Director of Engineering (DevOps, IT, & Security)

Alaffia Health • New York, NY

5d

About The Position

Alaffia is seeking a hands-on engineering leader to bring together and own the company’s cloud infrastructure and DevOps practice, security program, and company-wide IT environment. The role sets technical direction and builds the team and processes needed to operate these functions at scale. It is a player-coach position reporting directly to the VP of Engineering, leading a small team across IT, DevOps, and Security while remaining involved in architecture reviews, deployment pipelines, incidents, and audits. The role is accountable for keeping Alaffia secure, compliant, and reliable as a healthcare AI company handling sensitive claims data.

Requirements

• 8+ years in infrastructure, DevOps/SRE, IT, or security engineering, including 3+ years leading engineers.
• Proven experience owning a security and compliance program in a regulated environment, with direct experience in SOC 2, HIPAA, and/or HITRUST.
• Strong hands-on background in cloud infrastructure, CI/CD, infrastructure-as-code, and production reliability.
• Experience with identity and access management, endpoint/device management, and secrets management at a growing company.
• Bias toward fixing root causes and building repeatable processes rather than repeatedly addressing the same issues.
• Comfort serving as a player-coach, setting strategy while also doing hands-on work.
• Clear communication skills and ability to work with engineers, auditors, customers, and non-technical teammates.
• Current authorization to work in the United States; the company is unable to sponsor work visas.

Nice To Haves

• Experience in healthcare, health tech, or another compliance-sensitive industry.
• Experience taking a company through its first HITRUST certification.
• Background securing AI/ML systems and the data that feeds them.
• Scripting and automation experience, such as Python, to reduce manual toil.

Responsibilities

• Own Alaffia’s security program, including risk management, vulnerability management, incident response, and security awareness.
• Lead and maintain SOC 2, HIPAA, and HITRUST compliance efforts, including control design, evidence collection, and audit execution.
• Partner with Engineering, Product, and Customer teams on security questionnaires and customer due diligence.
• Build repeatable processes and clear metrics for security and compliance work.
• Own cloud infrastructure, CI/CD pipelines, observability, and release practices.
• Drive reliability, availability, and cost-efficiency through infrastructure-as-code, incident management, and on-call practices.
• Embed security into delivery pipelines while supporting efficient engineering delivery.
• Oversee company-wide IT operations, including identity and access management, device management, and onboarding/offboarding automation.
• Manage IT vendor and SaaS relationships and bring support and spending under internal control.
• Ensure security controls are enforced in practice.
• Lead, mentor, and grow a team across IT, DevOps, and Security, and hire as the function scales.
• Set priorities, roadmap, and KPIs across IT, DevOps, and Security, and report progress to the VP of Engineering and company leadership.
• Remain hands-on with architecture reviews, critical incidents, audit readiness, and unblocking the team.

Benefits

• Medical, dental, and vision benefits.
• Flexible, paid vacation policy.
• Flat organizational structure with direct access to leadership.
• Competitive compensation.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed