Every year, U.S. health plans lose billions to improper payments and administrative waste. That wasted spending ultimately trickles down across the healthcare ecosystem, driving up costs for plans, providers, and patients alike. We’re here to change that paradigm.
Alaffia is a new kind of claims operations partner for health plans. Using expert clinicians and transparent AI, we deliver deeper insights, smarter automation, and consistently better outcomes across the entire lifecycle of claims. With Alaffia, health plans can cut wasted spending more effectively than ever — and provide their members the most affordable care.
We’re a high-growth, venture-backed Series B healthtech startup based in NYC and are actively scaling our company. Join us in helping to build a healthcare system that works better for everyone.
*This position requires current authorization to work in the United States. Unfortunately, we are not in a position to sponsor work visas at this time.
About the Role & What You'll Be DoingWe're looking for someone to own security posture, access control, and IT infrastructure hygiene across the company, work that today is split between our IT vendor and internal efforts. This is our first dedicated IT Engineer hire: a hands-on, high-ownership role where you'll inherit a real backlog of concrete, overdue projects on day one rather than a blank slate.
You'll report directly to our VP of Engineering and work closely alongside our two Security Engineers, as well as support broader business IT needs.
Your Responsibilities
Onboarding, Offboarding & Access Control
Fix broken RBAC automation across Rippling, Google Workspace, and downstream SaaS apps
Audit company-wide Google Drive and NYC-office group access
Verify that "All SSO" and "All 2FA" controls are actually enforced, not just configured
Run an endpoint inventory audit to independently verify FieldGuide's prior work
Retroactively apply comprehensive data labeling across company systems
Lead company-wide secrets rotation — both a one-time cleanup and an ongoing rotation cadence
Device Management & Secure Application Usage
Audit cloud and local application usage company-wide
Roll out universal device control via an MDM (mobile device management) tool
IT Infrastructure
Rotate all duplicate phone numbers currently used for Apple Account 2FA
Identify and cut IT spend bloat
Build IT task KPIs to bring visibility and accountability to the function
Day-to-Day
Serve as the primary point of contact for IT support and troubleshooting across the company
Own the relationship with IT vendors and SaaS tools, replacing reliance on outside retainer support
What We're Looking For
6+ years in IT engineering, systems administration, or a security-adjacent infra role, with direct experience owning identity/access management (RBAC, SSO, 2FA) at a growing company
Hands-on experience with Google Workspace admin, an HRIS/IT platform like Rippling, and at least one MDM tool
Comfort auditing and cleaning up messy, inherited systems
Experience with secrets management and rotation practices
A bias toward fixing root causes over patching symptoms, and toward building repeatable process (KPIs, documentation) rather than solving the same fire every time
Clear communicator — you'll be the primary IT touchpoint for non-technical employees company-wide
Nice to have
Prior experience in a healthcare, fintech, or other compliance-sensitive environment
Familiarity with SOC 2 or similar audit frameworks
Scripting/automation experience (e.g., Python, Google Apps Script) to reduce manual IT toil
Our Culture
Alaffia was born out of our founders' personal connection to the inefficiency of the U.S. healthcare system. We are deeply mission-driven, with an abiding belief that technology can help create a better future for everyone — and we're looking for others who share our passion for change to join the team.
What Else Do You Get Working With Us?
Competitive Compensation
Medical, Dental, and Vision benefits
Flexible, paid vacation policy
Work in a flat organizational structure — direct access to Leadership
Skills Required
- 6+ years in IT engineering, systems administration, or security-adjacent infrastructure role
- Direct experience owning identity/access management (RBAC, SSO, 2FA)
- Hands-on experience with Google Workspace administration
- Experience with an HRIS/IT platform like Rippling
- Experience with at least one MDM (mobile device management) tool
- Experience with secrets management and rotation practices
- Comfort auditing and cleaning up messy, inherited systems
- Strong communication skills for non-technical stakeholders
- Authorized to work in the United States (no visa sponsorship available)
- Prior experience in healthcare, fintech, or compliance-sensitive environments
- Familiarity with SOC 2 or similar audit frameworks
- Scripting/automation experience (e.g., Python, Google Apps Script)
What We Do
Every year, U.S. health plans lose billions to improper payments and administrative waste. That wasted spending ultimately trickles down across the healthcare ecosystem, driving up costs for plans, providers, and patients alike. We’re here to change that paradigm. Alaffia is a new kind of claims operations partner for health plans. Using expert clinicians and transparent AI, we deliver deeper insights, smarter automation, and consistently better outcomes across the entire lifecycle of claims. With Alaffia, health plans can cut wasted spending more effectively than ever — and provide their members the most affordable care. We’re a high-growth, venture-backed Series B healthtech startup based in NYC and are actively scaling our company. Join us in helping to build a healthcare system that works better for everyone.
Alaffia Health Offices
OnSite Workspace
