cswork / libraryOpen practice workspace

Interview guides · Gifthealth

Gifthealth Software Engineer Interview Guide

Gifthealth Software Engineer interview guide: reported rounds, questions and how candidates describe the process.

The 60-second brief

As a Software Engineer at Gifthealth, you will play a pivotal role in revolutionizing the healthcare industry by simplifying how patients, healthcare providers, and internal pharmacy staff manage prescriptions and health services. Your code directly powers customer-facing applications and complex backend operations that ensure critical medications reach individuals efficiently and securely. You will work within a dynamic technology team where innovation meets operational excellence, building software that bridges the gap between complex healthcare logistics and seamless user experiences. The scope of this role encompasses designing robust backend architectures, building intuitive frontend interfaces, and integrating critical third-party services that drive daily pharmacy workflows.

This guide is scoped to a Software Engineer candidate at Gifthealth.

Focus areas

  • Ruby
  • Ruby on Rails
  • Test Suites

The Gifthealth interview process

Gifthealth candidates report 5 rounds over 4-6 weeks. The stages below are what candidates describe, not a published process.

Application Review

Initial evaluation of the candidate's application to assess qualifications and fit.

What to demonstrate

  • Initial evaluation of the candidate's application to assess qualifications and fit
  • Depth in Ruby

How to prepare

  • Be able to walk your CV end to end in two minutes, and say why this company specifically.
  • Have your salary expectations, notice period and location constraints ready, and ask for the rest of the loop in writing.

Recruiter Screen

A preliminary conversation with a recruiter to discuss the role and candidate's background.

What to demonstrate

  • A preliminary conversation with a recruiter to discuss the role and candidate's background
  • Depth in Ruby

How to prepare

  • Be able to walk your CV end to end in two minutes, and say why this company specifically.
  • Have your salary expectations, notice period and location constraints ready, and ask for the rest of the loop in writing.

Technical Assessments

Hands-on coding evaluations focusing on real-world syntax, database management, and API integration.

What to demonstrate

  • Hands-on coding evaluations focusing on real-world syntax, database management, and API integration
  • Depth in Ruby

How to prepare

  • Answer aloud and timed: Troubleshoot a performance bottleneck in a web application and explain your remediation strategy.
  • Answer aloud and timed: Design an API architecture that securely communicates with external provider systems while maintaining strict compliance standards.

Final Interviews

Collaborative discussions and evaluations with team members to assess fit and technical skills.

What to demonstrate

  • Collaborative discussions and evaluations with team members to assess fit and technical skills
  • Depth in Ruby

How to prepare

  • Answer aloud and timed: Explain how you manage data consistency and integrity across distributed database transactions.
  • Answer aloud and timed: Describe your approach to designing extensible backend services that can scale alongside rapid company growth.

Offer Discussion

Discussion regarding the job offer, including salary and benefits.

What to demonstrate

  • Discussion regarding the job offer
  • Including salary and benefits

How to prepare

  • Answer aloud and timed: Tell me about a time you translated an abstract business concept into a concrete technical deliverable.
  • Answer aloud and timed: How do you approach code reviews and provide constructive feedback to fellow engineers?

Where candidates lose points

Communicate your assumptions

When tackling coding tests or system design prompts, clearly state any assumptions you are making about data structures, scale, or edge cases to show your structured problem-solving approach.

Emphasize test coverage

Always write tests alongside your code during technical assessments; demonstrating a habit of robust testing with tools like Minitest signals high engineering maturity.

Connect code to patient impact

Keep the end-user and patient experience in mind when discussing architectural decisions, reflecting Gifthealth's core mission of simplifying healthcare.

Questions & practice

Identify the heaviest tenants in a five-minute window under memory pressure

Medium · top-k · heavy hitters · streaming

The edge service handles about 3,000 requests per second across roughly 50,000 tenants, peaking near 9,000. Expose the 50 heaviest tenants by request count over the trailing five minutes so limits can be tightened before one tenant's backfill starves the fleet. You may not retain five minutes of raw records. Give the exact solution and its memory, then the bounded-memory approximation with its error stated as a formula, and say which you would ship and at what tenant cardinality that choice changes.

