Alaffia Health
Senior Engineering Manager (DevOps, IT, & Security)
New York, New York, US · Manager · Full-time · Posted Oct 26, 2026
- Experience
- 8+ years in infrastructure, DevOps/SRE, IT, or security engineering, including 3+ years leading engineers.
- Visa sponsorship
- Requires current authorization to work in the United States; work visa sponsorship is not available.
About the job
Leads Alaffia’s IT, DevOps, infrastructure, security, and compliance functions, setting technical direction while remaining hands-on in a healthcare AI environment.
What you'll do
- Own the security program and lead SOC 2, HIPAA, and HITRUST compliance efforts, including audits and customer due diligence.
- Manage cloud infrastructure, CI/CD, reliability, observability, release practices, and security within the delivery pipeline.
- Lead and grow the IT, DevOps, and Security team; oversee company IT, access controls, vendors, priorities, and performance metrics.
What they ask for
- Experience owning a security and compliance program in a regulated environment, with direct experience in SOC 2, HIPAA, and/or HITRUST.
- Hands-on experience with cloud infrastructure, CI/CD, infrastructure-as-code, and production reliability.
- Experience with identity and access management, endpoint/device management, and secrets management at a growing company.
- Able to set strategy and work hands-on; communicate with technical and non-technical stakeholders.
Nice to have
- Experience in healthcare, health tech, or another compliance-sensitive industry; experience taking a company through its first HITRUST certification.
- Experience securing AI/ML systems and their data; scripting and automation experience such as Python.
Tools
SOC 2, HIPAA, HITRUST, CI/CD, infrastructure-as-code, SSO, 2FA, RBAC
AI focus
The role secures AI/ML systems and the data that feeds them as a nice-to-have; Alaffia uses transparent AI in its claims operations.
Model-written summary · the original posting is authoritative