Senior Full Stack Python Engineer

Do you want to build a great platform that is the core of an innovative health-tech operation and will impact the wellbeing hundred of thousands, if not millions of people? Tell us what you need to make it happen! The more successful we are, there more people we will help lead healthier, happier lives!

About Wellis

Wellis is a fast-growing healthtech scale-up that is reinventing one of the most traditional sectors: healthcare. What started just three years ago has already grown into a company with tens of thousands of customers, and we are only at the beginning. By combining medical expertise with technology and data, we make healthcare smarter, more efficient, and more personal.

Our mission is to improve everyday lives by making care accessible, personal, and seamless. Through our platform, people can take control of their health journey with trusted medical support, smart digital tools, and tailored programs. We move fast, challenge conventions, and build solutions that truly make an impact, because we believe better healthcare should be within everyone's reach.

The Role

You will be a core member of the Core Platform & API squad, working directly on the engine that powers every part of the Wellis platform. You'll build and maintain the PostgreSQL database layer, design and implement FastAPI endpoints, write the business logic for prescription and medication workflows, and contribute to the IAM and signing infrastructure that makes our card-free architecture possible.

This is not a role where you build CRUD endpoints and move on. The data you handle is patient medication records. The APIs you build are consumed by pharmacists making clinical decisions. The signing workflows you contribute to have legal force. You need to care about correctness, security, and reliability at a level most backend roles never demand.

What You'll Build

• PostgreSQL / Supabase core: work with a 31-table schema covering patient management, clinical data, prescriptions, healthcare providers, IoT devices, and audit logging. Own migrations, indexing, query performance, and data integrity.

• FastAPI internal API layer: design and implement the endpoints that serve both the web portal and mobile app. Schema-first API design, request validation, auth token verification, pagination, and response shaping.

• Business logic: prescription workflows (create, validate, dispense, track), medication record management, patient lifecycle, clinical rules engine, drug interaction checks.

• Integration touchpoints: work with the Integration/Automation Engineer on data flows between Supabase, Firmhouse (billing), Monta (logistics), and Odoo (ERP/WMS) via the Workato orchestration layer.

• IAM and security: contribute to Supabase Auth configuration, RBAC policy design, jurisdiction-scoped Row Level Security, and JWT token lifecycle management. Work alongside the IT Systems & Security Manager on Cloud HSM signing workflows.

• Audit logging: implement tamper-proof audit trails to NEN 7513 (Netherlands) and BDSG (Germany) standards for all data access and clinical operations.

• CI/CD and infrastructure: contribute to deployment pipelines, GCP infrastructure, monitoring, and alerting. Own the reliability of what you build.

What we offer

• Salary range € 7.000 - € 10.000 gross per month (depending on experience)

• Pension plan

• Learning budget

• Monthly personal budget (Alleo)

• Hybrid working: partly from our new office in central Rotterdam (2 days)

• 20 days of remote working per year

• Working from home allowance (2 days a week)

• A culture of short lines, speed, and continuous improvement — where pragmatism and impact matter.

• The opportunity to help build a fast-growing healthtech scale-up from the inside.

Essential

• 4+ years of professional backend engineering with Python as a primary language. You write clean, testable, well-documented code.

• Strong PostgreSQL experience: complex queries, indexing strategies, migrations, performance tuning. You understand RLS and can reason about data access patterns at the row level.

• API design experience: you've designed and built RESTful APIs that other teams depend on. FastAPI experience preferred; Flask or Django REST Framework transferable.

• Security-conscious mindset: you think about authentication, authorisation, input validation, and data protection as part of building, not as an afterthought.

• Experience with regulated or sensitive data: healthcare, financial services, legal, or government. You understand why audit logging matters and why 'move fast and break things' doesn't apply to patient data.

• Comfortable with infrastructure: you can work with Docker, CI/CD pipelines, and cloud infrastructure (GCP preferred, AWS/Azure transferable). You don't need a DevOps team to deploy your own code.

Highly Desirable

• Experience with Supabase or similar BaaS platforms (Firebase, Appwrite) — understanding how managed auth and RLS work at scale.

• Healthcare data standards: HL7 FHIR, MP9, clinical terminologies. Not required at hire, but willingness to learn is essential.

• Experience with integration/orchestration platforms (Workato, Make, n8n, Zapier) — understanding event-driven architectures and data sync patterns.

• Familiarity with HSM-based signing, certificate management, or cryptographic operations.

• Working knowledge of GDPR, NEN 7510, or equivalent data protection frameworks.

• Dutch and/or German language skills (business English is the working language).

Who You Are

• You take ownership of the systems you build — from database schema through API through deployment through monitoring.

• You write code for the next person, not just for yourself. Clear naming, documentation, and testability matter to you.

• You're comfortable working in a small team where your decisions have outsized impact. No hiding behind process.

• You care about data correctness at a deep level. A wrong medication record isn't a bug; it's a patient safety issue.

• You thrive in a fast-paced environment but don't confuse speed with carelessness.

Hiring Process

We want the application process at Wellis to be fast, transparent, and personal.

1. Introductory chat with Amir (Senior Recruiter)

2. Introductory interview with Anthony (CTO)

3. Technical assessment with CTO

4. Final conversation with founders