We are looking for a skilled and passionate Senior NestJS Engineer with 3–5 years of experience in backend development. The ideal candidate should have strong expertise in NestJS, Node.js, TypeScript, API development, and microservices architecture. You will collaborate with cross-functional teams to design, develop, and maintain scalable backend systems while ensuring performance, security, and reliability.
Experience
- 4–5 years minimum in NestJS or equivalent Node.js backend — TypeScript throughout
- Demonstrable experience with multi-step approval or workflow systems
- Experience with RBAC / ABAC implementation in a real production system
- Healthcare, regulated industry, or clinical systems experience is a strong advantage
- EMR, FHIR, or HL7 exposure is a bonus — not required
Duties :
Core services
- Design and build a lifecycle state machine with transition guards and role-based permissions
- Build a multi-step approval workflow engine with configurable authority, rejection handling, and deadline
- escalation
- Implement an immutable audit trail service with tamper-evident storage and exportable reports
- Build async job infrastructure using BullMQ + Redis for background processing — drift detection triggers,
- deployment orchestration, notification dispatch
- Implement WebSocket gateway for real-time in-app notification delivery
Auth & security
- Implement RBAC and ABAC for persona-based access — Pharmacist, Physician, General, Analyst — with
- attribute-level policy enforcement
- Implement SSO / SAML integration for enterprise identity providers — Azure AD, Okta, custom IdP
- Implement tenant-aware Prisma middleware with PostgreSQL Row Level Security for multi-tenant data
- isolation
- Manage secrets via AWS Secrets Manager — no credentials in environment files or repositories
API & integration
- Define and own OpenAPI / Swagger contracts — agreed before parallel frontend and backend
- development begins
- Build and maintain internal REST service contracts between NestJS and FastAPI services
- Implement streaming responses for long-running operations where applicable
- Integrate with AWS services — S3, SES, Secrets Manager, CloudWatch Logs, ElastiCache
- Infrastructure & quality
- Containerise all services with Docker — multi-stage Dockerfiles, local Compose for development
- Contribute to GitHub Actions CI/CD pipeline — automated test, build, and deploy on merge
- Write Jest unit and integration tests as a definition of done — not as an afterthought
- Implement structured JSON logging from day one — health system IT teams will review logs during vendor
- onboarding
Required Skill:
- NestJS — modules, guards, interceptors, pipes, decorators, custom providers
- Prisma ORM with PostgreSQL — schema design, migrations, middleware, raw queries where needed
- Event-driven architecture — BullMQ, Redis, async job queues, event emitters
- WebSocket — NestJS Gateway, real-time bidirectional communication
- Streaming — server-sent events or streaming responses for long-running operations
- REST API design — OpenAPI / Swagger, versioning, consistent error handling
- TypeScript — strict mode, generics, utility types
- JWT, Passport.js — session management, token refresh, guard composition
- RBAC and ABAC — role and attribute-based access control patterns in NestJS
- SAML / SSO — enterprise identity provider integration (Azure AD, Okta, Epic IdP)
- PostgreSQL Row Level Security — policy authoring in migrations, tenant scoping
- Docker — Dockerfile authoring, multi-stage builds, Docker Compose for local dev
- GitHub Actions — CI/CD pipeline authoring, automated test and deploy workflows
- AWS — ECS Fargate, S3, SES, Secrets Manager, CloudWatch Logs, ElastiCache
- PostgreSQL — indexing, query optimisation, RLS policies
Pay: ₹150,000.00 - ₹160,000.00 per month
Work Location: In person
