Cloud Platform Engineer – Connected Medical Devices

Build & Hire; Berlin; Hybrid; EUR 60,000 - 75,000; Full time

Benefits offered by this job

Hybrid work model

Professional development

Competitive compensation

Job summary

Build & Hire in Berlin is seeking an experienced Cloud Platform Engineer for connected medical devices. You will design and operate secure device-to-cloud ingestion and backend services using Node.js/TypeScript in Azure or AWS, with emphasis on security, privacy, and regulatory compliance.

Responsibilities include multi-tenant cloud architectures, OTA update workflows, IaC, CI/CD, and data protection aligned with GDPR/HIPAA.

Qualifications

• 6+ years of professional experience in cloud engineering, platform engineering, or backend engineering.
• Mandatory: Strong hands-on experience with Node.js for production-grade backend services and APIs.
• Experience with Azure or AWS in production environments.
• Designing REST/HTTPS APIs and secure communication protocols.
• Practical TLS, mTLS, token-based authentication, or cert-based client auth.
• Understanding of cybersecurity, data protection, and privacy requirements.

Responsibilities

• Design, build, and operate secure device-to-cloud ingestion services using REST/HTTPS APIs, TLS 1.2/1.3, mutual TLS (mTLS), and token-based device authentication.
• Develop and maintain production-grade backend services and APIs using Node.js, with TypeScript preferred.
• Design scalable cloud architectures for device telemetry, data storage, processing, and orchestration using Azure or AWS.
• Implement secure device identity and certificate lifecycle management, including provisioning, rotation, revocation, and authentication.
• Build secure, multi-tenant cloud services for device fleet management, user administration, configuration distribution, and role-based access for clinicians and patients.
• Apply cybersecurity best practices across application and infrastructure layers, including encryption, secrets management, identity and access management, network isolation, secure API design, and audit logging.
• Identify and mitigate security vulnerabilities through secure coding, threat modelling, security testing, vulnerability management, and ongoing risk assessment.
• Translate GDPR and HIPAA requirements into practical technical controls for data protection, access management, data handling, auditability, and privacy.
• Implement appropriate data residency and regional access controls, including US-EU data separation where required.
• Integrate healthcare and clinical systems using standards such as FHIR R4, HL7v2, and DICOM, with Azure Health Data Services or equivalent services where applicable.
• Develop and maintain licensing, entitlement, subscription, and payment integration services, including reliable webhook processing and billing lifecycle management.
• Implement secure over-the-air (OTA) device update workflows, including signed updates, staged rollouts, rollback mechanisms, and audit trails.
• Build and maintain infrastructure as code using Terraform, Bicep, or equivalent cloud automation tools.
• Develop and maintain CI/CD pipelines, automated testing, deployment automation, and secure software delivery practices.
• Implement monitoring, logging, metrics, tracing, alerting, and dashboards to maintain production reliability and operational visibility.
• Monitor system performance, availability, scalability, cloud costs, and security posture.
• Contribute to disaster recovery, business continuity, backup, and operational resilience planning.
• Support applicable medical device software and quality requirements, including IEC 62304, ISO 13485, and EU MDR where relevant.
• Collaborate with engineering, security, clinical, and regulatory stakeholders to deliver reliable, secure, and compliant cloud solutions.

Skills

Node.js

Azure

AWS

TypeScript

Security & privacy

CI/CD

REST API design

TLS/mTLS

OAuth/OpenID Connect

Terraform/Bicep

Docker

Kubernetes

FHIR/HL7/DICOM

IAM / RBAC

Data protection

Education

Bachelor's or Master's degree in CS/SE or related

Tools

Terraform

Bicep

CloudFormation

Docker

Kubernetes

Azure IoT

AWS IoT Core

FHIR/HL7/DICOM tools

Job description

We are currently hiring for an experienced Cloud Platform Engineer - Connected Medical Devices in Berlin for one of our clients, a Berlin-based medical technology company. The role focuses on building and operating the cloud services layer behind connected medical devices, covering everything from secure device-to-cloud communication and telemetry ingestion to cloud infrastructure, backend services, device management, and clinical system integration. You will be responsible for developing and maintaining production-grade cloud systems that are secure, scalable, reliable, and compliant with data protection requirements. The role requires strong backend engineering skills, mandatory Node.js experience, hands-on cloud platform expertise, and a solid understanding of cybersecurity principles and the practical implementation of GDPR and HIPAA requirements. You will work closely with software engineering, product, security, clinical, and regulatory teams to build secure cloud services that support connected medical devices and healthcare applications.

