Director of IT and Workplace

Academic Key; Menlo Park (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Academic Key in Menlo Park, CA seeks a Director of IT & Workplace to own identity, endpoints, SaaS portfolio, and the physical environment. You will lead a small team, set multi-year roadmaps, and own IT controls in HIPAA and SOC 2 programs while integrating acquisitions.

You'll manage the IT and workplace budget, partner with Security and Legal on risk, continuity, and data handling, and ensure reliable operations for a distributed clinician and staff population.

Qualifications

• 8+ years in IT with hands-on and leadership roles.
• 3+ years managing IT or workplace teams.
• Experience with HIPAA, SOC 2 or HITRUST compliance.

Responsibilities

• Develop and own multi-year IT and workplace roadmap aligned to hiring plan.
• Own IT and workplace budget and forecasting; defend costs in planning cycles.
• Lead, coach, and grow the IT/workplace team; define SLAs and career paths.
• Oversee identity platform, endpoints, SaaS portfolio, and security posture.
• Integrate IT/workplace operations for acquired companies.
• Ensure compliance with HIPAA, SOC 2, and customer security reviews.

Skills

Okta identity

MS 365

Google Workspace

MDM

Networking

Security

Budgeting

Tools

Okta

Microsoft 365

Google Workspace

MDM solutions

Job description

The Role We've grown to roughly 265 people working onsite from our Menlo Park headquarters, supported by a large network of remote U.S.-licensed clinicians â and part of the Series C is earmarked for acquisitions. The systems and the spaces holding all of that together were built for a much smaller company. We're hiring a Director of IT & Workplace to own them properly. You'll own two halves of the same problem: the employee technology platform â identity, endpoints, networking, the SaaS portfolio, and our IT security posture â and the physical environment the company runs on, from space planning and physical security to the AV that customer demos and all-hands depend on. You'll inherit a small, capable team and be accountable for leveling it up. You'll be the named owner for IT controls in our HIPAA and SOC 2 programs, you'll own the IT and workplace budget, and when we acquire a company, you'll be the one integrating it. Our Environment Identity and access: Okta for SSO, MFA, and lifecycle provisioning. Productivity: Microsoft 365 and Google Workspace, both in active use across the company. Endpoints: a Mac-primary fleet with Windows machines alongside it, managed through MDM. VDIs included. Internal systems: IRU, plus a growing portfolio of internal and third-party SaaS applications. Workplace: a Palo Alto headquarters with conference room AV and access control, plus a distributed clinician and staff population. What You'll Do Strategy, budget, and team Own a multi-year IT and workplace roadmap tied to the hiring plan, and bring it to leadership with clear tradeoffs and funding asks. Own the IT and workplace operating and capital budget: forecast it, defend it in planning cycles, and continuously rationalize license, vendor, and facilities spend. Lead, coach, and grow the existing team â set clear expectations, run honest performance conversations, hire as scope deepens, and build career paths that keep strong people. Define and publish service levels for ticket response, uptime, onboarding readiness, and workplace turnaround, and report against them to the executive team. Technology and infrastructure Own the identity platform: SSO, MFA, automated joiner-mover-leaver provisioning in Okta, and access governance across every connected application. Own the endpoint fleet and the SaaS portfolio â Microsoft 365, Google Workspace, IRU, and a long tail of business applications â with enforced MDM baselines for encryption, patching, and configuration. Own network and connectivity for the headquarters and the remote workforce, with redundancy appropriate to a company our customers depend on. Replace manual provisioning, access reviews, and device setup with scripted, auditable workflows. Lead major programs end to end: platform migrations, upgrades, office buildouts, and the IT and workplace integration of acquired companies. Security, compliance, and risk Serve as the accountable owner for IT controls in our HIPAA, SOC 2, and customer security review programs, including evidence collection and audit response. Enforce least privilege across the environment and run recurring access certifications with documented outcomes. Partner with Security on incident response and vulnerability remediation, and with Legal on data handling, retention, and discovery requests. Own business continuity and disaster recovery for corporate systems â write the plans, test them, and fix what the tests expose. Treat protected health information and confidential data with the care our customers and their patients expect. This is non-negotiable in everything we do. Workplace and facilities Own day-to-day operations of the headquarters, and lead space planning and buildouts against a hiring plan that keeps moving. Manage physical security â access control and badging, visitor management, cameras, and emergency preparedness â aligned with our compliance obligations. Own conference room and event AV, including all-hands and customer visits, to a standard where the technology is never the story. Support remote clinicians and staff with reliable equipment logistics, home office standards, and consistent service regardless of location. Manage facilities, AV, security, and food vendors, plus landlord and lease matters, in partnership with Finance and Legal. What You'll Bring 8+ years in IT , spanning hands-on administration or engineering and progressively senior ownership. You've done the work you'll now be leading. 3+ years managing IT or workplace teams , including hiring, performance management, and developing people into bigger roles. Proven ownership of an IT function through rapid growth. You've scaled systems and process ahead of headcount, not behind it. Deep technical expertise across identity (Okta or comparable), Microsoft 365 and Google Workspace, MDM at fleet scale, and corporate networking. Experience as a named control owner in a regulated environment â HIPAA, SOC 2, or HITRUST â including sitting across th