Senior IT Engineer

Alaffia Health; New York (NY); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive Compensation

Medical, Dental, Vision benefits

Flexible, paid vacation policy

Flat organizational structure

Job summary

Alaffia Health, a NYC-based healthtech startup, is hiring its first dedicated IT Engineer to own security posture, access control, and IT infrastructure hygiene. You will work closely with Security Engineers and report to a VP of Engineering, inheriting a real backlog of concrete projects from day one.

You’ll handle onboarding/offboarding, vendor relationships, and run a proactive, KPI-driven IT function within a growing company that values hands-on ownership and clear communication.

Qualifications

• 6+ years in IT engineering, systems administration, or security-adjacent infra role, with direct experience owning identity/access management (RBAC, SSO, 2FA) at a growing company
• Hands-on experience with Google Workspace admin, an HRIS/IT platform like Rippling, and at least one MDM tool
• Comfort auditing and cleaning up messy, inherited systems
• Experience with secrets management and rotation practices
• A bias toward fixing root causes over patching symptoms, and toward building repeatable process (KPIs, documentation) rather than solving the same fire every time
• Clear communicator - you'll be the primary IT touchpoint for non-technical employees company-wide

Responsibilities

• Onboarding, Offboarding & Access Control
• Audit cloud and local application usage company-wide
• Rotate all duplicate phone numbers currently used for Apple Account 2FA
• Identify and cut IT spend bloat
• Build IT task KPIs to bring visibility and accountability to the function
• Serve as the primary point of contact for IT support and troubleshooting across the company
• Own the relationship with IT vendors and SaaS tools, replacing reliance on outside retainer support

Job description

Every year, U.S. health plans lose billions to improper payments and administrative waste. That wasted spending ultimately trickles down across the healthcare ecosystem, driving up costs for plans, providers, and patients alike. We’re here to change that paradigm.

Alaffia is a new kind of claims operations partner for health plans. Using expert clinicians and transparent AI, we deliver deeper insights, smarter automation, and consistently better outcomes across the entire lifecycle of claims. With Alaffia, health plans can cut wasted spending more effectively than ever - and provide their members the most affordable care.

We’re a high-growth, venture-backed Series B healthtech startup based in NYC and are actively scaling our company. Join us in helping to build a healthcare system that works better for everyone.

*This position requires current authorization to work in the United States. Unfortunately, we are not in a position to sponsor work visas at this time.

About the Role & What You'll Be Doing

We’re looking for someone to own security posture, access control, and IT infrastructure hygiene across the company, work that today is split between our IT vendor and internal efforts. This is our first dedicated IT Engineer hire: a hands-on, high-ownership role where you'll inherit a real backlog of concrete, overdue projects on day one rather than a blank slate.

You’ll report directly to our VP of Engineering and work closely alongside our two Security Engineers, as well as support broader business IT needs.

Your Responsibilities

Onboarding, Offboarding & Access Control

• Fix broken RBAC automation across Rippling, Google Workspace, and downstream SaaS apps
• Audit company-wide Google Drive and NYC-office group access
• Verify that "All SSO" and "All 2FA" controls are actually enforced, not just configured
• Run an endpoint inventory audit to independently verify FieldGuide's prior work
• Retroactively apply comprehensive data labeling across company systems
• Lead company-wide secrets rotation - both a one-time cleanup and an ongoing rotation cadence

Device Management & Secure Application Usage

• Audit cloud and local application usage company-wide

IT Infrastructure

• Rotate all duplicate phone numbers currently used for Apple Account 2FA
• Identify and cut IT spend bloat
• Build IT task KPIs to bring visibility and accountability to the function

Day-to-Day

• Serve as the primary point of contact for IT support and troubleshooting across the company
• Own the relationship with IT vendors and SaaS tools, replacing reliance on outside retainer support

What We're Looking For

• 6+ years in IT engineering, systems administration, or a security-adjacent infra role, with direct experience owning identity/access management (RBAC, SSO, 2FA) at a growing company
• Hands-on experience with Google Workspace admin, an HRIS/IT platform like Rippling, and at least one MDM tool
• Comfort auditing and cleaning up messy, inherited systems
• Experience with secrets management and rotation practices
• A bias toward fixing root causes over patching symptoms, and toward building repeatable process (KPIs, documentation) rather than solving the same fire every time
• Clear communicator - you'll be the primary IT touchpoint for non-technical employees company-wide

Nice to have

• Prior experience in a healthcare, fintech, or other compliance-sensitive environment
• Familiarity with SOC 2 or similar audit frameworks
• Scripting/automation experience (e.g., Python, Google Apps Script) to reduce manual IT toil

Our Culture

Alaffia was born out of our founders' personal connection to the inefficiency of the U.S. healthcare system. We are deeply mission-driven, with an abiding belief that technology can help create a better future for everyone - and we're looking for others who share our passion for change to join the team.

What Else Do You Get Working With Us?

• Competitive Compensation
• Medical, Dental, and Vision benefits
• Flexible, paid vacation policy
• Work in a flat organizational structure - direct access to Leadership