Approach

  1. Do the exact version first, because it is affordable at this cardinality: a ring of 300 one-second counters per tenant, advanced lazily, is 1,200 bytes of counters per tenant and roughly 60 to 90 MB for 50,000 tenants with overhead. Carry a running total and subtract the bucket you overwrite so a window read is O(1) rather than 300 adds.
  2. Extract the top 50 with a size-k min-heap over the tenant sums: O(d log k) for d tenants, against O(d log d) to sort them all. Maintaining the heap continuously instead of on query requires a tenant-to-heap-index map, because incrementing a count already inside the heap means sifting from a known position, and without that map you rebuild the heap on every request.
  3. State the approximation precisely rather than gesturing at sketches. Misra-Gries with m counters retains every item whose true count exceeds N/(m+1), and each retained count underestimates the truth by at most N/(m+1). With m = 1,000 and N = 900,000 requests in the window the error is roughly 900 requests, which is fine for spotting a tenant sending 50,000 and useless for ranking two tenants 200 apart.
  4. Say what breaks when the window slides: Misra-Gries and Space-Saving are insert-only and cannot be decremented as records age out. The workable construction is one summary per sub-window, say ten seconds, with 30 summaries merged at query time, and the merged error is the sum of the per-summary errors, so the bound degrades linearly in the number of sub-windows.

Follow-up

  • The heaviest tenant is heavy because of one export job rather than user traffic. Should the limiter treat those as the same tenant?
  • Two tenants sit tied at the boundary of the top 50. Does your answer flap, and does the flapping matter?

Track a rolling failure rate per destination for circuit decisions

Easy · sliding window · ring buffer · circuit breaker

The egress service delivers about 1,500 webhooks per second across roughly 40,000 destinations, each call bounded by a 10 second timeout. Maintain, per destination, the failure rate over the trailing 60 seconds so a caller can ask before dispatch whether the circuit should open. Attempts arrive as (destination_id, finished_at_ms, outcome). Requirement: amortised O(1) per attempt, with total memory bounded by the destination count rather than by traffic. Give the structure, its exact memory, and the rule that stops a destination with three attempts from opening a circuit.

Approach

  1. Name the exact-deque version and then reject it as the default. Holding timestamps and advancing a tail pointer past anything older than now minus 60 seconds is a correct two-pointer window at amortised O(1) per attempt, but its memory tracks in-window traffic, so one destination in a retry storm holds hundreds of thousands of entries while thousands of quiet destinations hold none.
  2. Use a ring of 60 one-second buckets per destination, each bucket a pair of counters for attempts and failures. On an attempt, advance the ring by the elapsed whole seconds, zeroing at most min(elapsed, 60) buckets, then increment the head. That is amortised O(1) with a fixed footprint per destination.
  3. State the footprint: 60 buckets times two 4-byte counters is 480 bytes of payload per destination, so 40,000 destinations is roughly 20 to 25 MB with per-entry overhead, bounded by the catalogue rather than by the rate. The cost is granularity, since the oldest bucket ages out in whole seconds, which is far tighter than the decision needs.
  4. Require a minimum sample before the circuit may open. A destination with three attempts and three failures reads as 100 percent and is not evidence; a floor of roughly 20 attempts in the window makes the ratio meaningful, and below that floor use a run of consecutive failures as the trigger instead.

Follow-up

  • The fleet is 30 instances and each sees roughly a thirtieth of a destination's traffic. Where does the rate actually live, and what does a per-instance answer get wrong?
  • A destination answers in 9.5 seconds and succeeds. It is not failing but it is consuming your per-destination concurrency. What signal should open the circuit here?

Diff a projection against the primary without per-row point reads

Hard · reconciliation · range hashing · throttling

The listing projection has drifted and some rows show a stale version. The primary holds 40,000,000 resource rows across 12,000 tenants while serving 1,200 writes and 14,000 reads per second. The obvious repair, reading each resource row and comparing its version against the projection, is correct and would eventually finish. Explain precisely why it is unacceptable here, then give a diff that finds the differing rows, state its complexity, and make it safe to run against a live primary. Replication lag is usually under 100 ms and is not bounded.

Approach

  1. Quantify the naive cost rather than calling it slow: 40,000,000 point reads at even 0.5 ms each is over five hours serialised, and the only lever is concurrency, which is exactly what you cannot spend. The primary's pool is sized for the write path, and 40,000,000 random reads evict the buffer cache that sustains the 85 percent cache hit rate, so the audit degrades the system it is auditing.
  2. Replace random access with one ordered pass per side. Both sides can be read in (tenant_id, resource_id) order, which is a sequential scan on each and a merge join in O(n) time and O(1) memory. For a dense diff that is the whole answer, and it reads the primary once instead of 40,000,000 times.
  3. For the expected sparse case, compare range hashes instead of rows: partition the key space, compute per range an order-independent aggregate over hash(resource_id, version), compare aggregates, and descend only into ranges that differ. With d differing rows and branching factor B, at most d ranges mismatch per level, so the drill-down examines O(d log_B(n/d)) ranges and reads full rows only in mismatching leaves.
  4. Aggregate with a sum modulo 2^64 or a multiset hash, never XOR. XOR is order-independent but self-cancelling, so two rows wrong in the same way, or a row duplicated on one side, leave the range aggregate matching and the range is declared clean.

