Software Engineer, Hospital Integrations

About the job

ViTAA Medical Solutions Inc. (“ViTAA”) is a growing medical-device software company developing AI-powered medical-image analysis technology for the assessment and ViTAA Medical Solutions Inc. (“ViTAA”) is a growing medical-device software company developing AI-powered medical-image analysis technology for the assessment and treatment of vascular aneurysms. ViTAA’s platform applies proprietary algorithms to medical images to characterize the aortic wall and support more personalized aneurysm-risk assessment, surveillance, and procedural planning.

ViTAA is seeking a primary developer for the two systems that connect our platform to hospital environments: federated single sign-on, and the edge connector that retrieves imaging studies from a hospital's PACS.

The role

Every hospital that adopts our platform needs two things in place before clinical use begins: access for its clinicians, and a route for its imaging to reach our cloud. Both are supported today. You will build the systems that make them repeatable at scale.

1. Single sign-on. Hospitals require their clinicians to sign in with institutional credentials. You will implement the service-provider side of this capability, building SAML 2.0 and OpenID Connect (OIDC) federation against the identity providers our customers already operate, such as Microsoft Entra ID and Okta, and making per-hospital onboarding efficient enough to repeat across many sites.
2. The edge connector. A service installed inside the hospital network that communicates with the site's imaging systems and forwards studies to our cloud over a secure outbound connection. It operates unattended on infrastructure we do not administer, so it has to be reliable and straightforward for hospital IT staff to diagnose.

Scope and ownership. Reporting to our Chief Technology Officer, you own the implementation, testing, and packaging of both systems. Once they are in production, you will also support customer implementations alongside our Director of Integration, covering technical discovery, site readiness, configuration, validation, and go-live, and working across engineering, product, cybersecurity, and hospital IT, as well as quality and regulatory affairs.

Development runs under a medical-device quality system covering quality management (ISO 13485), software lifecycle (IEC 62304) and risk management (ISO 14971). Correctness requirements are demanding, because defects in this software can affect clinical decisions.

Work model

• Remote, based in Canada, operating on Eastern Time.
• Applicants must be legally authorized to work in Canada without sponsorship.
• As customer deployments begin, the role may involve occasional travel within North America.
• Some deployment activities may fall outside standard business hours.

What you'll work on

• Federated authentication as a relying party: per-tenant identity provider configuration, just-in-time provisioning, session and token lifetime, and tenant isolation between hospitals.
• Migrating our existing authentication onto a modern identity platform without a service interruption.
• The edge connector end-to-end: DICOM and DICOMweb ingest (AE titles, query/retrieve, storage, transfer syntaxes), store-and-forward, back-pressure, and observability that remains effective within hospital network constraints.
• Integrating third-party imaging components where appropriate, including open-source DICOM software outside the .NET ecosystem.
• The networking and certificate surface each deployment depends on: TLS, proxies, NAT, DNS, firewall rules and IP allowlists, agreed with each site's network and security owners.
• Packaging and installation: the build, the configuration, the upgrade path, and the runbook a hospital's IT team will follow.
• Documentation and verification evidence for hospital security review, vendor onboarding and our quality management system (QMS): design controls, verification and validation, risk management.

Requirements

• Bachelor's degree or higher in computer science, software engineering or a related technical field, or equivalent professional experience.
• 5+ years of professional backend software engineering experience.
• Hands-on OIDC or SAML integration, including configuring a relying party or service provider directly, working with tokens or assertions, and diagnosing a federation failure.
• Production .NET, including ownership of a service in production rather than contribution only.
• Experience developing software that operates in environments without direct administrative access, such as on-premise agents, installed services, appliances or embedded systems.
• Docker and container packaging, including image builds, configuration and versioning for software deployed into customer environments.
• Networking fundamentals sufficient to diagnose TLS and proxy failures from logs and packet captures.
• Rigour and attention to detail. Defects in this domain are frequently silent: incorrect time zone handling, an identifier stripped that should have been retained, a study that reports itself complete when it is not. The role requires the discipline to verify software behaviour against both the specification and the source data, and to recognize when the two disagree.

Nice to have

• DICOM or DICOMweb experience, and familiarity with PACS or VNA environments.
• Experience with any one of fo-dicom, Orthanc or dcm4che.
• Experience with any one of Auth0, WorkOS, Okta, Entra ID, Keycloak or Cognito, from the integrator's side.
• F#, or another functional or statically-typed language.
• Regulated software delivery, where design controls and verification evidence are part of shipping: medical-device standards (ISO 13485, IEC 62304), health data privacy, or an equivalent safety-critical discipline from aviation, automotive, rail or payments.
• Experience delivering services on AWS, with releases automated through CI pipelines.
• Experience supporting customers directly during production incidents.

Our stack

Our platform spans several languages and toolchains. The systems in this role are built in F# on .NET, running on PostgreSQL and AWS, with continuous integration in GitLab.

Prior F# experience is not expected: most engineers we hire have not written it, we allow dedicated time to learn, and existing .NET experience transfers directly. What matters more than any particular language is a solid grasp of fundamentals, an eye for detail, and an interest in strongly-typed functional code.

Why this role

This role covers two systems from initial design through production deployment at hospital sites, with end-to-end ownership of the implementation and visible impact on both the product and the field. It offers first-hand experience of how clinical software is deployed into hospital environments, including the protocols, the security review process and the installation, which is uncommon and durable expertise.

Equal Employment Opportunity

ViTAA Medical Solutions is an equal opportunity employer and considers qualified applicants without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity or expression, national origin, ancestry, age, disability, genetic information, veteran status, marital status, or any other status protected by applicable law. Reasonable accommodations will be provided to qualified individuals with disabilities as required by law.