Senior Backend Engineer - Authentication and Authorization - Remote

Overview

HeartFlow, Inc. is a medical technology company advancing the diagnosis and management of coronary artery disease, the #1 cause of death worldwide, using cutting-edge technology. The flagship product—an AI-driven, non-invasive cardiac test supported by the ACC/AHA Chest Pain Guidelines called the HeartFlow FFR_CTAnalysis—provides a color-coded, 3D model of a patient’s coronary arteries indicating the impact blockages have on blood flow to the heart. HeartFlow is the first AI-driven non-invasive integrated heart care solution across the CCTA pathway that helps clinicians identify stenoses in the coronary arteries (RoadMap™Analysis), assess coronary blood flow (FFR_CTAnalysis), and characterize and quantify coronary atherosclerosis (Plaque Analysis). Our pipeline of products is growing and so is our team; join us in helping to revolutionize precision heartcare.

In Short

• Develop secure and robust authentication and authorization workflows
• Drive technical decision around identity management and access control
• Design and implement scalable backend services and APIs
• Identify technology risks and dependencies early to establish mitigation plans
• Mentor and guide other engineers in secure backend best practices and OWASP
• Lead the architecture of distributed systems and microservices
• Building and maintain critical backend infrastructure
• Participate in security audits and compliance reviews
• Collaborate with InfoSec and AppSec teams on security implementations
• Collaborate cross-functionally with key partners in Product Management, Strategy, Operations, and Regulatory to ensure high-quality, high-impact delivery of innovative software projects

Requirements

• Education: Bachelor's degree in Computer Science, Engineering, or related discipline, or equivalent experience.
• Experience: 10+ years of relevant industry experience
• Strong proficiency in modern backend (e.g., Python, Java, Go, Django, Flask, or similar) technologies and database technologies (SQL, NoSQL, or similar) understanding of front-end (e.g., Vue.js, JavaScript, React, Angular, or similar) technologies
• Proven track record implementing authentication and authorization systems
• Strong expertise in distributed systems and microservices architecture
• Demonstrated experience in building, deploying large-scale, secure RESTful APIs
• Experience driving technical vision and leading architectural decisions; ability to mentor and lead other engineers.
• Experience with Agile development methodologies and project management tools.
• Strong understanding of web security best practices.
• Experience with DevOps best practices (e.g., CI/CD pipelines).
• Experience with or willingness to learn about FDA regulations and compliance requirements for medical software.
• Demonstrated ability to work in a fast-paced, collaborative environment.

Benefits

• Competitive salary and cash bonus
• Stock options
• Opportunity to work in a fast-paced, innovative environment
• Collaborative team culture
• Support for professional development