Follow-up

  • The diff reports 900 stale rows. How do you decide between patching those rows and rebuilding the projection from resource_revision?
  • Same job, but the projection lives in a search index that cannot be scanned in key order. What changes?

Explain how you would structure a database schema involving pharmacy operations and handle basic MySQL or Post

Medium · Technical and Domain Knowledge

Explain how you would structure a database schema involving pharmacy operations and handle basic MySQL or Postgres CRUD operations.

Approach

  1. Name the grain you start from and join outward from it.
  2. Check whether any join is one-to-many before aggregating, or the sums inflate.
  3. Say which index the query would use, and what makes it unusable.
  4. Handle the rows that do not match: that is usually the actual question.

Follow-up

  • How does the query change if that join becomes one-to-many?
  • What happens to this when the table is ten times larger?

Stop tag and share joins from fanning out a page

Medium · join fan-out · semi-joins · many-to-many

resource_tag is (resource_id, tag_id) with PK (resource_id, tag_id); resource_share is (resource_id, shared_with_user_id, permission). The tagged-and-shared listing inner-joins resource to both, filters tenant_id, tag_id = ANY($2) and shared_with_user_id = $3, orders by updated_at DESC and takes 50. Pages come back with fewer than 50 distinct resources and the total in the header is far too high. Explain the row multiplication, rewrite both the page query and the count query so each is correct, and name the index each one needs. PostgreSQL 16.

Approach

  1. Do the arithmetic against the predicates that are actually there. An inner join emits one row per matching child row, and both joins are filtered: tag_id = ANY($2) admits only the requested tags, shared_with_user_id = $3 admits one user's share rows. So a resource holding three of the requested tags and shared with $3 once yields three rows, not one — the multiplier is its count of matching tags times its share rows for that single user, and that second factor is 1 unless the table admits duplicate (resource_id, shared_with_user_id) pairs. LIMIT 50 then limits rows rather than resources, and COUNT(*) counts pairs — the header is the product, not the population.
  2. Reject DISTINCT as the fix. It deduplicates after the product has been built, so the planner must materialise and sort the fanned-out set before the LIMIT can apply, and it leaves any SUM or AVG in the same select list wrong.
  3. Rewrite both filters as semi-joins, keeping resource as the only row source: AND EXISTS (SELECT 1 FROM resource_tag rt WHERE rt.resource_id = r.resource_id AND rt.tag_id = ANY($2)) and the same shape against resource_share. A semi-join stops at the first match per resource and preserves the driving index order, so ORDER BY updated_at DESC, resource_id DESC LIMIT 50 still stops after 50 rows.
  4. Count with the same predicates and no join at all: SELECT count(*) FROM resource r WHERE r.tenant_id = $1 AND r.status = 'active' AND EXISTS (...) AND EXISTS (...). Nothing multiplies a resource, so the number is the population.

Follow-up

  • The filter changes from 'any of these tags' to 'all of these tags'. Rewrite it and state what it costs relative to the ANY form.
  • A resource can be shared with the same user twice under different permissions. Does your count change, and should it?

Complete a basic coding test in Ruby on Rails testing basic syntax, language constructs, and object-oriented p

Medium · Technical and Domain Knowledge

Complete a basic coding test in Ruby on Rails testing basic syntax, language constructs, and object-oriented principles.

Approach

  1. Clarify what is being asked and what a complete answer contains.
  2. State your assumptions explicitly before working the problem.
  3. Say what you would check first and why it is the highest-information step.
  4. Work from the requirement backwards to the design.

Follow-up

  • What assumption would you test first?
  • How would you know your answer was wrong?

Demonstrate how you implement and test third-party API integrations, such as payment gateways or messaging ser

Medium · Technical and Domain Knowledge

Demonstrate how you implement and test third-party API integrations, such as payment gateways or messaging services.

Approach

  1. Say who the caller is and what they do when the call fails halfway.
  2. Define the identity of a request so a retry cannot double-apply it.
  3. Separate accepted, pending, failed and confirmed; they are different facts.
  4. Design the error taxonomy before the success shape; callers branch on it.

Follow-up

  • What happens if the caller retries after a timeout?
  • How does a client discover it is on an old version of this contract?

Write comprehensive test suites using frameworks like Minitest to validate backend logic and edge cases.

Medium · Technical and Domain Knowledge

Approach

  1. Clarify what is being asked and what a complete answer contains.
  2. State your assumptions explicitly before working the problem.
  3. Say what you would check first and why it is the highest-information step.
  4. Work from the requirement backwards to the design.

