General Counsel

Medplum; San Francisco (CA); Hybrid; USD 250,000 - 350,000; Full time

Benefits offered by this job

Competitive equity

Flexible time off

Impact on healthcare technology

Job summary

Medplum is seeking a General Counsel to lead the company's legal strategy and scale the function as we grow. This hands-on role works directly with the founders and cross‑functional teams to shape commercial relationships, guide regulatory decisions, and manage risk in a fast‑growing health tech environment.

You will negotiate enterprise software agreements, own HIPAA/privacy programs, and partner with Product and Engineering on interoperability, open source licensing, AI, and data rights.

Qualifications

• J.D. from an accredited law school and active U.S. state bar in good standing (CA admission or eligibility for in-house).
• 10+ years of relevant legal experience, including in-house at a tech company.
• Deep healthcare/health tech experience with HIPAA, BAAs, privacy and security expertise.
• Proven track record negotiating complex enterprise software & technology agreements with risk allocation clauses.

Responsibilities

• Lead negotiations for enterprise agreements, BAAs, DPAs, and strategic tech partnerships.
• Own regulatory compliance for HIPAA privacy, data security, and associated obligations.
• Provide corporate and strategic counsel on governance, financings, IP, and employment matters; manage outside counsel.
• Collaborate with Product and Engineering on healthcare interoperability, open source licensing, AI, and data rights.

Skills

Contract Negotiation

Healthcare regulatory

In-house counsel

Interoperability licensing

AI-related legal issues

Education

J.D. degree

California Bar admission (eligible)

Job description

Medplum is building the open source, API-first platform for healthcare. Our infrastructure helps organizations build and operate clinical software with greater flexibility, interoperability, and control over their data. That work puts us at the center of some of healthcare's most challenging technical and regulatory problems.

As Medplum's General Counsel, you will lead the company's legal strategy and build a legal function that scales with our business.

This is a hands-on leadership role working directly with our founders and cross-functional teams. You will shape our commercial relationships, guide regulatory and risk decisions, and serve as a trusted advisor as Medplum continues to grow.

We are looking for someone who combines deep healthcare regulatory expertise with strong commercial instincts, sound judgment, and a practical, solutions-oriented approach to legal challenges.

What You Will Do

Lead Commercial and Strategic Transactions

Lead negotiations for enterprise customer agreements, BAAs, DPAs, technology partnerships, vendor contracts, and other strategic transactions. Develop scalable contracting frameworks and processes.

Own Healthcare Regulatory and Compliance

Serve as Medplum's HIPAA Privacy Officer and own regulatory compliance. Provide expert guidance on HIPAA, healthcare privacy, data security, and regulatory obligations. Partner with our Head of Security, who owns security compliance programs such as SOC 2 and HITRUST, on risk management and incident response.

Provide Corporate and Strategic Counsel

Advise leadership on corporate governance, financings, employment matters, intellectual property, and other legal issues. Manage outside counsel as appropriate.

Partner With Product and Engineering

Work with Product and Engineering on emerging legal questions involving healthcare interoperability, open source licensing, AI, data rights, and new technologies.

Build Legal Operations

Establish practical legal policies, documentation, and workflows that support efficient decision-making across the organization.

About You

• You have a J.D. from an accredited law school and are an active member in good standing of a U.S. state bar, with California admission or eligibility for Registered In-House Counsel.
• You have 10+ years of relevant legal experience, including meaningful in-house experience at a technology company.
• You have deep experience in healthcare or health technology, with demonstrated expertise in HIPAA, BAAs, and healthcare privacy and security.
• You have a track record of negotiating complex enterprise software and technology agreements, including commercial risk allocation, indemnification, and liability provisions.
• You have strong business judgment and can balance legal risk with commercial objectives.
• You communicate clearly and take a collaborative, pragmatic approach to problem-solving.
• You are comfortable operating independently and building scalable processes in a fast-growing organization.
• You're based in the SF Bay Area and available for twice-weekly in-person collaboration.

Bonus

• Experience building an in-house legal function.
• Familiarity with open source software and licensing.
• Familiarity with healthcare interoperability or ONC certification.
• Familiarity with HITRUST, SOC 2, or similar security and compliance frameworks.
• Experience with AI-related legal issues.

About Medplum

Medplum is redefining healthcare with our open source, API-first electronic health record (EHR) platform, trusted by leading digital health and life sciences companies. Our mission is to catalyze change in the healthcare industry by improving the access, privacy, and utility of health data. At Medplum, we have a unique opportunity to impact the lives of patients, speed medical research, and contribute to the open source ecosystem.

• Competitive compensation package with equity
• Flexible time off
• The chance to shape the future of healthcare tech – leave your mark on this vital industry

The San Francisco, CA base salary range for this role is $250,000-$350,000 per year. Actual base salary within this range will be determined based on job-related skills, experience, and qualifications.