Senior Backend Engineer, Compliance Platform
Posted Updated
Summary
Founding senior backend engineer to build Supio's internal Compliance Platform from scratch — anonymizing, de-identifying, and pseudonymizing PII/PHI (medical records, case files) so it stays usable by the company's legal AI, with audit trails, access controls, and compliance reporting. Core stack: AWS ecosystem, S3, relational databases, HIPAA/PHI workflows.
About the role
Regulation is coming to legal AI, and Supio is getting ahead of it. We are standing up a brand-new Compliance Platform team to protect the most sensitive data our customers entrust to us — the medical records, police reports, and case files at the heart of every personal injury matter. As the founding backend engineer, you will design and build this platform from the ground up: an internal platform-as-a-service that anonymizes, de-identifies, and pseudonymizes PII and PHI while keeping documents fully usable by our AI systems, with rigorous auditing, access control, and reporting on top. It is a founding seat with executive visibility, a real delivery timeline, and company-wide impact from day one.
What you'll do
- Architect and build new features for an internal compliance platform-as-a-service that integrates with Supio's existing systems
- Build anonymization, de-identification, and pseudonymization pipelines for customer PII and PHI — medical records, police reports, and other case documents — that keep data usable for AI workflows
- Implement audit trails covering every access to a customer file, whether by a Supio employee, a system, or a customer
- Build tracking and enforcement for BAAs, customer contracts, data opt-in/opt-out, data residency, and geographic compliance requirements.
- Design access controls with chain-of-command approval enforcement, and the reporting to show who accessed what, why, and with what authorization.
- Build notification and remediation workflows so issues are found and fixed, not just logged.
- Partner closely with DevOps, engineering teams across Supio, and the Office of the CTO — our privacy function.
What you'll bring
- 7+ years of backend engineering experience, with significant time on data-sensitive systems
- You have built a compliance, privacy, or data-governance platform before. This is the bar — we are looking for someone who has done this work, not someone adjacent to it
- Deep, practical knowledge of HIPAA and the safe handling of PHI and PII
- Experience with agentic AI development, or building platforms that AI systems consume
- Familiarity with SOC 2, HITRUST, or similar frameworks
- Strong experience with cloud data infrastructure — S3, relational databases, and the AWS ecosystem
- A security-first mindset: authentication, authorization, least privilege, audit logging
- Comfort moving quickly toward a real regulatory deadline without cutting corners
- Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience
Nice-to-haves
- Time in legal, healthcare, or another regulated industry
How we hire
Our standard engineering interview process, including an engineering leadership screen that goes deep on your compliance platform experience.
Compensation
As an early-stage startup, we offer a competitive compensation package that includes base salary, meaningful equity, and benefits. Equity grants are designed to ensure employees share in the long-term success and upside of the company.
Base Salary by Location
- Seattle, WA: $170,000 – $243,000 annually
- San Francisco, CA: $200,000 - $255,000 annually
Actual compensation may vary outside of these ranges based on a number of factors, including a candidate’s qualifications, skills, competencies, experience, and geographic location.
What they ask for
Required
- 7+ years of backend engineering experience, with significant time on data-sensitive systems
- Has built a compliance, privacy, or data-governance platform before
- Deep, practical knowledge of HIPAA and safe handling of PHI and PII
- Experience with agentic AI development, or building platforms that AI systems consume
- Familiarity with SOC 2, HITRUST, or similar frameworks
- Strong experience with cloud data infrastructure — S3, relational databases, AWS ecosystem
- Security-first mindset: authentication, authorization, least privilege, audit logging
- Comfort moving quickly toward a real regulatory deadline without cutting corners
- Bachelor's or Master's degree in Computer Science, Engineering, or related field, or equivalent practical experience
Preferred
- Time in legal, healthcare, or another regulated industry
