The Role

We've grown to roughly 265 people working onsite from our Menlo Park headquarters, supported by a large network of remote U.S.-licensed clinicians — and part of the Series C is earmarked for acquisitions. The systems and the spaces holding all of that together were built for a much smaller company. We're hiring a Director of IT & Workplace to own them properly.

You'll own two halves of the same problem: the employee technology platform — identity, endpoints, networking, the SaaS portfolio, and our IT security posture — and the physical environment the company runs on, from space planning and physical security to the AV that customer demos and all-hands depend on. You'll inherit a small, capable team and be accountable for leveling it up. You'll be the named owner for IT controls in our HIPAA and SOC 2 programs, you'll own the IT and workplace budget, and when we acquire a company, you'll be the one integrating it.

Our Environment

• Identity and access: Okta for SSO, MFA, and lifecycle provisioning.

• Productivity: Microsoft 365 and Google Workspace, both in active use across the company.

• Endpoints: a Mac-primary fleet with Windows machines alongside it, managed through MDM. VDIs included.

• Internal systems: IRU, plus a growing portfolio of internal and third-party SaaS applications.

• Workplace: a Palo Alto headquarters with conference room AV and access control, plus a distributed clinician and staff population.

What You'll Do

Strategy, budget, and team

• Own a multi-year IT and workplace roadmap tied to the hiring plan, and bring it to leadership with clear tradeoffs and funding asks.

• Own the IT and workplace operating and capital budget: forecast it, defend it in planning cycles, and continuously rationalize license, vendor, and facilities spend.

• Lead, coach, and grow the existing team — set clear expectations, run honest performance conversations, hire as scope deepens, and build career paths that keep strong people.

• Define and publish service levels for ticket response, uptime, onboarding readiness, and workplace turnaround, and report against them to the executive team.

Technology and infrastructure

• Own the identity platform: SSO, MFA, automated joiner-mover-leaver provisioning in Okta, and access governance across every connected application.

• Own the endpoint fleet and the SaaS portfolio — Microsoft 365, Google Workspace, IRU, and a long tail of business applications — with enforced MDM baselines for encryption, patching, and configuration.

• Own network and connectivity for the headquarters and the remote workforce, with redundancy appropriate to a company our customers depend on.

• Replace manual provisioning, access reviews, and device setup with scripted, auditable workflows.

• Lead major programs end to end: platform migrations, upgrades, office buildouts, and the IT and workplace integration of acquired companies.

Security, compliance, and risk

• Serve as the accountable owner for IT controls in our HIPAA, SOC 2, and customer security review programs, including evidence collection and audit response.

• Enforce least privilege across the environment and run recurring access certifications with documented outcomes.

• Partner with Security on incident response and vulnerability remediation, and with Legal on data handling, retention, and discovery requests.

• Own business continuity and disaster recovery for corporate systems — write the plans, test them, and fix what the tests expose.

• Treat protected health information and confidential data with the care our customers and their patients expect. This is non-negotiable in everything we do.

Workplace and facilities

• Own day-to-day operations of the headquarters, and lead space planning and buildouts against a hiring plan that keeps moving.

• Manage physical security — access control and badging, visitor management, cameras, and emergency preparedness — aligned with our compliance obligations.

• Own conference room and event AV, including all-hands and customer visits, to a standard where the technology is never the story.

• Support remote clinicians and staff with reliable equipment logistics, home office standards, and consistent service regardless of location.

• Manage facilities, AV, security, and food vendors, plus landlord and lease matters, in partnership with Finance and Legal.

What You'll Bring

• 8+ years in IT, spanning hands-on administration or engineering and progressively senior ownership. You've done the work you'll now be leading.

• 3+ years managing IT or workplace teams, including hiring, performance management, and developing people into bigger roles.

• Proven ownership of an IT function through rapid growth. You've scaled systems and process ahead of headcount, not behind it.

• Deep technical expertise across identity (Okta or comparable), Microsoft 365 and Google Workspace, MDM at fleet scale, and corporate networking.

• Experience as a named control owner in a regulated environment — HIPAA, SOC 2, or HITRUST — including sitting across the table from auditors.

• Budget ownership and vendor negotiation experience, with the financial fluency to frame a risk or a funding ask so a CFO can act on it.

• Workplace or facilities exposure — buildouts, moves, physical security, or lease management — or a genuine appetite to own it and learn quickly.

• Willingness to stay close to the work. This is a leadership role at a company where the director still unblocks a broken demo when it matters.

• Education: Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent experience. We weigh demonstrated ability over credentials.

Nice to Have

• Healthcare, life sciences, or another environment handling sensitive personal data at scale.

• IT integration of an acquisition, or standing up a function's first access governance or asset management program.

• Automation depth (Python, Bash, PowerShell) and experience managing devices and infrastructure as code.

• Certifications such as Okta Certified Administrator, Microsoft 365 Enterprise Administrator, Jamf, CISM, CISSP, or ITIL.