Freelance Integration Developer | Apache Camel + Quarkus LIS Integration Gateway

Vitestro; Utrecht; On-site; EUR 83,000 - 124,000; Full time

Job summary

Vitestro seeks an experienced Integration Engineer to design and build a universal, stateless Camel+Quarkus gateway. The project will run for three to six months, with a handover to the Vitestro team and a focus on secure, compliant hospital integrations.

The role requires strong Java backend skills, experience with containerized multi-tenant architectures, and AWS or on-prem deployment in healthcare settings. It is a full-time contractor engagement based in the Netherlands.

Qualifications

• Proven production experience with Apache Camel or similar enterprise integration frameworks.
• Strong Java backend development background.
• Experience with Quarkus or cloud-native frameworks.
• Experience with multi-tenant architectures and OS-level isolation.
• Familiarity with mTLS, certificate lifecycle management, and secrets management.
• AWS experience: ECS/Fargate, S3, Secrets Manager.

Responsibilities

• Design and build a stateless Camel+Quarkus gateway image, externalizing hospital identity/config.
• Ensure reliability: delivery guarantees, idempotence, redelivery, and end-to-end traceability.
• Impose security/compliance: container isolation, mTLS, Secrets Manager integration, LogMasker.
• Create configuration-driven onboarding: hospital JSON mappings and credentials from S3/Secrets Manager.
• Deliver deployable OCI/Docker image usable in AWS and on-premise hospital infra.
• Provide handover: docs, runbooks, and templates for onboarding a new hospital.

Skills

Apache Camel

Quarkus

Java backend

Containerized multi-tenant

mTLS/certificate lifecycle

AWS (ECS/Fargate, S3)

Tools

Docker

Job description

About Vitestro

Founded in 2017 in Utrecht, Vitestro is pioneering the future of blood collection with the Aletta® Autonomous Robotic Phlebotomy Device™(ARPD™). This groundbreaking medical device combines advanced multi-modal imaging (near-infrared, ultrasound, and Doppler ultrasound) with robotics and AI to perform the entire diagnostic blood draw procedure autonomously.

By addressing critical healthcare staffing shortages and improving patient experience, Vitestro is transforming one of the most common and essential medical procedures. With more than 90 team members and growing rapidly, we are scaling our impact. As we placed our first devices with customers, we are now expanding our team to ensure successful implementation and long-term reliability.

At Vitestro, we are committed to continuous innovation and improvement.

The Assignment

Vitestro is building the LIS (Laboratory Information System) integration gateway that connects hospital laboratory systems to our venipuncture device platform. We have selected Apache Camel on Quarkus as the target architecture: a stateless, container-per-hospital gateway that can run centrally in AWS or on-premise at a hospital, with hard OS-level data isolation between tenants and zero-code onboarding of new hospitals via configuration.

Our internal Platform & Connectivity team does not have the capacity to deliver this build within our commercial timeline, so we are looking for an experienced freelancer/contractor (or small team) to build the initial gateway. A permanent Integration Engineer will take over operation, maintenance, and hospital-by-hospital rollout once the gateway is delivered — so a clean, well-documented handover is a hard requirement of this assignment, not an afterthought.

Key Deliverables

• Design and build the universal, stateless Camel + Quarkus gateway image: one codebase, hospital identity/config/transformations externalized and injected at container boot
• Implement the reliability properties required for clinical use: guaranteed delivery, idempotent consumption, redelivery and dead-letter handling, end-to-end traceability and replay, no silent data loss
• Implement the security and compliance baseline: hard container-level tenant isolation, mTLS with dynamic certificate retrieval from Secrets Manager, and the LogMasker component (PII/PPID/BSN masking before logs leave the container)
• Build the configuration-driven onboarding mechanism: hospital-specific JSON mapping tables and credentials streamed from S3/Secrets Manager at container startup, with zero code changes per hospital
• Deliver the gateway as a deployable OCI/Docker image, validated to run both centrally in AWS (ECS/Fargate) and — as a target capability — inside a hospital's own on-premise infrastructure
• Deliver a first working end-to-end connection to at least one GLIMS-based hospital as proof of the onboarding mechanism, to de-risk the \"configuration, not code\" claim before handover
• Set up CI/CD and infrastructure-as-code for the gateway, so environment and route configuration are version-controlled and reproducible
• Validate the published Quarkus native performance assumptions (boot time, idle memory footprint) against our actual route/component footprint, and flag any deviation from the architecture document's assumptions

Handover Requirements (critical)

• Full technical documentation of the gateway architecture, route structure, and configuration schema — written so an integration engineer without prior Camel exposure can maintain and extend it
• A working example/template for onboarding a new hospital, documented step by step
• Runbook for common operational scenarios: certificate rotation, failed delivery/dead-letter recovery, adding a new LIS variant
• Structured knowledge-transfer sessions with the incoming Integration Engineer before contract end
• Codebase and infrastructure-as-code left in a state that a mid-level backend engineer can operate without ongoing dependency on the contractor

Out of Scope

• Ongoing hospital-by-hospital rollout after initial validation (owned by the incoming Integration Engineer)
• Device/IoT fleet management (provisioning, OTA updates, telemetry) - separate workstream
• Long-term maintenance and support beyond the agreed handover period

This is a full-time engagement expected to run approximately three to six months, starting mid-September 2026. Technical delivery is targeted for end of 2026, followed by testing and stabilization through Q1 2027 to support go-live with our first Dutch GLIMS hospitals, with the engagement concluding around mid-March 2027. The project wraps up with a full handover of the integrations and runbooks to peers at Vitestro.

What You’ll Bring

• Proven production experience with Apache Camel, or demonstrable depth with a comparable enterprise integration framework (e.g. Spring Integration, MuleSoft, Red Hat Fuse) with genuine willingness and ability to ramp up on Camel quickly
• Strong experience with Quarkus, or comparable experience with another JVM native-image/cloud-native framework (e.g. Spring Boot with GraalVM, Micronaut)
• Solid Java backend development background
• Experience with container-based multi-tenant architectures and OS-level isolation patterns
• Experience with mTLS, certificate lifecycle management, and secrets management (AWS Secrets Manager or equivalent)
• AWS experience: ECS/Fargate, S3, Secrets Manager, CloudWatch
• Experience delivering in a regulated/compliance-sensitive environment (healthcare, finance, or similar) is a strong plus — GDPR/NEN 7510 awareness specifically
• Demonstrated ability to write documentation and hand over cleanly to a team that will operate what you built — this assignment ends with a handover, not with you staying on

How We Work

At Vitestro, ownership is not a slogan - it is an expectation. We trust people to take responsibility, make decisions, and drive work forward.

We believe breakthroughs happen when talented people combine dedication, accountability, and teamwork. That means:

• We take initiative rather than wait for direction.
• We focus on execution and delivering results.
• We proactively remove blockers and help each other succeed.
• We challenge ideas, not people.
• We continuously learn, improve, and raise the bar.
• We celebrate team success over individual heroics.

We move fast, but we do so thoughtfully. We care deeply about quality because the technology we build ultimately impacts patients and healthcare professionals.

If you are looking for an environment where you can make a significant contribution, take ownership of meaningful work, and be surrounded by