Cloud platform engineer for connected medical devices

We are looking for an experienced Cloud Platform Engineer to build and operate the cloud services layer behind our connected medical device platform on Microsoft Azure — from device telemetry ingress through storage, orchestration, and clinical system integration, under HIPAA and GDPR constraints.

• Design and operate the REST/HTTPS device-to-cloud ingestion path (TLS 1.2/1.3, mTLS or token-based device auth) and manage the device certificate lifecycle
• Implement tiered storage and data pipelines across Data Lake Gen2, Cosmos DB, Azure SQL, and Data Factory / Stream Analytics, with US–EU data residency separation
• Enforce platform security: encryption, Key Vault, Entra ID access control, Private Link isolation, audit logging, and secure SDLC
• Translate HIPAA and GDPR obligations into concrete Azure controls and continuous compliance evidence; align with IEC 62304 and ISO 13485 where applicable
• Integrate clinical systems via Azure Health Data Services (FHIR R4, DICOM, HL7v2) and SMART on FHIR authorization
• Build licensing and entitlement services, and integrate payment providers (Stripe, Adyen) with reliable webhook and billing lifecycle handling
• Operate multi-tenant device fleet and user management, including device twins, configuration distribution, and role-based access for clinicians and patients
• Deliver signed OTA updates via Azure Device Update, with staged rollout, rollback, and a full audit trail
• Own Azure infrastructure as code (Bicep/Terraform), CI/CD, observability, cost management, and DR/BCP

• 6+ years in cloud engineering, including 3+ years hands-on Azure in production
• Strong Node.js and TypeScript development experience for backend services and APIs, plus Python for data tooling
• Production experience with high-throughput REST/HTTPS APIs, TLS/mTLS, and certificate-based client authentication
• Demonstrated device-to-cloud IoT architecture at fleet scale
• Working knowledge of HIPAA and GDPR as engineering requirements, not just policy
• Infrastructure-as-code, CI/CD, and observability as everyday practice
• Будет плюсом: Azure Authentication, Azure Data Storage, Azure Health Data Services / FHIR experience; Background in regulated industries (medical devices, aerospace, automotive) — IEC 62304, ISO 13485, EU MDR; Multi-region, multi-tenant SaaS with data residency constraints; Azure certifications (AZ-305, AZ-500, AZ-220)

• Work with direct impact on patient outcomes, a technically broad role across IoT and cloud, a quality-driven engineering culture, and competitive compensation and development support.