Mobile App Backend Developer (AWS Tarraform and ReactNative)

Physicians for Human Rights (PHR), which shared in the Nobel Peace Prize in 1997, is a U.S.-based international advocacy organization working at the intersection of medicine, science, and law. With a global network of thousands of medical, scientific, and legal experts, PHR uses the power of medical and scientific evidence to document violations of human rights and humanitarian law, prevent abuses, protect survivors, and promote justice and universal human rights for all.

Building upon its highly respected place in the field, and supported by a committed and talented team, PHR seeks a Mobile App Backend Developer (AWS Terraform and ReactNative).

Location: Remote/Global Capacity

Reports to: MediCapt Tech Project Manager

Organizational Overview

Physicians for Human Rights was founded in 1986 by five physicians who were united in the belief that health professionals, with their specialized skills, ethical duties, and credible voices, are uniquely positioned to prevent harm and promote respect for human rights. Since its founding, PHR has built a long and distinguished record of accomplishment by conducting groundbreaking investigations and advocacy, in concert with strategic partners.

PHR’s approach includes extensive documentation of the use of illegal and inhumane weapons in armed conflicts, attacks on civilians, and the physical and psychological impacts of torture and sexual violence as a weapon of war. Other core activities include protecting the rights of those seeking asylum in the United States, the human rights implications of the COVID-19 pandemic, and halting attacks on medical facilities and frontline health professionals.

Role Description

PHR seeks a Mobile App Backend Developer (AWS Terraform and ReactNative) for a 3 week to 3 month consultancy to support security-related updates to our award-winning mobile application for documentation of forensic evidence of sexual violence, MediCapt.

The UN estimates that one in three women around the world will suffer sexual violence during their lifetime. To support the reliable and secure documentation of forensic evidence needed to support accountability for sexual violence cases, PHR designed and developed MediCapt, an award-winning mobile application to document forensic evidence of sexual violence. MediCapt provides a digital platform to facilitate the comprehensive collection of evidence by clinicians, including forensic photography of injuries sustained by survivors. MediCapt allows this forensic evidence to be securely stored in the cloud and safely shared with law enforcement and justice sector officials to inform investigations and prosecutions.

The Backend Tech Development Consultant will provide critical support to implement PHR’s updated vision for the application. PHR is in the final stages of an overhaul of MediCapt’s core architecture, and the consultant will support completion of the code update. This includes responding to key improvements PHR has identified as required to ensure the highest level of data security for our mobile application, as well as implementing additional features to respond to end user feedback.

Developing these features will require anonymizing data and setting hard limits to ensure patient privacy while allowing police and justice sector partners to assist survivors and be part of the solution to prevent future assaults.

This version of MediCapt (known as MediCapt 2.0) is written primarily in React Native (TypeScript) and primarily focuses on the Web and Android applications, with the Android app being specifically designed to be fully operational (at the user-level) while offline by caching a user’s data locally when they initially sign in. The server backend is built around AWS and leverages its many features for user management, data storage, permissions management, logging, etc.

Responsibilities

Simplify the effort needed to launch a new instance of MediCapt (Terraform and shell script configuration) and document the process

Complete backend functionality

• Six vulnerabilities were called out in a recent audit along with instructions on how to reproduce and fix them. All vulnerabilities are due to the platform being incomplete and have simple solutions (e.g. add HSTS http header, clear JavaScript local storage on logout, etc.).
• Implement any missing server logging and intrusion detection measures as needed
• Finish implementing approximately 15-20 server endpoints (defined in TypeScript) for planned features
  • Secure existing and new endpoints
  • Implement any missing server logging and intrusion detection measures as needed
  • Implement checks for patient information in logs and appropriate alerting measures
  • Implement solutions to six fixes recommended from a recent security audit of the updated cod
  • Six vulnerabilities were called out in a recent audit along with instructions on how to reproduce and fix them. All vulnerabilities are due to the platform being incomplete and have simple solutions (e.g. add HSTS http header, clear JavaScript local storage on logout, etc.).
  • Work with MediCapt team to ensure the fixes do not limit the platform’s potential or break any required features (such as offline functionality)
• Work with MediCapt team to ensure the fixes do not limit the platform’s potential or break any required features (such as offline functionality)
• Implement checks for patient information in logs and appropriate alerting measures
• Secure existing and new endpoints
• Implement solutions to six fixes recommended from a recent security audit of the updated cod

Requirements

• Experience with AWS Terraform configuration
• Minimum 3-5 years of experience with AWS services
• Proven track record of properly securing public facing web databases with highly sensitive information
• Cybersecurity background and/or experience a significant plus
• Minimum 2-4 years of experience with TypeScript

Salary and Benefits

This is a short-term 3 week to 3 month consultancy, in a remote/global capacity. The weekly pay rate range is $1,600-$2,400 and commensurate with experience.

How to Apply

Please email cover letter and resume to [email protected]. Please include your desired pay rate, the job title of the position you are applying for in the subject line of your email and where you saw this job posting in the email body.

Physicians for Human Rights is an equal opportunity employer. We recruit and hire without regard to race, national origin, religion, gender identity, sexual orientation, prior conviction, arrest history, disability, marital status, veteran status, or age.