AI use among architectural and engineering managers is little observed so far. Measured exposure for architectural and engineering managers: 3% (little observed).

Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.

Check how this applies to your own job

Skills this job asks for

Say which you have and which you want to build. We use it to match you to jobs like this one.

About the job

About Alaffia & Our Mission

Every year, U.S. health plans lose billions to improper payments and administrative waste. That wasted spending ultimately trickles down across the healthcare ecosystem, driving up costs for plans, providers, and patients alike. We're here to change that paradigm.

Alaffia is a new kind of claims operations partner for health plans. Using expert clinicians and transparent AI, we deliver deeper insights, smarter automation, and consistently better outcomes across the entire lifecycle of claims. With Alaffia, health plans can cut wasted spending more effectively than ever, and provide their members the most affordable care.

We're a high-growth, venture-backed Series B healthtech startup based in NYC and are actively scaling our company. Join us in helping to build a healthcare system that works better for everyone.

(This position requires current authorization to work in the United States. Unfortunately, we are not in a position to sponsor work visas at this time.)

About the Role & What You’ll Be Doing

We’re looking for a hands-on engineering leader to own the systems that keep Alaffia secure, compliant, and reliable: our cloud infrastructure and DevOps practice, our security program, and the IT environment our whole company works in. Today this work is spread across several engineers, an outside IT vendor, and a growing backlog. You’ll bring it together under one roof, set the technical direction, and build the team and processes to run it at scale.

This is a player-coach role. You’ll report directly to our VP of Engineering, lead a small team across IT, DevOps, and Security, and stay close to the work, whether that means reviewing an architecture, debugging a deploy pipeline, or driving an audit to the finish line. As a healthcare AI company handling sensitive claims data, security and compliance are core to how we earn customer trust, and you’ll own that outcome.

Your Responsibilities

Security & Compliance

Own Alaffia’s security program end to end, including risk management, vulnerability management, incident response, and security awareness

Lead and maintain our SOC 2, HIPAA, and HITRUST compliance efforts, from control design and evidence collection through audit execution

Partner with Engineering, Product, and Customer teams to answer security questionnaires and support customer due diligence

Build repeatable processes and clear metrics so security and compliance work is visible, not reactive

DevOps & Infrastructure

Own our cloud infrastructure, CI/CD pipelines, observability, and release practices

Drive reliability, availability, and cost-efficiency as we scale, including infrastructure-as-code, incident management, and on-call practices

Embed security into the delivery pipeline so engineers can ship quickly without trading off safety

IT & Access Control

Oversee company-wide IT operations, including identity and access management (SSO, 2FA, RBAC), device management, and onboarding/offboarding automation

Own relationships with IT vendors and SaaS tools, and bring support and spend under internal control

Make sure security controls are actually enforced, not just configured

Team Leadership

Lead, mentor, and grow a team spanning IT, DevOps, and Security engineers, and hire as the function scales

Set priorities, roadmap, and KPIs across the three areas, and report progress to the VP of Engineering and company leadership

Stay hands-on where it matters: architecture reviews, critical incidents, audit readiness, and unblocking your team

What We’re Looking For

8+ years in infrastructure, DevOps/SRE, IT, or security engineering, including 3+ years leading engineers

Proven experience owning a security and compliance program in a regulated environment, with direct experience in SOC 2, HIPAA, and/or HITRUST

Strong hands-on background in cloud infrastructure, CI/CD, infrastructure-as-code, and production reliability

Experience with identity and access management, endpoint/device management, and secrets management at a growing company

A bias toward fixing root causes and building repeatable process over solving the same fire every time

Comfort being a player-coach: able to set strategy and roll up your sleeves

Clear communicator who can work with engineers, auditors, customers, and non-technical teammates alike

Nice to have

Experience in healthcare, health tech, or another compliance-sensitive industry

Experience taking a company through its first HITRUST certification

Background securing AI/ML systems and the data that feeds them

Scripting and automation experience (e.g., Python) to reduce manual toil

Our Culture

Alaffia was born out of our founders’ personal connection to the inefficiency of the U.S. healthcare system. We are deeply mission-driven, with an abiding belief that technology can help create a better future for everyone — and we’re looking for others who share our passion for change to join the team.

What Else Do You Get Working With Us?

Competitive Compensation

Medical, Dental, and Vision benefits

Flexible, paid vacation policy

Work in a flat organizational structure — direct access to Leadership