NIH · Software Engineer
Updated · 2026-10-02

NIH Software Engineer
Interview Guide

THE 60-SECOND BRIEF

As a Software Engineer at the National Institutes of Health (NIH), you are not merely writing code; you are building the digital infrastructure that supports world-class biomedical research and public health initiatives. This role is critical in bridging the gap between complex biological data and actionable scientific discovery. You will work within a unique environment where technical precision meets high-stakes scientific mission, often dealing with large-scale datasets, bioinformatics pipelines, and mission-critical systems that require exceptional reliability. The work is intellectually demanding and provides a rare opportunity to contribute to projects with global impact. You will collaborate with a multidisciplinary team of scientists, senior developers, and researchers, requiring you to translate abstract scientific requirements into robust, scalable software solutions.

This guide is scoped to a Software Engineer candidate at NIH.

NIH candidates report 4 rounds over 3-5 weeks. The stages below are what candidates describe, not a published process.

PythonSQLSystems Design

25 min read

Browse Software Engineer questions

See the practice prompts

11Practice promptsAcross five skill areas

As a Software Engineer at the National Institutes of Health (NIH), you are not merely writing code; you are building the digital infrastructure that supports world-class biomedical research and public health initiatives. This role is critical in bridging the gap between complex biological data and actionable scientific discovery. You will work within a unique environment where technical precision meets high-stakes scientific mission, often dealing with large-scale datasets, bioinformatics pipelines, and mission-critical systems that require exceptional reliability. The work is intellectually demanding and provides a rare opportunity to contribute to projects with global impact. You will collaborate with a multidisciplinary team of scientists, senior developers, and researchers, requiring you to translate abstract scientific requirements into robust, scalable software solutions. Whether you are automating laboratory workflows, designing database architectures for clinical trials, or developing tools for genomic analysis, your work directly empowers the NIH to advance its mission of improving human health. ##### Tip The NIH is a highly academic and research-driven environment. Expect your interviewers to be deeply technical, often senior-level scientists or engineers who prioritize depth of knowledge over surface-level fluency.

01

Technical Screening

reported

Initial assessment of technical competency to gauge foundational knowledge.

What to demonstrate

  • Initial assessment of technical competency to gauge foundational knowledge
  • Depth in Python

How to prepare

  • Answer aloud and timed: These questions test your proficiency in your stated tech stack and your ability to apply it to research-based problems. Can you explain the architectural trade-offs you made in your most recent project? How do you approach debugging complex, multi-layered system issues? How would you optimize a database query that is performing poorly on a large dataset? Can you explain the core concepts of the programming languages listed on your resume? Describe how you handle state management in your applications.
  • Answer aloud and timed: These focus on your ability to structure solutions for scale and reliability, often involving real-world constraints. How would you design a system to handle high-throughput bioinformatics data processing? Given a specific customer support level 3 issue, how would you diagnose and resolve it? How do you ensure data integrity when designing an application for clinical research? Walk me through the implementation of a specific algorithm or data structure. How do you handle hardware-software integration challenges in a laboratory setting?
NIH Software Engineer candidate reports ↗
02

Deep-Dive Interviews

reported

In-depth interviews with senior staff to evaluate problem-solving skills and technical depth.

What to demonstrate

  • In-depth interviews with senior staff to evaluate problem-solving skills and technical depth
  • Depth in Python

How to prepare

  • Answer aloud and timed: These assess your communication skills and your ability to thrive in a research-oriented, collaborative culture. Tell me about a past research topic you worked on extensively and present your findings. Describe a time you had to pivot your technical approach due to new information or constraints. Why do you want to apply your software engineering skills to the NIH mission? Describe a time you were obligated to do something you did not want to do; how did you handle it? How do you communicate complex technical concepts to non-technical stakeholders or scientists?
  • Work Python until you can explain it without notes
NIH Software Engineer candidate reports ↗
03

Presentation or Assignment

reported

Potential requirement to present a project or complete a take-home assignment.

