub usage for media processing.
  • Data & documents
  • Manage patient sections (agenda, summary, transcripts, blueprints), versioning / history, and exports (ZIP, PDF).
  • DevOps & operations
  • Own Docker Compose and CI / CD pipelines; environment parity for dev / stage / prod.
  • Instrument logging, metrics, tracing; set alerts; optimize performance and cost.
  • Security & compliance
  • Apply best practices : input validation, CSRF, CSP, secure cookies / sessions, SSRF prevention, rate limiting.
  • Handle secret management and least privilege for cloud / database access.
  • Contribute to security gap analysis and remediation; ensure auditable changes.
  • Quality & process
  • Write unit / integration tests for critical flows (auth, uploads, proxies, billing).
  • Own release notes, migration scripts, rollback plans; drive postmortems and continuous improvement.

Success metrics (first 90 days)

  • Standardize API key attachment across all proxy calls; eliminate “missing api key” errors.
  • Stabilize audio / transcript pipeline with retries, idempotency, and user feedback; reduce failures >
  • 80%.

  • Ship two endtoend features with tests and documentation.
  • Introduce base CI (lint / test / build) and minimal deploy workflow; improve release cadence.
  • Close top security findings; add monitoring for key endpoints.
  • Interview focus

  • Architecture : consistent API key enforcement across Express proxies and Flask APIs.
  • Systems design : async pipelines for audio / transcripts; retry / backoff; idempotency; observability.
  • Security : CSP / CSRF / session hardening, SSRF / file upload safety, secrets management.
  • Live coding : secure PDF streaming proxy with “check vs stream” logic and error forwarding.
  • DB : schema / index proposals for patient sections / history and efficient exports.
  • Short job board version

  • Title : Senior FullStack Engineer
  • Summary : Own a healthcare web app endtoend (Python / Flask / Celery / Postgres + Node / Express). Build secure APIs and proxies, audio / transcript pipelines, dashboards, billing, and PDF / invoice flows. Lead DevOps, security, and performance.
  • Musthaves : 5+ yrs; Flask, Celery, Postgres, Node / Express; Docker / Compose; security (CSP / CSRF / headers); file uploads / streaming; CI / CD.
  • Nicetohaves : EHR integrations, Form.io, Azure / AWS / GCP, HIPAA workflows.
  • Location : [Remote / Hybrid / Onsite]
  • Compensation : [Range / Bands]
  • Apply : [Email / ATS link]
  • Requirements

    Qualifications

  • 5+ years of fullstack development with production ownership.
  • Python ecosystem : Flask, Gunicorn, Celery, Redis, Postgres, psycopg, conda / venv, FFmpeg / pydub.
  • Node.js ecosystem : Node 18+, Express 5, axios, multer, helmet, expressratelimit, csrf, marked, nodefetch / undici.
  • Web app delivery : HTML / CSS / JS, UX for dashboards / wizards / modals / drawers, performance optimization.
  • Architecture & operations : Docker / Compose, environment config, secrets via env vars, git workflows.
  • Security : API key enforcement, session security, CSRF, CSP, rate limiting, secure headers, file upload safety.
  • Nice to have

  • EHR integrations (Charm or similar), HIPAAaligned workflows.
  • Form platforms (Form.io), PDF generation / signing, invoice pipelines.
  • Cloud experience (Azure / AWS / GCP) and managed Postgres.
  • CI / CD (GitHub Actions), IaC / Terraform, container orchestration.
  • Data privacy / compliance experience (audit trails, access controls).
  • Create a job alert for this search

    Senior Developer • IN