FHIR Conformance Specialist (Contract, 1099, Part Time, Remote, US)

Remote, United States Contract, part time

Reports to: Technical Lead and Solution Architect
Engagement type: Independent contractor, 1099
Term: Twelve months, with extension potential
Location: Fully remote within the United States. No travel required
Status: United States citizenship required. Engagement contingent on program start

ABOUT KRYPTEK

Kryptek LLC builds governed AI systems for clients operating under regulatory obligation. The work this role supports is agentic compliance monitoring at scale: pipelines that ingest public and client-furnished data, validate it against regulatory requirements using deterministic rules, detect drift over time, and assemble evidence packages a reviewer can defend months after the fact. The agentic layer drafts narratives, clusters findings to root cause, and reconciles conflicting sources. It never renders a determination. Every finding passes a recorded human review gate before it can leave the system. The platform runs on Amazon Bedrock inside AWS GovCloud (US) and is engineered to carry a federal Authority to Operate.

Kryptek also delivers managed detection and response, cloud security, and Zero Trust engineering on Microsoft Sentinel and Palo Alto Cortex XSIAM. We are a small, senior team, and the people we hire own their scope end to end rather than executing someone else's ticket queue.

YOUR CAREER

You will provide deterministic conformance validation. Your rules produce the pass and fail determinations. That means the precision of what you write is the precision of the platform, and a rule that fires when it should not is a false finding against a real organization. You will also draw the most consequential line in the design, which is the line between a malformed payload, a technical defect in something that was in fact published, and a failure to publish at all, a substantive compliance signal. Those two demand different evidence, different severity, and different language.

YOUR IMPACT

- Integrate and version-pin the HL7 FHIR Validator, and own deterministic validation of Endpoint, Organization, and Bundle resources with both raw and normalized validator output preserved
- Author the supplemental rules the base FHIR specification does not enforce: that Organization resources reference the applicable Endpoints, that name, location, and a recognized facility identifier such as NPI, CLIA, or CCN are present and well formed, that resources are collected into a Bundle, and that published content is machine-readable rather than a human-facing page listing URLs
- Implement an availability failure taxonomy as discrete individually traceable rules, each with its own evidence requirements and negative test cases proving the rule does not fire when it should not: URL not found, connection timeout or TLS negotiation failure confirmed across separate cycles, redirect chains that obscure the published location, malformed or non-parseable responses, content behind a registration or license or contact precondition, and content reachable but not machine-readable
- Carry issue class as a first-class field assigned by the rule that fired, so a reviewer asking which rules can produce a substantive compliance signal gets a finite, inspectable answer
- Maintain centrally managed and locally deployed publication scenarios as separate fixture families in the evaluation corpus, since the locally deployed case is where exclusion of customers from a published list becomes observable and is the harder of the two to detect
- Capture currency evidence where discoverable from HTTP metadata such as Last-Modified and ETag, exposed version history, and timestamps in published content, and hold low-precision currency rules in advisory status with their evidentiary limits stated rather than overclaiming
- Design the safe non-authenticated endpoint discovery pattern, limited to capability statement and server metadata retrieval, with no authentication attempt, no authorization flow, no patient-scoped query, and no clinical resource request
- Report precision per rule rather than in aggregate, and move any rule below the agreed threshold to advisory status pending tuning
- Deliver a working endpoint publication monitor and a FHIR Bundle and resource conformance validator on a milestone schedule inside the first four months

YOUR EXPERIENCE

- 5 or more years working with HL7 FHIR, with real depth in R4
- Hands-on experience with the HL7 FHIR Validator, FHIR profiles, and the conformance resources, specifically CapabilityStatement, Endpoint, and Organization
- Experience with US Core is strongly preferred
- Familiarity with public healthcare directory and provider identifier data sources
- Demonstrated ability to translate a regulatory obligation into a deterministic, testable rule with negative cases, rather than a checklist item
- Comfort working with real published artifacts, which are frequently malformed, partially valid, or served from behind bot mitigation
- Able to commit to an average of 25 hours per week
- Relevant bachelor's degree, equivalent military experience, or equivalent professional experience
- United States citizenship is required. No security clearance is required for this role at present

COMPENSATION AND ENGAGEMENT TERMS

Rate. $105 to $125 per hour, paid as an independent contractor engagement. Placement within the range depends on depth of FHIR R4 conformance experience.

This position is contingent on program start. Kryptek has committed to seating every open role within 30 days of go-ahead.

Your resume will be submitted to the client for approval before you begin work, so the client sees the individual performing rather than a labor category.

Fully remote within the United States. No travel is required for this role.

United States citizenship is required. No security clearance is required at present.

Kryptek delivers services and does not operate as a staffing agency. You will own a defined scope on our side of the work, not fill a seat on someone else's team.

TO APPLY

Send a resume to with "FHIR Conformance Specialist" in the subject line. Include a short note on the one item in Your Experience above that you consider your strongest claim, and how you would evidence it.