Description
We are currently hiring for an experienced Cloud Platform Engineer – Connected Medical Devices in Berlin for one of our clients, a Berlin-based medical technology company. The role focuses on building and operating the cloud services layer behind connected medical devices, covering everything from secure device-to-cloud communication and telemetry ingestion to cloud infrastructure, backend services, device management, and clinical system integration.
Responsibilities
•Design, build, and operate secure device-to-cloud ingestion services using REST/HTTPS APIs, TLS 1.2/1.3, mutual TLS (mTLS), and token-based device authentication.
•Develop and maintain production-grade backend services and APIs using Node.js, with TypeScript preferred.
•Design scalable cloud architectures for device telemetry, data storage, processing, and orchestration using Microsoft Azure or AWS.
•Implement cloud storage and data processing solutions using appropriate cloud services, including Azure Data Lake Storage Gen2, Cosmos DB, Azure SQL, Azure Data Factory, and Azure Stream Analytics, or equivalent AWS services.
•Implement secure device identity and certificate lifecycle management, including provisioning, rotation, revocation, and authentication.
•Build secure, multi-tenant cloud services for device fleet management, user administration, configuration distribution, and role-based access for clinicians and patients.
•Apply cybersecurity best practices across application and infrastructure layers, including encryption, secrets management, identity and access management, network isolation, secure API design, and audit logging.
•Identify and mitigate security vulnerabilities through secure coding, threat modelling, security testing, vulnerability management, and ongoing risk assessment.
•Translate GDPR and HIPAA requirements into practical technical controls for data protection, access management, data handling, auditability, and privacy.
•Implement appropriate data residency and regional access controls, including US–EU data separation where required.
•Integrate healthcare and clinical systems using standards such as FHIR R4, HL7v2, and DICOM, with Azure Health Data Services or equivalent services where applicable.
•Develop and maintain licensing, entitlement, subscription, and payment integration services, including reliable webhook processing and billing lifecycle management.
•Implement secure over-the-air (OTA) device update workflows, including signed updates, staged rollouts, rollback mechanisms, and audit trails.
•Build and maintain infrastructure as code using Terraform, Bicep, or equivalent cloud automation tools.
•Develop and maintain CI/CD pipelines, automated testing, deployment automation, and secure software delivery practices.
•Implement monitoring, logging, metrics, tracing, alerting, and dashboards to maintain production reliability and operational visibility.
•Monitor system performance, availability, scalability, cloud costs, and security posture.
•Contribute to disaster recovery, business continuity, backup, and operational resilience planning.
•Support applicable medical device software and quality requirements, including IEC 62304, ISO 13485, and EU MDR where relevant.
•Collaborate with engineering, security, clinical, and regulatory stakeholders to deliver reliable, secure, and compliant cloud solutions.
Requirements
•6+ years of professional experience in cloud engineering, platform engineering, backend engineering, or a closely related field.
•Mandatory: Strong hands-on experience with Node.js for developing, deploying, and maintaining production-grade backend services and APIs.
•Demonstrated experience building, operating, and supporting real-world production systems, with responsibility for reliability, scalability, performance, and security.
•Hands-on experience with Microsoft Azure or AWS in production environments.
•Strong experience designing and implementing REST/HTTPS APIs, secure communication protocols, and authentication mechanisms.
•Practical experience with TLS, mTLS, token-based authentication, or certificate-based client authentication.
•Strong understanding of cybersecurity principles and experience building secure systems that protect against unauthorized access, common application vulnerabilities, and infrastructure-level threats.
•Hands-on experience implementing data protection and privacy controls, with practical knowledge of GDPR and HIPAA requirements.
•Experience with identity and access management, role-based access control, encryption, secrets management, secure networking, and audit logging.
•Experience designing and operating cloud-based services, distributed systems, and scalable backend architectures.
•Experience with infrastructure as code using Terraform, Bicep, CloudFormation, or comparable tools.
•Experience implementing CI/CD pipelines, automated testing, deployment workflows, and secure software development lifecycle practices.
•Understanding of production observability, incident investigation, performance monitoring, troubleshooting, and system reliability.
•Experience designing secure, maintainable systems with appropriate access controls, data protection measures, and operational safeguards.
•Ability to work independently, take ownership of technical systems, and collaborate effectively with cross-functional teams.
•Strong problem-solving skills and a documentation-driven engineering approach.
•Bachelor's or Master's degree in Computer Science, Software Engineering, Cybersecurity, or a related discipline, or equivalent practical experience.
Nice to have
•Experience with TypeScript and Python for backend development, automation, and data tooling.
•Experience with Azure IoT services, connected device architectures, device twins, fleet management, and OTA update mechanisms.
•Familiarity with Azure Data Lake Storage Gen2, Cosmos DB, Azure SQL, Azure Data Factory, and Azure Stream Analytics.
•Experience with AWS IoT Core, Amazon S3, AWS Lambda, Amazon API Gateway, or equivalent AWS services.
•Experience with Azure Health Data Services, FHIR R4, HL7v2, DICOM, and SMART on FHIR.
•Knowledge of OAuth 2.0, OpenID Connect, and modern authentication and authorization patterns.
•Experience with multi-tenant SaaS architectures, multi-region deployments, and data residency requirements.
•Familiarity with containerization and orchestration technologies such as Docker and Kubernetes.
•Experience with security testing, threat modelling, vulnerability scanning, dependency management, and software supply chain security.
•Familiarity with observability tools such as Azure Monitor, Application Insights, Grafana, OpenTelemetry, or equivalent AWS monitoring services.
•Experience with disaster recovery, high availability, backup strategies, and business continuity planning.
•Experience integrating payment providers such as Stripe or Adyen and developing licensing or entitlement services.
•Knowledge of medical device software development and quality frameworks, including IEC 62304, ISO 13485, and EU MDR.
•Relevant Azure or AWS certifications.
•Experience working in medical technology, healthcare, connected devices, or other regulated industries.
•Excellent written and verbal communication skills.
Conditions
•The position offers a salary of up to €75,000 gross per year, plus benefits.
•The final package will depend on relevant experience, technical expertise, demonstrated capabilities, and interview performance.
•The opportunity to contribute to connected medical technologies with a direct impact on patient outcomes.
•A technically broad engineering role spanning cloud infrastructure, backend development, connected devices, and cybersecurity.
•The opportunity to build and operate production-grade systems in a security-conscious, quality-driven medical technology environment.
•Exposure to healthcare integration, data protection, and the engineering challenges of regulated digital health solutions.
•Competitive compensation and benefits, with opportunities for professional development.
