Senior IT Engineer

About Alaffia & Our Mission Every year, U.S. health plans lose billions to improper payments and administrative waste. That wasted spending ultimately trickles down across the healthcare ecosystem, driving up costs for plans, providers, and patients alike. We’re here to change that paradigm. Alaffia is a new kind of claims operations partner for health plans. Using expert clinicians and transparent AI, we deliver deeper insights, smarter automation, and consistently better outcomes across the entire lifecycle of claims. With Alaffia, health plans can cut wasted spending more effectively than ever — and provide their members the most affordable care. We’re a high-growth, venture-backed Series B healthtech startup based in NYC and are actively scaling our company. Join us in helping to build a healthcare system that works better for everyone. *This position requires current authorization to work in the United States. Unfortunately, we are not in a position to sponsor work visas at this time. About the Role & What You'll Be Doing We're looking for someone to own security posture, access control, and IT infrastructure hygiene across the company, work that today is split between our IT vendor and internal efforts. This is our first dedicated IT Engineer hire: a hands-on, high-ownership role where you'll inherit a real backlog of concrete, overdue projects on day one rather than a blank slate. You'll report directly to our VP of Engineering and work closely alongside our two Security Engineers, as well as support broader business IT needs. Your Responsibilities Onboarding, Offboarding & Access Control Fix broken RBAC automation across Rippling, Google Workspace, and downstream SaaS apps Audit company-wide Google Drive and NYC-office group access Verify that "All SSO" and "All 2FA" controls are actually enforced, not just configured Run an endpoint inventory audit to independently verify FieldGuide's prior work Retroactively apply comprehensive data labeling across company systems Lead company-wide secrets rotation — both a one-time cleanup and an ongoing rotation cadence Device Management & Secure Application Usage Audit cloud and local application usage company-wide Roll out universal device control via an MDM (mobile device management) tool IT Infrastructure Rotate all duplicate phone numbers currently used for Apple Account 2FA Identify and cut IT spend bloat Build IT task KPIs to bring visibility and accountability to the function Day-to-Day Serve as the primary point of contact for IT support and troubleshooting across the company Own the relationship with IT vendors and SaaS tools, replacing reliance on outside retainer support What We're Looking For 6+ years in IT engineering, systems administration, or a security-adjacent infra role, with direct experience owning identity/access management (RBAC, SSO, 2FA) at a growing company Hands-on experience with Google Workspace admin, an HRIS/IT platform like Rippling, and at least one MDM tool Comfort auditing and cleaning up messy, inherited systems Experience with secrets management and rotation practices A bias toward fixing root causes over patching symptoms, and toward building repeatable process (KPIs, documentation) rather than solving the same fire every time Clear communicator — you'll be the primary IT touchpoint for non-technical employees company-wide Nice to have Prior experience in a healthcare, fintech, or other compliance-sensitive environment Familiarity with SOC 2 or similar audit frameworks Scripting/automation experience (e.g., Python, Google Apps Script) to reduce manual IT toil Our Culture Alaffia was born out of our founders' personal connection to the inefficiency of the U.S. healthcare system. We are deeply mission-driven, with an abiding belief that technology can help create a better future for everyone — and we're looking for others who share our passion for change to join the team. What Else Do You Get Working With Us? Competitive Compensation Medical, Dental, and Vision benefits Flexible, paid vacation policy Work in a flat organizational structure — direct access to Leadership