Node.js + AWS backend engineer (HIPAA/healthcare) — take an existing backend to production for PHI

About the project Early-stage healthcare SaaS: an AI-assisted clinical documentation tool for independent physicians. The product and front end are already built. I need an experienced backend engineer to take the server side to production and make it ready for real patient data (PHI). The scope is well-defined and I have a written technical spec to share with shortlisted candidates. I'm a non-technical founder, so clear communication matters as much as clean code — I want to understand and be able to maintain what you build. The work Migrate/deploy an existing Node.js / Express backend to AWS App Runner (currently on Railway). Secure secrets management and wiring of a third-party AI API key (Anthropic) — never exposed to the client. Implement the billing → access flow: Stripe webhook → auth-provider (Clerk) entitlement, with server-side enforcement so a provider only reaches what they purchased. (Detailed spec provided.) HIPAA-aware hardening: encryption in transit and at rest, IAM least-privilege, audit logging, proper secrets handling. Verify production readiness for PHI and document the setup in plain terms for a non-technical founder. (Later / optional, can scope separately): server-side storage for user-created templates; per-provider organizations for named seats. Must-have Production Node.js / Express backend experience. AWS (App Runner or ECS/Fargate), IAM, secrets management, encryption. Prior HIPAA / PHI healthcare systems shipped to production — please cite specifics. Stripe webhooks and an auth provider (Clerk, Auth0, or Cognito). Clear, jargon-light communication with a non-technical founder. Nice-to-have AWS certifications (Solutions Architect; Security – Specialty). LLM / AI API integration experience. Experience taking a system through an actual HIPAA audit. To apply, please include A healthcare/PHI system you took to production — what it was, your specific role, the stack. Briefly, how you handle PHI on AWS — secrets, encryption, IAM. (A few sentences is plenty.) Your willingness to start with a small paid trial task before the full build. A rough estimate and rate for the scope above. Notes Willing to sign an NDA. Because this infrastructure processes PHI, the contractor may also need to sign a Business Associate Agreement (BAA) — comfort with that is required. A detailed backend spec is available to shortlisted candidates (not shared publicly). I value someone who explains their work as they go — I want to come out of this understanding my own system.