Project: Electronic Health Record (EHR) Application Development
Developed a HIPAA-compliant Electronic Health Record (EHR) application for patient registration and management.
Role: Senior Software Engineer (Tech Lead) | Software Architect | Product Lead
UI/UX Link: https://xd.adobe.com/view/5f1da03e-675b-4161-a4b9-379275c4b9c8-0a4e/grid
Technical Stack:
- Frontend: Vue.js, React, CSS3, JavaScript, HTML5
- Backend: Nginx, Django
- Database: AWS RDS
- Hosting and Infrastructure: AWS, Sonicwall
- AWS: AWS Amazon Virtual Private Cloud, ECR, ECS, EC2, and AWS RDS.
- Log and Audit Controls: AWS RDS Alarm, AWS EC2 Monitor Alarm, Web Server(NGINX) Error Alarm, EPM backend(Django) Error Alarm, & AWS CloudWatch.
- Integration: CollaborateMD, eClaimStatus. epowerdoc to the application.
- HIPAA
Key Accomplishments:
1. Designed and architected a cloud-based EHR software system for a hospital in Texas using AWS EC2 infrastructure.
- Developed the system architecture, including the communication system, network, patient registration system, hospital registration, and external service integrations.
- Ensured HIPAA compliance throughout the application development process.
2. Supervised the implementation and deployment of HIPAA regulatory compliance requirements.
- Implemented authentication, auto log-off, audit and alerts, encryption, hosting, infrastructure, and authorization mechanisms.
- Assisted with audit processes for security, end-user access, HIPAA, and other regulatory compliance requirements.
3. Managed the production environment setup using AWS services.
- Utilized AWS Amazon Virtual Private Cloud (VPC), Elastic Container Registry (ECR), Elastic Container Service (ECS), Elastic Compute Cloud (EC2), and AWS Relational Database Service (RDS).
- Collaborated with the DevOps engineer to implement a CI/CD pipeline using GitHub Actions.
4. Led a team of engineers to make system improvements based on physician and staff feedback.
- Conducted interviews and hired full-stack engineers, DevOps engineers, and quality engineers to support application development.
- Implemented role-based access control (RBAC) for doctors, nurses, and other staff to ensure application security.
5. Implemented multi-factor authentication using phone and email verification.
- Integrated Vonage for phone number verification and SendGrid for email verification.
- Ensured secure authentication of electronic protected health information (ePHI).
6. Implemented encryption and decryption mechanisms using AWS RDS encryption with Key Management Service (KMS).
- Completed SSL certificate installation on the server for secure data transfers.
- Utilized HIPAA-compliant hosting and infrastructure solutions, including AWS RDS for PHI database and AWS EC2 for backend deployment and Sonicwall firewall VPC server.
7. Implemented logging and audit controls using AWS services and monitoring tools.
- Set up AWS RDS Alarm, AWS EC2 Monitor Alarm, Web Server (NGINX) Error Alarm, EPM backend (Django) Error Alarm, and AWS CloudWatch.
- Implemented automatic log-off functionality for PCs and devices.
8. Developed a patient management feature to capture and store patient medical histories, demographics, documents, and medical charts.
- Implemented a user-friendly dashboard to provide analytics on emergency room patient check-ins, check-outs, and discharges.
- Designed and implemented patient registration workflows and processes.
9. Implemented staff management functionality to organize and optimize the hospital's workforce.
- Developed features to track staff performance and specific skills.
- Implemented insurance management to track patient insurance information and interact with healthcare services.
10. Integrated various healthcare systems and protocols into the application.
- Integrated CollaborateMD, eClaimStatus, and epowerdoc.
- Implemented Sonicwall Firewall for enhanced security.
- Demonstrated knowledge of HL7 and FHIR protocols for healthcare data exchange.
11. Wrote comprehensive product requirement documentation for the application.
- Collaborated with stakeholders to gather and document application requirements.
- Ensured high quality and optimum performance of data integration systems to meet business needs.