Senior Software Engineer (API Integrations)

Handtevy-Pediatric Emergency Standards•Davie, FL

About The Position

We are hiring a Senior Software Engineer focused on Enterprise API Integrations to lead the design and delivery of our growing integration ecosystem, with a near-term focus on ePCR, narcotic (controlled substance) tracking and blood product tracking platforms used by EMS agencies and hospitals. This role is the technical owner of how Handtevy talks to the rest of the healthcare operations stack. You will both: Integrate Handtevy as a client with partner systems that already expose APIs, and Expose Handtevy's APIs as the system of record for partners who need to consume our data. You will work directly with our CTO, engineering leads, product, and partner engineering counterparts at integration partners. You will own the integration platform end-to-end: contracts, security, reliability, observability, and the partner-facing surface area.

Requirements

Bachelor's degree in Computer Science, Engineering, or related field.
5+ years of backend development, with meaningful time spent on integrations, API platforms, or partner-facing systems.
Strong production experience with Node.js and NestJS (or a comparable typed, modular backend framework you can demonstrate transfers cleanly).
Strong proficiency designing and consuming RESTful APIs, including pagination, idempotency, error contracts, and versioning strategy.
Deep understanding of authentication and authorization: OAuth 2.0 (authorization code, client credentials, refresh flows), JWT (signing, validation, key rotation), SSO/SAML, API keys, and mTLS.
Hands-on experience designing resilient integration patterns: idempotency keys, retry strategies, dead-letter queues, circuit breakers, backpressure, eventual consistency, and reconciliation.
Experience with webhooks as both producer and consumer: signing, verification, replay, and at-least-once delivery semantics.
Experience with OpenAPI/Swagger as a contract, not just documentation.
Comfort reading vendor API docs critically and finding the gaps before they bite you in production.
Proficiency with relational and NoSQL databases: SQL: MySQL (optional: PostgreSQL, MSSQL), NoSQL: MongoDB / DocumentDB (optional: Redis, DynamoDB)
ORMs: TypeORM (optional: Sequelize, Prisma)
Experience with AWS services relevant to integrations: Aurora, SQS / SNS / EventBridge, Lambda, Secrets Manager, API Gateway, CloudWatch, S3, SES, CloudFront.
Hands-on with Docker, Git, and CI/CD pipelines (GitHub Actions, Bitbucket Pipelines).
Strong grasp of software design patterns, security best practices, and distributed system tradeoffs.
Excellent collaboration and written communication. You will write integration specs and partner-facing docs, not just code.

Nice To Haves

Familiarity with healthcare interoperability standards: HL7 v2 message structures and FHIR R4 resources.
Awareness of HIPAA requirements as they apply to engineering.
Direct experience integrating with narcotic / controlled substance tracking platforms
Direct experience integrating with blood product tracking systems and familiarity with ISBT 128 labeling and AABB standards.
Familiarity with DEA controlled substance recordkeeping requirements, CSOS, and state-level PDMP concepts.
Integration experience with ePCR platforms (ESO, ImageTrend, Zoll, etc) or hospital EHRs (Epic, Cerner / Oracle Health, Meditech) via HL7, FHIR, or proprietary APIs.
Experience standing up a partner / developer portal or public API documentation site.
Familiarity with PHP and Laravel
Event-driven architecture experience: Kafka, Kinesis, EventBridge, or similar.
Expertise with AI-assisted development tools
Observability platforms: Datadog, New Relic, or similar.
Prior experience in healthcare tech or another regulated industry.

Responsibilities

Integration architecture and delivery
Handtevy's outbound API platform
Evolve our public-facing API into a partner platform.
Own API authentication and authorization for partners: OAuth 2.0 client credentials, JWT, scoped API keys, and per-tenant rate limiting.
Drive developer experience for partners: OpenAPI specs as the source of truth, generated client examples, Postman collections, sandbox data, and partner-facing documentation.
Reliability, security, and compliance
Contribute to SOC 2 controls in integration code paths: change management, access reviews, secret rotation, evidence collection.
Build observability into every integration: structured logs, correlation IDs that follow a record across systems, metrics on partner latency and error rates, and alerting on silent failures (a partner that stops sending data is not a healthy partner).
Champion test coverage, contract tests against partner sandboxes, and integration-specific chaos testing.
Cross-functional leadership
Partner with Product and Engineering Leads to scope integrations, define success metrics, and prioritize the integration roadmap.
Partner with Clinical, Customer Success, and Implementation teams on customer-specific deployment and configuration.
Lead technical conversations with partner engineering teams. You will be the engineer on the call when their API doesn't behave as documented.
Participate in architecture discussions, code reviews, sprint planning, and mentorship of other engineers.