Alaffia Health logo

Senior IT Engineer

Alaffia Health

New York, NYJobNo compensation foundPosted 2w agoVerified open 5 days ago

Most applications go out cold — see where you stand first. No sign-up to start.

At a glance

Compensation
No compensation found
Location
New York, NY
Work Authorization
Not specified

Job overview

Alaffia Health is hiring a Senior IT Engineer. Alaffia Health, a venture‑backed health‑tech startup in New York, seeks a Senior IT Engineer to own security posture, access control, and IT infrastructure hygiene. The role involves fixing broken automation, auditing access, managing device security, and serving as the primary IT point of contact across the company.

Key focus areas include Fix broken RBAC automation across Rippling, Google Workspace, and downstream SaaS apps, Audit company‑wide Google Drive and NYC‑office group access, and Verify that All SSO and All 2FA controls are actually enforced.

Important skills include System Administration, Security Managing, Identity Management Systems, Access Controls, Auditing, and Process Improvements. Preferred (not required): Python and Google Apps Script.

Skills & qualifications

RequiredNice to have

Skills

System AdministrationSecurity ManagingIdentity Management SystemsAccess ControlsAuditingProcess ImprovementsScriptingRBACGoogle Workspace AdminRipplingMDM ToolSecrets ManagementSSOMFAPythonGoogle Apps ScriptClear Communication

Qualifications

6+ Years IT Engineering ExperienceCurrent Authorization to Work in United StatesPrior Experience in Healthcare Fintech or Compliance Sensitive EnvironmentFamiliarity With SOC 2 or Similar Audit FrameworksScripting Automation Experience

Benefits

Medical Insurance
Dental Insurance
Vision Insurance
Paid Time Off

Full job description

About Alaffia & Our Mission

Every year, U.S. health plans lose billions to improper payments and administrative waste. That wasted spending ultimately trickles down across the healthcare ecosystem, driving up costs for plans, providers, and patients alike. We’re here to change that paradigm.

Alaffia is a new kind of claims operations partner for health plans. Using expert clinicians and transparent AI, we deliver deeper insights, smarter automation, and consistently better outcomes across the entire lifecycle of claims. With Alaffia, health plans can cut wasted spending more effectively than ever — and provide their members the most affordable care.

We’re a high-growth, venture-backed Series B healthtech startup based in NYC and are actively scaling our company. Join us in helping to build a healthcare system that works better for everyone.

*This position requires current authorization to work in the United States. Unfortunately, we are not in a position to sponsor work visas at this time.

About the Role & What You'll Be Doing

We're looking for someone to own security posture, access control, and IT infrastructure hygiene across the company, work that today is split between our IT vendor and internal efforts. This is our first dedicated IT Engineer hire: a hands-on, high-ownership role where you'll inherit a real backlog of concrete, overdue projects on day one rather than a blank slate.

You'll report directly to our VP of Engineering and work closely alongside our two Security Engineers, as well as support broader business IT needs.

Your Responsibilities

Onboarding, Offboarding & Access Control

  • Fix broken RBAC automation across Rippling, Google Workspace, and downstream SaaS apps

  • Audit company-wide Google Drive and NYC-office group access

  • Verify that "All SSO" and "All 2FA" controls are actually enforced, not just configured

  • Run an endpoint inventory audit to independently verify FieldGuide's prior work

  • Retroactively apply comprehensive data labeling across company systems

  • Lead company-wide secrets rotation — both a one-time cleanup and an ongoing rotation cadence Device Management & Secure Application Usage

  • Audit cloud and local application usage company-wide

  • Roll out universal device control via an MDM (mobile device management) tool IT Infrastructure

  • Rotate all duplicate phone numbers currently used for Apple Account 2FA

  • Identify and cut IT spend bloat

  • Build IT task KPIs to bring visibility and accountability to the function Day-to-Day

  • Serve as the primary point of contact for IT support and troubleshooting across the company

  • Own the relationship with IT vendors and SaaS tools, replacing reliance on outside retainer support What We're Looking For

  • 6+ years in IT engineering, systems administration, or a security-adjacent infra role, with direct experience owning identity/access management (RBAC, SSO, 2FA) at a growing company

  • Hands-on experience with Google Workspace admin, an HRIS/IT platform like Rippling, and at least one MDM tool

  • Comfort auditing and cleaning up messy, inherited systems

  • Experience with secrets management and rotation practices

  • A bias toward fixing root causes over patching symptoms, and toward building repeatable process (KPIs, documentation) rather than solving the same fire every time

  • Clear communicator — you'll be the primary IT touchpoint for non-technical employees company-wide Nice to have

  • Prior experience in a healthcare, fintech, or other compliance-sensitive environment

  • Familiarity with SOC 2 or similar audit frameworks

  • Scripting/automation experience (e.g., Python, Google Apps Script) to reduce manual IT toil Our Culture

Alaffia was born out of our founders' personal connection to the inefficiency of the U.S. healthcare system. We are deeply mission-driven, with an abiding belief that technology can help create a better future for everyone — and we're looking for others who share our passion for change to join the team.

What Else Do You Get Working With Us?

  • Competitive Compensation
  • Medical, Dental, and Vision benefits
  • Flexible, paid vacation policy
  • Work in a flat organizational structure — direct access to Leadership

You've read the whole posting — now see how you match it.