What to demonstrate

  • Potential requirement to present a project or complete a take-home assignment
  • Depth in Python

How to prepare

  • Work Python until you can explain it without notes
  • Work SQL until you can explain it without notes
NIH Software Engineer candidate reports ↗
04

Panel Interviews

reported

Engagement with multiple interviewers, including engineers or researchers, to assess fit.

What to demonstrate

  • Engagement with multiple interviewers
  • Including engineers or researchers, to assess fit

How to prepare

  • Work Python until you can explain it without notes
  • Work SQL until you can explain it without notes
NIH Software Engineer candidate reports ↗

PracHub editorial advice for the preparation topics above.

01

Own your resume

Every technology and project listed on your resume is fair game. Be prepared to explain the "why" and "how" behind every bullet point.

02

Practice your presentation

If asked to present a past project, practice it until you can explain it clearly within the time limit. Keep the focus on your technical contributions and the impact of the work.

03

Be prepared for technical trivia

Some interviewers may ask conceptual or trivia-based programming questions to test your depth of knowledge.

04

Ask thoughtful questions

Use the time at the end of your interviews to ask about the team’s current challenges or how they balance technical debt with research deadlines.

Choose a category, try a prompt, then open its approach, worked solution or follow-up when you need it.

8 technical prompts0 include a worked solution

Track a rolling failure rate per destination for circuit decisions

easy
sliding windowring buffercircuit breaker

The egress service delivers about 1,500 webhooks per second across roughly 40,000 destinations, each call bounded by a 10 second timeout. Maintain, per destination, the failure rate over the trailing 60 seconds so a caller can ask before dispatch whether the circuit should open. Attempts arrive as (destination_id, finished_at_ms, outcome). Requirement: amortised O(1) per attempt, with total memory bounded by the destination count rather than by traffic. Give the structure, its exact memory, and the rule that stops a destination with three attempts from opening a circuit.

Approach
  1. Name the exact-deque version and then reject it as the default. Holding timestamps and advancing a tail pointer past anything older than now minus 60 seconds is a correct two-pointer window at amortised O(1) per attempt, but its memory tracks in-window traffic, so one destination in a retry storm holds hundreds of thousands of entries while thousands of quiet destinations hold none.
  2. Use a ring of 60 one-second buckets per destination, each bucket a pair of counters for attempts and failures. On an attempt, advance the ring by the elapsed whole seconds, zeroing at most min(elapsed, 60) buckets, then increment the head. That is amortised O(1) with a fixed footprint per destination.
  3. State the footprint: 60 buckets times two 4-byte counters is 480 bytes of payload per destination, so 40,000 destinations is roughly 20 to 25 MB with per-entry overhead, bounded by the catalogue rather than by the rate. The cost is granularity, since the oldest bucket ages out in whole seconds, which is far tighter than the decision needs.
  4. Require a minimum sample before the circuit may open. A destination with three attempts and three failures reads as 100 percent and is not evidence; a floor of roughly 20 attempts in the window makes the ratio meaningful, and below that floor use a run of consecutive failures as the trigger instead.
Follow-up
  • The fleet is 30 instances and each sees roughly a thirtieth of a destination's traffic. Where does the rate actually live, and what does a per-instance answer get wrong?
  • A destination answers in 9.5 seconds and succeeds. It is not failing but it is consuming your per-destination concurrency. What signal should open the circuit here?

Merge partitioned event streams into one ordered feed with bounded lateness

hard
k-way mergewatermarksout-of-order streams

The read-model service consumes 64 log partitions carrying about 4,000 events per second in total. Each partition is ordered within itself, but partitions drift by up to 30 seconds, and the activity feed must present a tenant's events in occurred_at order. Produce the merge. State its complexity, the buffer it requires in events and in bytes, what happens when one partition is idle, and what you do with an event that arrives after you have already emitted its position. Payloads average 1 KB.

