Summer Intern, AI + ABDM Security Engineering
Greater Boston
Full-time
Onsite
1 month ago
About the role
Company Description
Santhica is committed to addressing gaps in healthcare access, particularly in underserved communities across developing nations. We are building an AI Operating System tailored for India's healthcare system, unifying clinics, hospitals, pharmacies, and labs into one robust digital platform. Our mission is to deliver secure, intelligent data flows and actionable insights to empower providers and patients, enabling smarter, faster, and more collaborative healthcare. At Santhica, we believe in connected care for everyone—leaving no one behind.
The problem you’ll work on
ABDM is India’s federated national health data network: ABHA health IDs, HPR/HFR registries, FHIR R4 data, consent-based exchange between Health Information Providers and Users. There’s no shortcut around it — getting M1/M2/M3 sandbox certification is the entry ticket to the Indian market, and increasingly mandatory for any healthcare platform serving public-scheme hospitals.
You’ll help design and build Santhica’s ABDM integration and security layer:• Token-based auth and public-key validation against the ABDM Gateway
• Consent manager flows — request, grant, revoke, audit
• FHIR R4 data models and resource mapping for prescriptions, lab orders, and radiology reports
• Encryption at rest and in transit, plus the audit-trail infrastructure ABDM certification requires
• DPDP Act 2023 alignment for how patient data is stored, accessed, and logged
• Walking us through the sandbox → production certification path
What we expect
• You build with AI fluently. Claude, Cursor, or similar tools are part of how you work — not a novelty. You can use them to ramp up on unfamiliar specs (like the ABDM API docs) quickly.
• System design instinct. You think in services, contracts, and data flows before you reach for code. Security and consent flows reward this.
• A foundation in one of: backend (Python / Go / Node), applied cryptography or auth (OAuth, JWT, PKI), or healthcare data standards (FHIR, HL7).
• Curiosity about the problem space. You don’t need prior healthcare experience, but you should care about what consent and patient data privacy actually mean — and why they’re harder in low-resource settings.
Nice to have
• Prior exposure to FHIR, HL7, or any health data standard
• Familiarity with India’s digital public infrastructure (ABDM, UPI, DigiLocker, Aadhaar stack)
• Worked on anything involving consent management, audit logging, or compliance tooling
• Read the DPDP Act 2023 and have opinions
What you’ll get
• Real ownership of a layer that determines whether Santhica can operate in India at all
• Direct mentorship from a founding team with senior engineering experience at Amazon, Audible, and Oracle
• A specific, resume-defining artifact: you’ll have built compliance infrastructure for India’s national health stack
• A reference and a real recommendation if you do good work
Logistics
• Duration: 10–12 weeks over summer 2026
• Hours: ~20 hours/week, flexible
• Location: Fully remote
• Compensation: Unpaid — but structured as an experience-for-credit internship. We’ll provide the documentation your university needs (signed job description, learning objectives, supervisor designation, mid-term and final evaluations). You’re responsible for arranging credit on your school’s side. US, India, and other international students all welcome.
The honest part
We’re a pre-seed healthcare startup focused on tier-2 and tier-3 India, and we can’t responsibly commit to a stipend yet. We’re upfront about that. In return we offer a real problem, real mentorship, real ownership, and an experience your school will recognize as academic credit — not coffee runs and a slide deck at the end.
Santhica is committed to addressing gaps in healthcare access, particularly in underserved communities across developing nations. We are building an AI Operating System tailored for India's healthcare system, unifying clinics, hospitals, pharmacies, and labs into one robust digital platform. Our mission is to deliver secure, intelligent data flows and actionable insights to empower providers and patients, enabling smarter, faster, and more collaborative healthcare. At Santhica, we believe in connected care for everyone—leaving no one behind.
The problem you’ll work on
ABDM is India’s federated national health data network: ABHA health IDs, HPR/HFR registries, FHIR R4 data, consent-based exchange between Health Information Providers and Users. There’s no shortcut around it — getting M1/M2/M3 sandbox certification is the entry ticket to the Indian market, and increasingly mandatory for any healthcare platform serving public-scheme hospitals.
You’ll help design and build Santhica’s ABDM integration and security layer:• Token-based auth and public-key validation against the ABDM Gateway
• Consent manager flows — request, grant, revoke, audit
• FHIR R4 data models and resource mapping for prescriptions, lab orders, and radiology reports
• Encryption at rest and in transit, plus the audit-trail infrastructure ABDM certification requires
• DPDP Act 2023 alignment for how patient data is stored, accessed, and logged
• Walking us through the sandbox → production certification path
What we expect
• You build with AI fluently. Claude, Cursor, or similar tools are part of how you work — not a novelty. You can use them to ramp up on unfamiliar specs (like the ABDM API docs) quickly.
• System design instinct. You think in services, contracts, and data flows before you reach for code. Security and consent flows reward this.
• A foundation in one of: backend (Python / Go / Node), applied cryptography or auth (OAuth, JWT, PKI), or healthcare data standards (FHIR, HL7).
• Curiosity about the problem space. You don’t need prior healthcare experience, but you should care about what consent and patient data privacy actually mean — and why they’re harder in low-resource settings.
Nice to have
• Prior exposure to FHIR, HL7, or any health data standard
• Familiarity with India’s digital public infrastructure (ABDM, UPI, DigiLocker, Aadhaar stack)
• Worked on anything involving consent management, audit logging, or compliance tooling
• Read the DPDP Act 2023 and have opinions
What you’ll get
• Real ownership of a layer that determines whether Santhica can operate in India at all
• Direct mentorship from a founding team with senior engineering experience at Amazon, Audible, and Oracle
• A specific, resume-defining artifact: you’ll have built compliance infrastructure for India’s national health stack
• A reference and a real recommendation if you do good work
Logistics
• Duration: 10–12 weeks over summer 2026
• Hours: ~20 hours/week, flexible
• Location: Fully remote
• Compensation: Unpaid — but structured as an experience-for-credit internship. We’ll provide the documentation your university needs (signed job description, learning objectives, supervisor designation, mid-term and final evaluations). You’re responsible for arranging credit on your school’s side. US, India, and other international students all welcome.
The honest part
We’re a pre-seed healthcare startup focused on tier-2 and tier-3 India, and we can’t responsibly commit to a stipend yet. We’re upfront about that. In return we offer a real problem, real mentorship, real ownership, and an experience your school will recognize as academic credit — not coffee runs and a slide deck at the end.
Skills
Education and TrainingSoftware Development