Director of IT and Workplace at Hippocratic AI in Menlo Park, CA

Job description

The Role We've grown to roughly 265 people working onsite from our Menlo Park headquarters, supported by a large network of remote U.S.-licensed clinicians — and part of the Series C is earmarked for acquisitions. The systems and the spaces holding all of that together were built for a much smaller company. We're hiring a Director of IT & Workplace to own them properly. You'll own two halves of the same problem: the employee technology platform — identity, endpoints, networking, the SaaS portfolio, and our IT security posture — and the physical environment the company runs on, from space planning and physical security to the AV that customer demos and all-hands depend on. You'll inherit a small, capable team and be accountable for leveling it up. You'll be the named owner for IT controls in our HIPAA and SOC 2 programs, you'll own the IT and workplace budget, and when we acquire a company, you'll be the one integrating it. Our Environment • Identity and access: Okta for SSO, MFA, and lifecycle provisioning. • Productivity: Microsoft 365 and Google Workspace, both in active use across the company. • Endpoints: a Mac-primary fleet with Windows machines alongside it, managed through MDM. VDIs included. • Internal systems: IRU, plus a growing portfolio of internal and third-party SaaS applications. • Workplace: a Palo Alto headquarters with conference room AV and access control, plus a distributed clinician and staff population. What You'll Do Strategy, budget, and team • Own a multi-year IT and workplace roadmap tied to the hiring plan, and bring it to leadership with clear tradeoffs and funding asks. • Own the IT and workplace operating and capital budget: forecast it, defend it in planning cycles, and continuously rationalize license, vendor, and facilities spend. • Lead, coach, and grow the existing team — set clear expectations, run honest performance conversations, hire as scope deepens, and build career paths that keep strong people. • Define and publish service levels for ticket response, uptime, onboarding readiness, and workplace turnaround, and report against them to the executive team. Technology and infrastructure • Own the identity platform: SSO, MFA, automated joiner-mover-leaver provisioning in Okta, and access governance across every connected application. • Own the endpoint fleet and the SaaS portfolio — Microsoft 365, Google Workspace, IRU, and a long tail of business applications — with enforced MDM baselines for encryption, patching, and configuration. • Own network and connectivity for the headquarters and the remote workforce, with redundancy appropriate to a company our customers depend on. • Replace manual provisioning, access reviews, and device setup with scripted, auditable workflows. • Lead major programs end to end: platform migrations, upgrades, office buildouts, and the IT and workplace integration of acquired companies. Security, compliance, and risk • Serve as the accountable owner for IT controls in our HIPAA, SOC 2, and customer security review programs, including evidence collection and audit response. • Enforce least privilege across the environment and run recurring access certifications with documented outcomes. • Partner with Security on incident response and vulnerability remediation, and with Legal on data handling, retention, and discovery requests. • Own business continuity and disaster recovery for corporate systems — write the plans, test them, and fix what the tests expose. • Treat protected health information and confidential data with the care our customers and their patients expect. This is non-negotiable in everything we do. Workplace and facilities • Own day-to-day operations of the headquarters, and lead space planning and buildouts against a hiring plan that keeps moving. • Manage physical security — access control and badging, visitor management, cameras, and emergency preparedness — aligned with our compliance obligations. • Own conference room and event AV, including all-ha