Director of IT and Workplace

The Role We've grown to roughly 265 people working onsite from our Menlo Park headquarters, supported by a large network of remote U.S.-licensed clinicians — and part of the Series C is earmarked for acquisitions. The systems and the spaces holding all of that together were built for a much smaller company. We're hiring a Director of IT & Workplace to own them properly. You'll own two halves of the same problem: the employee technology platform — identity, endpoints, networking, the SaaS portfolio, and our IT security posture — and the physical environment the company runs on, from space planning and physical security to the AV that customer demos and all-hands depend on. You'll inherit a small, capable team and be accountable for leveling it up. You'll be the named owner for IT controls in our HIPAA and SOC 2 programs, you'll own the IT and workplace budget, and when we acquire a company, you'll be the one integrating it. Our Environment • Identity and access: Okta for SSO, MFA, and lifecycle provisioning. • Productivity: Microsoft 365 and Google Workspace, both in active use across the company. • Endpoints: a Mac-primary fleet with Windows machines alongside it, managed through MDM. VDIs included. • Internal systems: IRU, plus a growing portfolio of internal and third-party SaaS applications. • Workplace: a Palo Alto headquarters with conference room AV and access control, plus a distributed clinician and staff population. What You'll Do Strategy, budget, and team • Own a multi-year IT and workplace roadmap tied to the hiring plan, and bring it to leadership with clear tradeoffs and funding asks. • Own the IT and workplace operating and capital budget: forecast it, defend it in planning cycles, and continuously rationalize license, vendor, and facilities spend. • Lead, coach, and grow the existing team — set clear expectations, run honest performance conversations, hire as scope deepens, and build career paths that keep strong people. • Define and publish service levels for ticket response, uptime, onboarding readiness, and workplace turnaround, and report against them to the executive team. Technology and infrastructure • Own the identity platform: SSO, MFA, automated joiner-mover-leaver provisioning in Okta, and access governance across every connected application. • Own the endpoint fleet and the SaaS portfolio — Microsoft 365, Google Workspace, IRU, and a long tail of business applications — with enforced MDM baselines for encryption, patching, and configuration. • Own network and connectivity for the headquarters and the remote workforce, with redundancy appropriate to a company our customers depend on. • Replace manual provisioning, access reviews, and device setup with scripted, auditable workflows. • Lead major programs end to end: platform migrations, upgrades, office buildouts, and the IT and workplace integration of acquired companies. Security, compliance, and risk • Serve as the accountable owner for IT controls in our HIPAA, SOC 2, and customer security review programs, including evidence collection and audit response. • Enforce least privilege across the environment and run recurring access certifications with documented outcomes. • Partner with Security on incident response and vulnerability remediation, and with Legal on data handling, retention, and discovery requests. • Own business continuity and disaster recovery for corporate systems — write the plans, test them, and fix what the tests expose. • Treat protected health information and confidential data with the care our customers and their patients expect. This is non-negotiable in everything we do. Workplace and facilities • Own day-to-day operations of the headquarters, and lead space planning and buildouts against a