Senior Engineering Manager (DevOps, IT, & Security)

Alaffia Health•New York, NY

About The Position

Alaffia is a high-growth, venture-backed Series B healthtech startup that partners with health plans to reduce improper payments and administrative waste using expert clinicians and transparent AI. The Senior Engineering Manager will bring the company’s cloud infrastructure and DevOps practice, security program, and company-wide IT environment together under one function, setting technical direction and developing the team and processes needed to scale. This is a hands-on player-coach role reporting directly to the VP of Engineering. The manager will lead a small team spanning IT, DevOps, and Security while staying involved in architecture reviews, deployment pipeline troubleshooting, critical incidents, and audit readiness. The role owns the security and compliance outcomes for a healthcare AI company that handles sensitive claims data. The position requires current authorization to work in the United States. Alaffia is not able to sponsor work visas at this time.

Requirements

At least 8 years of experience in infrastructure, DevOps/SRE, IT, or security engineering.
At least 3 years of experience leading engineers.
Proven experience owning a security and compliance program in a regulated environment, with direct experience in SOC 2, HIPAA, and/or HITRUST.
Strong hands-on background in cloud infrastructure, CI/CD, infrastructure-as-code, and production reliability.
Experience with identity and access management, endpoint/device management, and secrets management at a growing company.
A bias toward fixing root causes and building repeatable processes rather than repeatedly solving the same fire.
Comfort working as a player-coach, setting strategy while also doing hands-on work.
Clear communication skills and ability to work with engineers, auditors, customers, and non-technical teammates.
Current authorization to work in the United States; visa sponsorship is not available.

Nice To Haves

Experience in healthcare, health tech, or another compliance-sensitive industry.
Experience taking a company through its first HITRUST certification.
Background securing AI/ML systems and the data that feeds them.
Scripting and automation experience, such as Python, to reduce manual toil.

Responsibilities

Own Alaffia’s end-to-end security program, including risk management, vulnerability management, incident response, and security awareness.
Lead and maintain SOC 2, HIPAA, and HITRUST compliance efforts, including control design, evidence collection, and audit execution.
Partner with Engineering, Product, and Customer teams on security questionnaires and customer due diligence.
Build repeatable processes and clear metrics to make security and compliance work visible and proactive.
Own cloud infrastructure, CI/CD pipelines, observability, and release practices.
Drive reliability, availability, and cost-efficiency through infrastructure-as-code, incident management, and on-call practices.
Embed security into the delivery pipeline while enabling engineers to ship quickly.
Oversee company-wide IT operations, including identity and access management, device management, and onboarding/offboarding automation.
Manage relationships with IT vendors and SaaS tools, bringing support and spending under internal control.
Ensure security controls are enforced, not merely configured.
Lead, mentor, and grow a team across IT, DevOps, and Security, and hire as the function scales.
Set priorities, roadmap, and KPIs across the three areas, and report progress to the VP of Engineering and company leadership.
Remain hands-on with architecture reviews, critical incidents, audit readiness, and unblocking the team.