Approach
  1. Merge with a min-heap over the 64 partition heads keyed on (occurred_at, event_id): O(log P) per event and O(n log P) overall. The tie-break on event_id is what makes the output deterministic when two partitions carry the same millisecond, which matters because the feed is paginated and a non-deterministic order reorders pages under the reader.
  2. Emitting the heap head is only correct once every partition has produced everything up to that timestamp, so the emit condition is a watermark: the minimum across partitions of the highest occurred_at seen, less the allowed lateness. Events are held until the watermark passes them, which is what turns individually ordered streams into a jointly ordered one.
  3. Size the buffer from the lateness rather than guessing: 4,000 events per second times 30 seconds is 120,000 buffered events, and at 1 KB each about 120 MB of heap. That number is the real price of the ordering guarantee and belongs in front of whoever asked for it.
  4. Handle the idle partition explicitly, because it fails the feed rather than corrupting it: a partition with no traffic never advances its own maximum, so the watermark freezes and output stops entirely. Either every partition emits a periodic idle marker carrying the broker's current time, or the watermark falls back to wall clock for a partition silent beyond a threshold.
Follow-up
  • The lateness budget is raised to five minutes. What is the new buffer, and what besides memory changes?
  • The consumer restarts. Where does it resume from, and what does the feed look like for the first 30 seconds?

Collapse a redelivered event batch into per-aggregate high-water marks

easy
hashingat-least-onceaggregation

You drain a batch of up to 5,000,000 events, each (aggregate_id BIGINT, aggregate_version INT, event_type, payload). The log guarantees order within one aggregate only; the batch merges 64 partitions, and a relay failover has redelivered a range, so an older version for an aggregate can appear after a newer one. Given a map of last_applied_version per aggregate, produce the events worth applying, at most one per (aggregate_id, version), plus the count discarded. Target O(n) time. State the memory for 2,000,000 distinct aggregates and what you do when it does not fit.

Approach
  1. One pass, one hash map from aggregate_id to the highest version kept, and a discard counter. An event whose version is at or below last_applied_version for its aggregate is dropped without further work, which is the whole reason the event carries its version rather than a delta. O(n) expected time, O(d) space in distinct aggregates.
  2. Keep the maximum, never the last occurrence. The redelivered range means the final appearance of an aggregate in the batch can be an older version than one seen earlier in the same batch, so last-wins applies stale state over newer state and the projection regresses with no error anywhere.
  3. Cost the memory instead of calling it large: an 8-byte key plus a 4-byte version is 12 bytes of payload, and an open-addressed table held at a 0.7 load factor costs roughly 17 bytes per entry before per-slot metadata, so 2,000,000 aggregates is tens of megabytes in a native layout and several times that in a runtime that boxes both key and value.
  4. If the distinct set exceeds memory, partition on hash(aggregate_id) mod P and reduce each partition independently. Every event for one aggregate hashes to the same partition, so the per-partition result is exact and the merge is concatenation rather than a second reduction.
Follow-up
  • The payload is a patch rather than a snapshot, so applying only the highest version loses the intermediate changes. What changes in your reduction?
  • How do you detect that version 7 arrived while version 6 was never delivered, and what should the consumer do about the gap?

Built from the rounds and topics NIH candidates report.

Small steps. Visible outcomes.0 / 7 completed
ONE WEEK · YOUR PACE

Prepare, practise & reflect

One practical outcome each day. Spend longer where you need it.

0 / 7 done
01Map the NIH loop
  • Write out the reported sequence: Technical Screening, Deep-Dive Interviews, Presentation or Assignment, Panel Interviews.
  • For each round, write one sentence on what it is judging, from the description above, and mark the one you are least ready for.

Deliverable: A one-page map of the 4 reported rounds, with the weakest marked.

02Work Python
  • Spend the session on Python, which NIH candidates report being tested on.
  • Write one worked example in Python and time yourself on it.

Deliverable: One timed worked example in Python.

03Work SQL
  • Spend the session on SQL, which NIH candidates report being tested on.
  • Write one worked example in SQL and time yourself on it.

Deliverable: One timed worked example in SQL.

04Work Systems Design
  • Spend the session on Systems Design, which NIH candidates report being tested on.
  • Write one worked example in Systems Design and time yourself on it.

