Software Developer for Health Assessment System

We are seeking an experienced software engineer to develop a system that scores and analyzes results of health and fitness assessment tests. The ideal candidate will have a strong background in software engineering and experience with data analysis and scoring systems. Responsibilities include designing and implementing software solutions, collaborating with cross-functional teams, and ensuring high-quality deliverables. The tool applies proprietary scoring logic to calculate objectively scored indexes. Based on the results, the system provides engaging reports which include the scoring and recommendations for improvement in plain text, tracking the scoring over time, year to year and group comparison reports, and general account management. The current architecture appears to include AWS Amplify, AWS Lambda, API Gateway, S3, Node.js, Python, GitHub deployment, PDF generation, and email delivery. We are looking for someone who can first perform a technical audit, document the current system, identify risks/bugs, and then help implement priority updates. Experience with AWS serverless architecture, Node.js, Python, PDF generation, CSV import/export, authentication, role-based access, and data validation is required. Experience with health, fitness, sports, education, or assessment platforms is a strong plus. Because this system handles personal and health/fitness assessment-related data, applicants must have practical experience with privacy-conscious software development. Experience with HIPAA and GDPR requirements is strongly preferred. We understand that software engineers are not legal/compliance counsel, but we expect the developer to know how to build secure systems that support compliance requirements, including access controls, encryption, audit logs, data minimization, secure report delivery, and appropriate data retention/deletion workflows. Required: Practical experience developing or maintaining applications that handle sensitive personal, health, fitness, education, or assessment data, with working knowledge of HIPAA and GDPR security/privacy principles.