A medical case-management platform for orthopedic second opinions · Healthcare
Security & Delivery Overhaul of a Medical Case-Management Platform
Took over engineering for an AWS-hosted medical case-management platform that handles patient imaging (DICOM), physician reports, and payments. Unblocked launch, closed security gaps, and rebuilt delivery.
The Problem
The client runs an AWS-hosted medical case-management platform for orthopedic second opinions. It handles patients' medical imaging (DICOM), physician reports, and payments. Launch was blocked by critical bugs and unreliable deployments, and a review found security gaps that could expose patient records.
The Solution
CodeHarmonic took over engineering as the lead engineer on contract. We fixed the critical bugs and deployment issues blocking launch, and we now run the product roadmap with the founders. A dedicated security and privacy release followed:
- Closed privilege-escalation and record-takeover paths
- Blocked unauthenticated access to patient records
- Added server-side access checks on medical images
Architecture
- AWS hosting for the application, imaging storage, and payments
- Terraform for all infrastructure, with plans previewed on every pull request
- Automated deploys in place of manual releases
- One image-upload pipeline for DICOM studies, with failure alerts
Results
Launch blockers are resolved. Patient records and images now sit behind server-side checks. Every infrastructure change is reviewed as a Terraform plan before it ships.
What This Demonstrates
Inherited codebases in regulated domains can be rescued without a rewrite. That means finding the security gaps first, then making delivery boring and reviewable.