Senior Software Engineer

Bixal

Senior Software Engineer designing and delivering a Generic Data API Platform for healthcare data sharing at Bixal. Leading technical implementation and collaboration across multiple teams while ensuring compliance standards.

Posted 6/18/2026full-timeRemote • Virginia • 🇺🇸 United StatesSenior💰 $142,000 - $144,000 per yearWebsite

Tech Stack

Tools & technologies

AWSCloudDynamoDBNoSQLPythonTerraform

About the role

Key responsibilities & impact

Lead the design, development, and deployment of the Generic Data API Platform — a reusable Terraform module and Lambda-based pipeline that enables rapid onboarding of new data source APIs across different programs without custom infrastructure builds per dataset.
Complete and deliver remaining platform phases: implement generalized data validation logic; work with data source teams to implement and configure endpoint querying logic; implement API capability discovery endpoints; conduct end-to-end integration testing across platform components; lead security review and performance validation; and drive the initial dataset API to production go-live.
Implement OAuth 2.0 machine-to-machine authentication via AWS Cognito, ensuring that external consumers can authenticate against the platform with appropriate scope enforcement and usage-tier access controls.
Champion the API platform internally — serve as the primary point of contact for partner data teams seeking to onboard new datasets, define the onboarding contract, and guide teams through the configuration and deployment process
Develop and maintain operational runbooks, FHIR API documentation, and data team onboarding guides that enable partner teams to self-serve troubleshooting and data refreshes without requiring infrastructure team involvement.
Own platform SLOs: API availability > 99.9%, error rate < 0.1%, and p95 response time < 500 ms.
Define CloudWatch alarm thresholds appropriate to catch degradation before SLOs are breached, not after.
Lead the API migration to the generic platform (Phase 2), validating that the module generalizes and establishes shared operational patterns across multiple concurrent datasets.
Coordinate across teams to advance platform delivery: work with partner data teams on data delivery contracts, timelines, and search parameter definitions; engage CloudOps on security reviews and network security configuration changes; align with solutions architects on platform generalization and multi-dataset scale decisions; and involve data strategists when new data sharing agreements are required for a partner onboarding.
Enforce defense-in-depth security controls across all platform deployments: network-layer threat protection, encryption at rest and in transit, identity and access management, API key lifecycle management, and long-term audit log retention.
Monitor and optimize cloud infrastructure costs across platform deployments, leveraging serverless billing models, data lifecycle policies, and right-sized compute configurations to keep per-dataset costs sub-linear as the platform scales to 10 or more concurrent datasets.
Contribute to and maintain cloud infrastructure Terraform across infrastructure and application repositories, including importing manually managed cloud resources, refactoring existing modules, and applying community best practices.

Requirements

What you’ll need

Bachelor's degree in a relevant field plus at least 8 years of experience, or a Master's degree plus 6 years of experience.
Demonstrated hands-on experience building and operating AWS serverless architectures: API Gateway (REST), Lambda, DynamoDB, S3, EventBridge, SQS, SNS, SSM Parameter Store, Secrets Manager, CloudWatch, and WAF.
Proficiency writing and maintaining Terraform at production scale, including modular design, multi-environment configuration (dev/val/prod), and state management.
Experience developing serverless functions in Python, including NoSQL database operations and writing testable, maintainable business logic with unit and integration test coverage.
Working knowledge of OAuth 2.0 flows, specifically client credentials (machine-to-machine), and practical experience with AWS Cognito user pools and resource server scopes.
Experience designing and implementing REST APIs with well-defined, versioned request/response contracts — including rate limiting, tiered usage plans, and consumer-facing API key management.
Strong understanding of defense-in-depth security: encryption at rest and in transit, network access controls, audit logging, and compliance requirements for federal systems handling PHI (HIPAA, FedRAMP, FISMA).
Ability to work independently as the sole developer on a complex, multi-phase effort — managing phased delivery, communicating status to stakeholders, and making sound architectural decisions without day-to-day oversight.
Familiarity with CI/CD tooling — specifically GitHub Actions — sufficient to maintain existing workflows, manage secrets, configure cloud authentication, and diagnose failed runs.
Excellent written communication skills: capable of producing runbooks, architecture documentation, and onboarding guides that a new team member or partner data team can follow without additional context.
Ability to obtain and maintain a Public Trust clearance.

Benefits

Comp & perks

Flex hours
401K with matching incentive
Parental Leave
Medical/dental/vision benefits
Flex Spending Account
Company provided short-term disability and life insurance
Commuter benefits
Paid Time Off (PTO)
11 Paid holidays

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

TerraformAWS LambdaAWS API GatewayDynamoDBS3EventBridgeSQSSNSPythonOAuth 2.0

Soft Skills

independent workstakeholder communicationarchitectural decision makingteam collaborationdocumentation writingtroubleshootingproject managementguidanceleadershipproblem solving

Certifications

Bachelor's degreeMaster's degreePublic Trust clearance