> Markdown version of [/jobs/ext/4618228-senior-engineering-manager-devops-it-security](https://www.wearedevelopers.com/jobs/ext/4618228-senior-engineering-manager-devops-it-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Engineering Manager (DevOps, IT, & Security)

- **Company:** Alaffia Health
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Software as a Service, Cloud Computing, Continuous Integration, Software Debugging, DevOps, Identity and Access Management, Information Technology Operations, Python (Programming Language), Key Management, Role-Based Access Control, Software Vulnerability Management, Delivery Pipeline, Machine Learning Operations
- **Published:** November 7, 2026
- **Apply:** https://www.juju.com/job/28_25197_6c7c1559525164cf517ec3356092f034

## About the Role

* 8+ years in infrastructure, DevOps/SRE, IT, or security engineering, including 3+ years leading engineers
 * Proven experience owning a security and compliance program in a regulated environment, with direct experience in SOC 2, HIPAA, and/or HITRUST
 * Strong hands-on background in cloud infrastructure, CI/CD, infrastructure-as-code, and production reliability
 * Experience with identity and access management, endpoint/device management, and secrets management at a growing company
 * A bias toward fixing root causes and building repeatable process over solving the same fire every time
 * Comfort being a player-coach: able to set strategy and roll up your sleeves
 * Clear communicator who can work with engineers, auditors, customers, and non-technical teammates alike, * Experience in healthcare, health tech, or another compliance-sensitive industry
 * Experience taking a company through its first HITRUST certification
 * Background securing AI/ML systems and the data that feeds them
 * Scripting and automation experience (e.g., Python) to reduce manual toil

## Description

We're looking for a hands-on engineering leader to own the systems that keep Alaffia secure, compliant, and reliable: our cloud infrastructure and DevOps practice, our security program, and the IT environment our whole company works in. Today this work is spread across several engineers, an outside IT vendor, and a growing backlog. You'll bring it together under one roof, set the technical direction, and build the team and processes to run it at scale.

This is a player-coach role. You'll report directly to our VP of Engineering, lead a small team across IT, DevOps, and Security, and stay close to the work, whether that means reviewing an architecture, debugging a deploy pipeline, or driving an audit to the finish line. As a healthcare AI company handling sensitive claims data, security and compliance are core to how we earn customer trust, and you'll own that outcome., Security & Compliance

 * Own Alaffia's security program end to end, including risk management, vulnerability management, incident response, and security awareness
 * Lead and maintain our SOC 2, HIPAA, and HITRUST compliance efforts, from control design and evidence collection through audit execution
 * Partner with Engineering, Product, and Customer teams to answer security questionnaires and support customer due diligence
 * Build repeatable processes and clear metrics so security and compliance work is visible, not reactive

DevOps & Infrastructure

 * Own our cloud infrastructure, CI/CD pipelines, observability, and release practices
 * Drive reliability, availability, and cost-efficiency as we scale, including infrastructure-as-code, incident management, and on-call practices
 * Embed security into the delivery pipeline so engineers can ship quickly without trading off safety

IT & Access Control

 * Oversee company-wide IT operations, including identity and access management (SSO, 2FA, RBAC), device management, and onboarding/offboarding automation
 * Own relationships with IT vendors and SaaS tools, and bring support and spend under internal control
 * Make sure security controls are actually enforced, not just configured, * Lead, mentor, and grow a team spanning IT, DevOps, and Security engineers, and hire as the function scales
 * Set priorities, roadmap, and KPIs across the three areas, and report progress to the VP of Engineering and company leadership
 * Stay hands-on where it matters: architecture reviews, critical incidents, audit readiness, and unblocking your team