Deliverable: One timed worked example in Systems Design.

05Answer out loud: Technical & Domain Knowledge
  • Answer aloud, timed: These questions test your proficiency in your stated tech stack and your ability to apply it to research-based problems. Can you explain the architectural trade-offs you made in your most recent project? How do you approach debugging complex, multi-layered system issues? How would you optimize a database query that is performing poorly on a large dataset? Can you explain the core concepts of the programming languages listed on your resume? Describe how you handle state management in your applications.

Deliverable: Spoken answers to 1 reported Technical & Domain Knowledge question(s), under time.

06Answer out loud: System Design & Problem Solving
  • Answer aloud, timed: These focus on your ability to structure solutions for scale and reliability, often involving real-world constraints. How would you design a system to handle high-throughput bioinformatics data processing? Given a specific customer support level 3 issue, how would you diagnose and resolve it? How do you ensure data integrity when designing an application for clinical research? Walk me through the implementation of a specific algorithm or data structure. How do you handle hardware-software integration challenges in a laboratory setting?

Deliverable: Spoken answers to 1 reported System Design & Problem Solving question(s), under time.

07Answer out loud: Behavioral & Research Experience
  • Answer aloud, timed: These assess your communication skills and your ability to thrive in a research-oriented, collaborative culture. Tell me about a past research topic you worked on extensively and present your findings. Describe a time you had to pivot your technical approach due to new information or constraints. Why do you want to apply your software engineering skills to the NIH mission? Describe a time you were obligated to do something you did not want to do; how did you handle it? How do you communicate complex technical concepts to non-technical stakeholders or scientists?

Deliverable: Spoken answers to 1 reported Behavioral & Research Experience question(s), under time.

Expand any day for tasks and deliverables. Your progress is saved on this device.

Behavioural rounds judge the decision you made and what it cost.

These assess your communication skills and your ability to thrive in a research-oriented, collaborative cultur

medium
Behavioral & Research Experience

These assess your communication skills and your ability to thrive in a research-oriented, collaborative culture. Tell me about a past research topic you worked on extensively and present your findings. Describe a time you had to pivot your technical approach due to new information or constraints. Why do you want to apply your software engineering skills to the NIH mission? Describe a time you were obligated to do something you did not want to do; how did you handle it? How do you communicate complex technical concepts to non-technical stakeholders or scientists?

Approach
  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.
Follow-up
  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?

Narrate an outage you owned from page to postmortem

hard
incident responseblast radiuspostmortems

Pick an incident you personally drove, ideally one where writes were affected rather than reads. In six to eight minutes: state the symptom as it first appeared on a dashboard, the blast radius you established before you knew the cause, the mitigation you applied and when, the mechanism you eventually proved, and the follow-up that would prevent a repeat. Bring numbers: error rate, tenants affected, minutes to mitigate, minutes to resolve. If you cannot name what you measured, choose a different incident.

Approach
  1. Open on the signal rather than the cause: which metric at which percentile moved, on which service, at what time, so the listener follows the same evidence you had rather than a conclusion you already reached.
  2. Separate mitigation from diagnosis out loud. State what you did to stop the bleeding (flag off, shed traffic, drain a lease, roll back a deploy) and say plainly that you did it before the mechanism was known, because those are two jobs with different deadlines.
  3. Establish blast radius in countable terms: how many tenants, how many writes, and crucially whether the effect was loss or only delay. An append-only revision table or a pending outbox row means the change survived and the projection was merely behind, which is a repair rather than a data-loss incident.
  4. Prove the mechanism instead of asserting it. Name the trace span that grew, the plan that flipped to a sequential scan, the lease that expired, plus one alternative you ruled out and the signal that stayed flat while you ruled it out.
Follow-up
  • What would you do differently in the first five minutes, given the same dashboard and no more information?
  • Which follow-up action did you deliberately not take, and why was dropping it the right call?