Follow-up

  • What assumption would you test first?
  • How would you know your answer was wrong?

Design an API architecture that securely communicates with external provider systems while maintaining strict

Medium · System Design and Architecture

Design an API architecture that securely communicates with external provider systems while maintaining strict compliance standards.

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

Explain how you manage data consistency and integrity across distributed database transactions.

Medium · System Design and Architecture

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

Describe your approach to designing extensible backend services that can scale alongside rapid company growth.

Medium · System Design and Architecture

Approach

  1. Fix the scope first: who calls this, how often, and what they do when it fails.
  2. Name the read and write paths separately; they rarely have the same bottleneck.
  3. Choose a partition key and say what query it makes expensive.
  4. State the consistency you need, and where you are willing to be stale.

Follow-up

  • What breaks first when traffic grows ten times?
  • How does this behave when that dependency is down for an hour?

Troubleshoot a performance bottleneck in a web application and explain your remediation strategy.

Medium · Technical and Domain Knowledge

Approach

  1. Establish what changed and when, before forming any theory.
  2. Pick a bisection that eliminates candidates whichever way it turns out.
  3. Check the instrumentation before believing the symptom.
  4. Separate the trigger from the cause; the deploy is rarely the bug.

Follow-up

  • What would you look at first, and what would it rule out?
  • How would you tell a cause from a coincidence here?

Suggested practice checklist

Built from the rounds and topics Gifthealth candidates report.

Day 1 — Map the Gifthealth loop

  • Write out the reported sequence: Application Review, Recruiter Screen, Technical Assessments, Final Interviews, Offer Discussion.
  • For each round, write one sentence on what it is judging, from the description above, and mark the one you are least ready for.

Deliverable: A one-page map of the 5 reported rounds, with the weakest marked.

Day 2 — Work Ruby

  • Spend the session on Ruby, which Gifthealth candidates report being tested on.
  • Write one worked example in Ruby and time yourself on it.

Deliverable: One timed worked example in Ruby.

Day 3 — Work Ruby on Rails

  • Spend the session on Ruby on Rails, which Gifthealth candidates report being tested on.
  • Write one worked example in Ruby on Rails and time yourself on it.

Deliverable: One timed worked example in Ruby on Rails.

Day 4 — Work Test Suites

  • Spend the session on Test Suites, which Gifthealth candidates report being tested on.
  • Write one worked example in Test Suites and time yourself on it.

Deliverable: One timed worked example in Test Suites.

Day 5 — Answer out loud: Technical and Domain Knowledge

  • Answer aloud, timed: Complete a basic coding test in Ruby on Rails testing basic syntax, language constructs, and object-oriented principles.
  • Answer aloud, timed: Explain how you would structure a database schema involving pharmacy operations and handle basic MySQL or Postgres CRUD operations.

Deliverable: Spoken answers to 2 reported Technical and Domain Knowledge question(s), under time.

Day 6 — Answer out loud: System Design and Architecture

  • Answer aloud, timed: Design an API architecture that securely communicates with external provider systems while maintaining strict compliance standards.
  • Answer aloud, timed: Explain how you manage data consistency and integrity across distributed database transactions.

Deliverable: Spoken answers to 2 reported System Design and Architecture question(s), under time.

Day 7 — Answer out loud: Behavioral and Collaboration

  • Answer aloud, timed: Tell me about a time you translated an abstract business concept into a concrete technical deliverable.
  • Answer aloud, timed: How do you approach code reviews and provide constructive feedback to fellow engineers?

Deliverable: Spoken answers to 2 reported Behavioral and Collaboration question(s), under time.

Behavioural preparation

Behavioural rounds judge the decision you made and what it cost.

Tell me about a time you translated an abstract business concept into a concrete technical deliverable.

Medium · Behavioral and Collaboration

Approach

  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.

Follow-up

  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?

How do you approach code reviews and provide constructive feedback to fellow engineers?

Medium · Behavioral and Collaboration

Approach

  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.

Follow-up

  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?

Describe a situation where you had to collaborate with non-technical stakeholders to resolve a system issue or

Medium · Behavioral and Collaboration

Describe a situation where you had to collaborate with non-technical stakeholders to resolve a system issue or compliance requirement.

Approach

  1. Pick a story where you made the decision, not one where you watched it.
  2. State the situation in two sentences and spend the rest on the reasoning.
  3. Give the blast radius: what could have broken, and what you measured.
  4. Name the disagreement and how you resolved it with evidence.

Follow-up

  • What would you do differently if you ran that again?
  • How did you know your change caused the improvement?