Senior Engineering Manager (DevOps, IT, & Security)

Alaffia Health; New York (NY); Hybrid; USD 180,000 - 280,000; Full time

Benefits offered by this job

Competitive pay

Medical, Dental, Vision

Flexible vacation

Direct leadership access

Job summary

Alaffia Health is seeking a hands-on engineering leader to own security, DevOps, and IT operations. You will guide security posture, compliance programs, and cloud reliability while mentoring a growing team of IT, DevOps, and Security engineers.

Reporting to the VP of Engineering, you’ll drive audits, implement scalable controls, and partner with product and customer teams to build trust. This role demands a practical, hands-on leader who can ship safe, compliant software at scale.

Qualifications

• 8+ years in infrastructure, DevOps/SRE, IT, or security engineering, including 3+ years leading engineers.
• Proven experience owning a security and compliance program in a regulated environment, with direct experience in SOC 2, HIPAA, and/or HITRUST
• Strong hands-on background in cloud infrastructure, CI/CD, infrastructure-as-code, and production reliability
• Experience with identity and access management, endpoint/device management, and secrets management at a growing company
• A bias toward fixing root causes and building repeatable process over solving the same fire every time
• Comfort being a player-coach: able to set strategy and roll up your sleeves
• Clear communicator who can work with engineers, auditors, customers, and non-technical teammates alike

Responsibilities

• Own Alaffia’s security program end to end, including risk management, vulnerability management, incident response, and security awareness
• Lead and maintain our SOC 2, HIPAA, and HITRUST compliance efforts, from control design and evidence collection through audit execution
• Partner with Engineering, Product, and Customer teams to answer security questionnaires and support customer due diligence
• Build repeatable processes and clear metrics so security and compliance work is visible, not reactive
• Own our cloud infrastructure, CI/CD pipelines, observability, and release practices
• Drive reliability, availability, and cost‑efficiency as we scale, including infrastructure‑as‑code, incident management, and on‑call practices
• Embed security into the delivery pipeline so engineers can ship quickly without trading off safety
• Oversee company‑wide IT operations, including identity and access management (SSO, 2FA, RBAC), device management, and onboarding/offboarding automation
• Own relationships with IT vendors and SaaS tools, and bring support and spend under internal control
• Make sure security controls are actually enforced, not just configured
• Lead, mentor, and grow a team spanning IT, DevOps, and Security engineers, and hire as the function scales
• Set priorities, roadmap, and KPIs across the three areas, and report progress to the VP of Engineering and company leadership
• Stay hands‑on where it matters: architecture reviews, critical incidents, audit readiness, and unblocking your team

Skills

Cloud infrastructure

CI/CD pipelines

Security engineering

SOC2 HIPAA HITRUST

IAM & RBAC

Leadership

Job description

About Alaffia & Our Mission

Every year, U.S. health plans lose billions to improper payments and administrative waste. That wasted spending ultimately trickles down across the healthcare ecosystem, driving up costs for plans, providers, and patients alike. We're here to change that paradigm.

Alaffia is a new kind of claims operations partner for health plans. Using expert clinicians and transparent AI, we deliver deeper insights, smarter automation, and consistently better outcomes across the entire lifecycle of claims. With Alaffia, health plans can cut wasted spending more effectively than ever, and provide their members the most affordable care.

We're a high-growth, venture-backed Series B healthtech startup based in NYC and are actively scaling our company. Join us in helping to build a healthcare system that works better for everyone.

(This position requires current authorization to work in the United States. Unfortunately, we are not in a position to sponsor work visas at this time.)

About Alaffia & Our Mission

Every year, U.S. health plans lose billions to improper payments and administrative waste. That wasted spending ultimately trickles down across the healthcare ecosystem, driving up costs for plans, providers, and patients alike. We’re here to change that paradigm.

Alaffia is a new kind of claims operations partner for health plans. Using expert clinicians and transparent AI, we deliver deeper insights, smarter automation, and consistently better outcomes across the entire lifecycle of claims. With Alaffia, health plans can cut wasted spending more effectively than ever — and provide their members the most affordable care.

We’re a high-growth, venture-backed Series B healthtech startup based in NYC and are actively scaling our company. Join us in helping to build a healthcare system that works better for everyone.

About the Role & What You’ll Be Doing

We’re looking for a hands‑on engineering leader to own the systems that keep Alaffia secure, compliant, and reliable: our cloud infrastructure and DevOps practice, our security program, and the IT environment our whole company works in. Today this work is spread across several engineers, an outside IT vendor, and a growing backlog. You’ll bring it together under one roof, set the technical direction, and build the team and processes to run it at scale.

This is a player‑coach role. You’ll report directly to our VP of Engineering, lead a small team across IT, DevOps, and Security, and stay close to the work, whether that means reviewing an architecture, debugging a deploy pipeline, or driving an audit to the finish line. As a healthcare AI company handling sensitive claims data, security and compliance are core to how we earn customer trust, and you’ll own that outcome.

Your Responsibilities

Security & Compliance

• Own Alaffia’s security program end to end, including risk management, vulnerability management, incident response, and security awareness
• Lead and maintain our SOC 2, HIPAA, and HITRUST compliance efforts, from control design and evidence collection through audit execution
• Partner with Engineering, Product, and Customer teams to answer security questionnaires and support customer due diligence
• Build repeatable processes and clear metrics so security and compliance work is visible, not reactive

DevOps & Infrastructure

• Own our cloud infrastructure, CI/CD pipelines, observability, and release practices
• Drive reliability, availability, and cost‑efficiency as we scale, including infrastructure‑as‑code, incident management, and on‑call practices
• Embed security into the delivery pipeline so engineers can ship quickly without trading off safety

IT & Access Control

• Oversee company‑wide IT operations, including identity and access management (SSO, 2FA, RBAC), device management, and onboarding/offboarding automation
• Own relationships with IT vendors and SaaS tools, and bring support and spend under internal control
• Make sure security controls are actually enforced, not just configured

Team Leadership

• Lead, mentor, and grow a team spanning IT, DevOps, and Security engineers, and hire as the function scales
• Set priorities, roadmap, and KPIs across the three areas, and report progress to the VP of Engineering and company leadership
• Stay hands‑on where it matters: architecture reviews, critical incidents, audit readiness, and unblocking your team

What We’re Looking For

• 8+ years in infrastructure, DevOps/SRE, IT, or security engineering, including 3+ years leading engineers
• Proven experience owning a security and compliance program in a regulated environment, with direct experience in SOC 2, HIPAA, and/or HITRUST
• Strong hands‑on background in cloud infrastructure, CI/CD, infrastructure‑as‑code, and production reliability
• Experience with identity and access management, endpoint/device management, and secrets management at a growing company
• A bias toward fixing root causes and building repeatable process over solving the same fire every time
• Comfort being a player‑coach: able to set strategy and roll up your sleeves
• Clear communicator who can work with engineers, auditors, customers, and non-technical teammates alike

Nice to have

• Experience in healthcare, health tech, or another compliance‑sensitive industry
• Experience taking a company through its first HITRUST certification
• Background securing AI/ML systems and the data that feeds them
• Scripting and automation experience (e.g., Python) to reduce manual toil

Our Culture

Alaffia was born out of our founders’ personal connection to the inefficiency of the U.S. healthcare system. We are deeply mission‑driven, with an abiding belief that technology can help create a better future for everyone — and we’re looking for others who share our passion for change to join the team.

What Else Do You Get Working With Us?

• Competitive Compensation
• Medical, Dental, and Vision benefits
• Flexible, paid vacation policy
• Work in a flat organizational structure — direct access to Leadership