Ship under a deadline and bound the debt you chose

medium
paginationtechnical debttradeoffs

You have four days to ship a tenant-facing listing endpoint. The version you would defend uses keyset pagination over (tenant_id, status, updated_at DESC, resource_id DESC); the version you can finish uses LIMIT/OFFSET with no matching index. Describe a deadline call you actually made of this shape: what you shipped, what you knowingly deferred, how you bounded the damage with a mechanism rather than an intention, and the specific numeric condition that would force the follow-up. Name who you told and where you wrote it down.

Approach
  1. Name the deferred failure precisely instead of calling it slow. OFFSET n makes the database produce and discard n rows, so cost grows with page depth; without an index matching the sort, every matching row is read and sorted before the limit applies; and rows inserted between two page fetches shift across the boundary so items are skipped or repeated with nothing in the response to signal it.
  2. Bound the blast radius with something mechanical rather than a promise: cap maximum page depth, cap page size, restrict the endpoint to one internal caller, or keep it behind a flag. State which failure each cap removes and which it leaves standing.
  3. Attach a number to the trigger and wire it to an alarm: the first tenant crossing N resources, or the endpoint's p99 crossing its share of the 400 ms budget, so the debt announces itself instead of waiting to be remembered.
  4. Write it where the next engineer looks, which is the code and the ticket, not a chat message: what was deferred, why, the cap, and the trigger.
Follow-up
  • At what page depth does the offset version breach your latency budget, given your page size and row counts?
  • What breaks first when you switch to keyset pagination later, and what does a client holding an old page token see?
  • 01

    These assess your communication skills and your ability to thrive in a research-oriented, collaborative culture. Tell me about a past research topic you worked on extensively and present your findings. Describe a time you had to pivot your technical approach due to new information or constraints. Why do you want to apply your software engineering skills to the NIH mission? Describe a time you were obligated to do something you did not want to do; how did you handle it? How do you communicate complex technical concepts to non-technical stakeholders or scientists?

  • 02

    Pick an incident you personally drove, ideally one where writes were affected rather than reads. In six to eight minutes: state the symptom as it first appeared on a dashboard, the blast radius you established before you knew the cause, the mitigation you applied and when, the mechanism you eventually proved, and the follow-up that would prevent a repeat. Bring numbers: error rate, tenants affected, minutes to mitigate, minutes to resolve. If you cannot name what you measured, choose a different incident.

  • 03

    You have four days to ship a tenant-facing listing endpoint. The version you would defend uses keyset pagination over (tenant_id, status, updated_at DESC, resource_id DESC); the version you can finish uses LIMIT/OFFSET with no matching index. Describe a deadline call you actually made of this shape: what you shipped, what you knowingly deferred, how you bounded the damage with a mechanism rather than an intention, and the specific numeric condition that would force the follow-up. Name who you told and where you wrote it down.

PracHub preparation framework ↗
Is the interview process difficult?

Yes, the process is considered challenging. You will face technical assessments and deep-dive interviews that test your fundamental knowledge rather than just your ability to use a specific tool.

NIH Software Engineer candidate reports ↗
How much time should I spend preparing?

Given the technical nature of the interviews, plan for several weeks of preparation. Focus on brushing up on your primary coding languages, SQL, and system design principles.

NIH Software Engineer candidate reports ↗
How can I differentiate myself?

Successfully connecting your technical expertise to the NIH mission is the best way to stand out. Show that you understand the stakes of the work and are prepared to handle the complexity of research-driven software.

NIH Software Engineer candidate reports ↗
What is the culture like?

The culture is highly academic, professional, and intellectually rigorous. You will work alongside some of the brightest minds in science, which creates a collaborative but demanding environment.

NIH Software Engineer candidate reports ↗
What topics does NIH test in interviews?

NIH interviews most often cover Behavioral Interviewing, Panel Interviewing, Project Management (PM), Python, and Scientific communication (presentations). The exact emphasis depends on the specific role you apply for.

NIH Software Engineer candidate reports ↗
Sources & methodology 3 sources ↗

No official company page is cited. Rounds and questions come from candidate reports and PracHub editorial material; each source shows the date it was read.