Advanced Application-Layer Security Enhancement!!!!

Security Engineer to implement advanced application-layer security improvements, session control, and structured framework upgrades.

This is a higher complexity engagement involving architectural work and controlled deployment.

Scope of Work
1. Concurrent Login and Session Management

Design and implement controlled session management.

Responsibilities

Implement Redis or ElastiCache-based session tracking
Develop middleware to prevent unauthorized concurrent sessions
Build configurable session policies
Implement detailed audit logging
Ensure compatibility with mobile clients
Support emergency break glass access scenarios

Healthcare-aligned audit logging is required.

2. Administrative Portal Access Control (Optional VPN / Zero Trust)

Secure administrative access to sensitive functions.

Options may include

AWS Client VPN with certificate-based MFA
Zero Trust solution
Dynamic IP allowlisting

Responsibilities

Network segmentation for admin routes
Multi factor authentication integration
Access logging and monitoring
Emergency access documentation

VPN / Zero Trust implementation is optional based on feasibility assessment.

3. Framework and Dependency Upgrade

Upgrade Next.js and related dependencies to address security vulnerabilities.

Requirements

Structured dependency audit
Incremental upgrade plan
Code refactoring as needed
Comprehensive regression testing
Zero downtime deployment strategy
Rollback procedures

Technical Environment

Frontend: Next.js, React, TypeScript
Backend: Node.js, API routes
Database: AWS RDS
Infrastructure: Elastic Beanstalk, ElastiCache, VPC
CI/CD: CodePipeline

No production patient data access provided.