Director of IT and Workplace

The Role
We've grown to roughly 265 people working onsite from our Menlo Park headquarters, supported by a large network of remote U.S.-licensed clinicians — and part of the Series C is earmarked for acquisitions. The systems and the spaces holding all of that together were built for a much smaller company. We're hiring a Director of IT & Workplace to own them properly.
You'll own two halves of the same problem: the employee technology platform — identity, endpoints, networking, the SaaS portfolio, and our IT security posture — and the physical environment the company runs on, from space planning and physical security to the AV that customer demos and all-hands depend on. You'll inherit a small, capable team and be accountable for leveling it up. You'll be the named owner for IT controls in our HIPAA and SOC 2 programs, you'll own the IT and workplace budget, and when we acquire a company, you'll be the one integrating it.

Our Environment
· Identity and access: Okta for SSO, MFA, and lifecycle provisioning.

• Productivity: Microsoft 365 and Google Workspace, both in active use across the company.

• Endpoints: a Mac-primary fleet with Windows machines alongside it, managed through MDM. VDIs included.

• Internal systems: IRU, plus a growing portfolio of internal and third-party SaaS applications.

• Workplace: a Palo Alto headquarters with conference room AV and access control, plus a distributed clinician and staff population.

What You'll Do
Strategy, budget, and team
· Own a multi-year IT and workplace roadmap tied to the hiring plan, and bring it to leadership with clear tradeoffs and funding asks.

• Own the IT and workplace operating and capital budget: forecast it, defend it in planning cycles, and continuously rationalize license, vendor, and facilities spend.

• Lead, coach, and grow the existing team — set clear expectations, run honest performance conversations, hire as scope deepens, and build career paths that keep strong people.

• Define and publish service levels for ticket response, uptime, onboarding readiness, and workplace turnaround, and report against them to the executive team.

Technology and infrastructure
· Own the identity platform: SSO, MFA, automated joiner-mover-leaver provisioning in Okta, and access governance across every connected application.

• Own the endpoint fleet and the SaaS portfolio — Microsoft 365, Google Workspace, IRU, and a long tail of business applications — with enforced MDM baselines for encryption, patching, and configuration.

• Own network and connectivity for the headquarters and the remote workforce, with redundancy appropriate to a company our customers depend on.

• Replace manual provisioning, access reviews, and device setup with scripted, auditable workflows.

• Lead major programs end to end: platform migrations, upgrades, office buildouts, and the IT and workplace integration of acquired companies.

Security, compliance, and risk
· Serve as the accountable owner for IT controls in our HIPAA, SOC 2, and customer security review programs, including evidence collection and audit response.

• Enforce least privilege across the environment and run recurring access certifications with documented outcomes.

• Partner with Security on incident response and vulnerability remediation, and with Legal on data handling, retention, and discovery requests.

• Own business continuity and disaster recovery for corporate systems — write the plans, test them, and fix what the tests expose.

• Treat protected health information and confidential data with the care our customers and their patients expect. This is non-negotiable in everything we do.

Workplace and facilities
· Own day-to-day operations of the headquarters, and lead space planning and buildouts against a hiring plan that keeps moving.

• Manage physical security — access control and badging, visitor management, cameras, and emergency preparedness — aligned with our compliance obligations.

• Own conference room and event AV, including all-hands and customer visits, to a standard where the technology is never the story.

• Support remote clinicians and staff with reliable equipment logistics, home office standards, and consistent service regardless of location.

• Manage facilities, AV, security, and food vendors, plus landlord and lease matters, in partnership with Finance and Legal.

What You'll Bring
· 8+ years in IT, spanning hands-on administration or engineering and progressively senior ownership. You've done the work you'll now be leading.

• 3+ years managing IT or workplace teams, including hiring, performance management, and developing people into bigger roles.

• Proven ownership of an IT function through rapid growth. You've scaled systems and process ahead of headcount, not behind it.

• Deep technical expertise across identity (Okta or comparable), Microsoft 365 and Google Workspace, MDM at fleet scale, and corporate networking.

• Experience as a named control owner in a regulated environment — HIPAA, SOC 2, or HITRUST — including sitting across the table from auditors.

• Budget ownership and vendor negotiation experience, with the financial fluency to frame a risk or a funding ask so a CFO can act on it.

• Workplace or facilities exposure — buildouts, moves, physical security, or lease management — or a genuine appetite to own it and learn quickly.

• Willingness to stay close to the work. This is a leadership role at a company where the director still unblocks a broken demo when it matters.

• Education: Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent experience. We weigh demonstrated ability over credentials.

Nice to Have
· Healthcare, life sciences, or another environment handling sensitive personal data at scale.

• IT integration of an acquisition, or standing up a function's first access governance or asset management program.

• Automation depth (Python, Bash, PowerShell) and experience managing devices and infrastructure as code.

• Certifications such as Okta Certified Administrator, Microsoft 365 Enterprise Administrator, Jamf, CISM, CISSP, or ITIL.

Why Join Hippocratic AI
Reinvent healthcare with AI that puts safety first. We’re building the world’s first healthcare‑only, safety‑focused LLM — a breakthrough platform designed to transform patient outcomes at a global scale. This is category creation.
Work with the people shaping the future. Hippocratic AI was co‑founded by CEO Munjal Shah and a team of physicians, hospital leaders, AI pioneers, and researchers from institutions like El Camino Health, Johns Hopkins, Washington University in St. Louis, Stanford, Google, Meta, Microsoft, and NVIDIA.
Backed by the world’s leading healthcare and AI investors. We recently raised a $126M Series C at a $3.5B valuation, led by Avenir Growth, bringing total funding to $404M with participation from CapitalG, General Catalyst, a16z, Kleiner Perkins, Premji Invest, UHS, Cincinnati Children’s, WellSpan Health, John Doerr, Rick Klausner, and others.
Build alongside the best in healthcare and AI. Join experts who’ve spent their careers improving care, advancing science, and building world‑changing technologies — ensuring our platform is powerful, trusted, and truly transformative.
Equal Opportunity
Hippocratic AI is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, national origin, sex, age, disability, sexual orientation, gender identity or expression, genetic information, military or veteran status, or any other characteristic protected by applicable law. We are committed to building a team that reflects the patients we serve. We actively encourage applications from candidates of all backgrounds. If you require accommodations during the hiring process, please contact people@hippocraticai.com.
Please be aware of recruitment scams impersonating Hippocratic AI. All recruiting communication will come from @hippocraticai.com email addresses. We will never request payment or sensitive personal information during the hiring process.

Please mention the word **SPRIGHTLY** and tag RMTIxLjIzMS4xNzEuMTc0 when applying to show you read the job post completely (#RMTIxLjIzMS4xNzEuMTc0). This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.