About the Role
We are looking for an experienced Cloud Platform Engineer to build and operate the cloud services layer behind our connected medical device platform on Microsoft Azure — from device telemetry ingress through storage, orchestration, and clinical system integration, under HIPAA and GDPR constraints.
Key Responsibilities
- Design and operate the REST/HTTPS device-to-cloud ingestion path (TLS 1.2/1.3, mTLS or token-based device auth) and manage the device certificate lifecycle
- Implement tiered storage and data pipelines across Data Lake Gen2, Cosmos DB, Azure SQL, and Data Factory / Stream Analytics, with US–EU data residency separation
- Enforce platform security: encryption, Key Vault, Entra ID access control, Private Link isolation, audit logging, and secure SDLC
- Translate HIPAA and GDPR obligations into concrete Azure controls and continuous compliance evidence; align with IEC 62304 and ISO 13485 where applicable
- Integrate clinical systems via Azure Health Data Services (FHIR R4, DICOM, HL7v2) and SMART on FHIR authorization
- Build licensing and entitlement services, and integrate payment providers (Stripe, Adyen) with reliable webhook and billing lifecycle handling
- Operate multi-tenant device fleet and user management, including device twins, configuration distribution, and role-based access for clinicians and patients
- Deliver signed OTA updates via Azure Device Update, with staged rollout, rollback, and a full audit trail
- Own Azure infrastructure as code (Bicep/Terraform), CI/CD, observability, cost management, and DR/BCP
Required Qualifications
- 6+ years in cloud engineering, including 3+ years hands-on Azure in production
- Strong Node.js and TypeScript development experience for backend services and APIs, plus Python for data tooling
- Production experience with high-throughput REST/HTTPS APIs, TLS/mTLS, and certificate-based client authentication
- Demonstrated device-to-cloud IoT architecture at fleet scale
- Working knowledge of HIPAA and GDPR as engineering requirements, not just policy
- Infrastructure-as-code, CI/CD, and observability as everyday practice
Preferred Qualifications
- Azure Authentication, Azure Data Storage, Azure Health Data Services / FHIR experience
- Background in regulated industries (medical devices, aerospace, automotive) — IEC 62304, ISO 13485, EU MDR
- Multi-region, multi-tenant SaaS with data residency constraints
- Azure certifications (AZ-305, AZ-500, AZ-220);
What We Offer
Work with direct impact on patient outcomes, a technically broad role across IoT and cloud, a quality-driven engineering culture, and competitive compensation and development support.
We are an equal opportunity employer committed to building a diverse and inclusive team.
Job Type: Full-time
Pay: 51.820,51€ - 80.000,00€ per year
Ability to commute/relocate:
- Berlin: Reliably commute or planning to relocate before starting work (Required)
Language:
License/Certification:
- Work Permit in Germany (Required)
Work Location: In person