Key Responsibilities

• Design, build, and operate secure device-to-cloud ingestion services using REST/HTTPS APIs, TLS 1.2/1.3, mutual TLS (mTLS), and token-based device authentication.
• Develop and maintain production-grade backend services and APIs using Node.js, with TypeScript preferred.
• Design scalable cloud architectures for device telemetry, data storage, processing, and orchestration using Microsoft Azure or AWS.
• Implement cloud storage and data processing solutions using appropriate cloud services, including Azure Data Lake Storage Gen2, Cosmos DB, Azure SQL, Azure Data Factory, and Azure Stream Analytics, or equivalent AWS services.
• Implement secure device identity and certificate lifecycle management, including provisioning, rotation, revocation, and authentication.
• Build secure, multi-tenant cloud services for device fleet management, user administration, configuration distribution, and role-based access for clinicians and patients.
• Apply cybersecurity best practices across application and infrastructure layers, including encryption, secrets management, identity and access management, network isolation, secure API design, and audit logging.
• Identify and mitigate security vulnerabilities through secure coding, threat modelling, security testing, vulnerability management, and ongoing risk assessment.
• Translate GDPR and HIPAA requirements into practical technical controls for data protection, access management, data handling, auditability, and privacy.
• Implement appropriate data residency and regional access controls, including US-EU data separation where required.
• Integrate healthcare and clinical systems using standards such as FHIR R4, HL7v2, and DICOM, with Azure Health Data Services or equivalent services where applicable.
• Develop and maintain licensing, entitlement, subscription, and payment integration services, including reliable webhook processing and billing lifecycle management.
• Implement secure over-the-air (OTA) device update workflows, including signed updates, staged rollouts, rollback mechanisms, and audit trails.
• Build and maintain infrastructure as code using Terraform, Bicep, or equivalent cloud automation tools.
• Develop and maintain CI/CD pipelines, automated testing, deployment automation, and secure software delivery practices.
• Implement monitoring, logging, metrics, tracing, alerting, and dashboards to maintain production reliability and operational visibility.
• Monitor system performance, availability, scalability, cloud costs, and security posture.
• Contribute to disaster recovery, business continuity, backup, and operational resilience planning.
• Support applicable medical device software and quality requirements, including IEC 62304, ISO 13485, and EU MDR where relevant.
• Collaborate with engineering, security, clinical, and regulatory stakeholders to deliver reliable, secure, and compliant cloud solutions.

Required Skills / Primary Skills

• 6+ years of professional experience in cloud engineering, platform engineering, backend engineering, or a closely related field.
• Mandatory: Strong hands-on experience with Node.js for developing, deploying, and maintaining production-grade backend services and APIs.
• Demonstrated experience building, operating, and supporting real-world production systems, with responsibility for reliability, scalability, performance, and security.
• Hands-on experience with Microsoft Azure or AWS in production environments.
• Strong experience designing and implementing REST/HTTPS APIs, secure communication protocols, and authentication mechanisms.
• Practical experience with TLS, mTLS, token-based authentication, or certificate-based client authentication.
• Strong understanding of cybersecurity principles and experience building secure systems that protect against unauthorized access, common application vulnerabilities, and infrastructure-level threats.
• Hands-on experience implementing data protection and privacy controls, with practical knowledge of GDPR and HIPAA requirements.
• Experience with identity and access management, role-based access control, encryption, secrets management, secure networking, and audit logging.
• Experience designing and operating cloud-based services, distributed systems, and scalable backend architectures.
• Experience with infrastructure as code using Terraform, Bicep, CloudFormation, or comparable tools.
• Experience implementing CI/CD pipelines, automated testing, deployment workflows, and secure software development lifecycle practices.
• Understanding of production observability, incident investigation, performance monitoring, troubleshooting, and system reliability.
• Experience designing secure, maintainable systems with appropriate access controls, data protection measures, and operational safeguards.
• Ability to work independently, take ownership of technical systems, and collaborate effectively with cross-functional teams.
• Strong problem-solving skills and a documentation-driven engineering approach.
• Bachelor's or Master's degree in Computer Science, Software Engineering, Cybersecurity, or a related discipline, or equivalent practical experience.

Additional Skills

• Experience with TypeScript and Python for backend development, automation, and data tooling.
• Experience with Azure IoT services, connected device architectures, device twins, fleet management, and OTA update mechanisms.
• Familiarity with Azure Data Lake Storage Gen2, Cosmos DB, Azure SQL, Azure Data Factory, and Azure Stream Analytics.
• Experience with AWS IoT Core, Amazon S3, AWS Lambda, Amazon API Gateway, or equivalent AWS services.
• Experience with Azure Health Data Services, FHIR R4, HL7v2, DICOM, and SMART on FHIR.
• Knowledge of OAuth 2.0, OpenID Connect, and modern authentication and authorization patterns.
• Experience with multi-tenant SaaS architectures, multi-region deployments, and data residency requirements.
• Familiarity with containerization and orchestration technologies such as Docker and Kubernetes.
• Experience with security testing, threat modelling, vulnerability scanning, dependency management, and software supply chain security.
• Familiarity with observability tools such as Azure Monitor, Application Insights, Grafana, OpenTelemetry, or equivalent AWS monitoring services.
• Experience with disaster recovery, high availability, backup strategies, and business continuity planning.
• Experience integrating payment providers such as Stripe or Adyen and developing licensing or entitlement services.
• Knowledge of medical device software development and quality frameworks, including IEC 62304, ISO 13485, and EU MDR.
• Relevant Azure or AWS certifications.
• Experience working in medical technology, healthcare, connected devices, or other regulated industries.
• Excellent written and verbal communication skills.

Employment Details

• Role: Cloud Platform Engineer - Connected Medical Devices
• Experience: 6+ years
• Employment Type: Full Time
• Location: Berlin, Germany
• Work Model: Hybrid
• Industry: Medical Technology (MedTech)

Compensation

The position offers a salary of up to €75,000 gross per year, plus benefits. The final package will depend on relevant experience, technical expertise, demonstrated capabilities, and interview performance.

What We Offer

• The opportunity to contribute to connected medical technologies with a direct impact on patient outcomes.
• A technically broad engineering role spanning cloud infrastructure, backend development, connected devices, and cybersecurity.
• The opportunity to build and operate production-grade systems in a security-conscious, quality-driven medical technology environment.
• Exposure to healthcare integration, data protection, and the engineering challenges of regulated digital health solutions.
• Competitive compensation and benefits, with opportunities for professional development.

We are an equal opportunity employer committed to building a diverse and inclusive team.

If you are an experienced Cloud Platform Engineer with strong Node.js development skills, production cloud engineering experience, and hands-on expertise in cybersecurity and data protection, this is an opportunity to work at the intersection of cloud engineering, connected medical devices, and digital healthcare while helping build secure and reliable systems that support next-generation medical technology.