Security Architect

Vida is a virtual, personalized obesity care provider that uses evidence-based treatment to help patients manage obesity and related conditions like diabetes, high blood pressure, anxiety and depression. Vida's team of Obesity Medicine-Certified Physicians, Registered Dietitians, Expert Coaches and Licensed Therapists takes a whole-person approach to care, helping people lose weight, reduce stress and improve their overall health.

By combining advanced technology with top-notch healthcare providers, Vida is breaking down the barriers that have historically kept people from getting the best care. It's trusted by Fortune 100 companies, major national payers and large providers to enable their employees to live their healthiest lives.

The Sr. Director of Engineering Operations & Security will lead the organization responsible for how Vida builds, ships, secures, and operates from the test suite and the deploy pipeline, through our cloud infrastructure and corporate IT estate, out to the client data integrations and escalation paths where our enterprise customers feel every failure directly. When a member's eligibility file doesn't land, your team owns it. When a release regresses, your team's quality gates should have caught it. When a health plan sends a security questionnaire, you're the person who answers it. You will also serve as Vida's Security Officer, accountable for our information security program in a business where the trust of payers, employers, and members is inseparable from the product itself.

Responsibilities:

Own test strategy and automation, CI/CD, infrastructure as code, cloud platform, and developer environments.
Set and enforce the quality gates and deployment practices that let product engineering move quickly without breaking things.
Drive measurable improvement in developer productivity, build and deploy reliability, and time to recovery.
Own corporate IT, identity and access management, endpoint and device management, and SaaS and vendor security.
Serve as Vida's Security Officer with named accountability for the information security program: policy ownership, risk assessment, security awareness, vulnerability management, and incident response.
Act as the executive point of contact for customer security diligence, questionnaires, and audit activity, and make that process a fast, unremarkable part of the sales cycle.
Build and lead the security roadmap, and hire the security depth the program requires.
Own client data operations and eligibility and data feed operations end to end, including their reliability, monitoring, and automation.
Own Tier 2/3 technical escalations from Customer Success, with clear SLAs and a durable prioritization partnership with CS leadership.
Transition this team from a support-shaped function into an engineering-shaped one: better tooling, engineering standards, meaningful automation, and a real career ladder for the people on it.
Own incident management for customer-visible issues, including on-call rotations, escalation paths, incident command, and the postmortem discipline that keeps the same incident from recurring.
Establish one operating standard across all of your teams including shared on-call practices, a single incident process, common definitions of healthy, and metrics that leadership actually reviews.
Define and report the small set of reliability and security measures that give the company a shared language for system health.
Develop the Managers and Senior Engineers you inherit, assess the bench honestly, and hire to fill the gaps.
Land the Production Operations transition into Engineering without dropping a customer commitment.
Stand up the SLA and prioritization agreement with Customer Success, and reduce the team's manual workload enough that its capacity isn't capped by toil.
Take clear ownership of the security program, publish a prioritized roadmap with real dates, and get current on our posture and gaps.
Unify on-call and incident practice across the organization.
Additional resposibilities as needed.

Qualifications

Bachelor's Degree at a minimum.
10+ years in software engineering, including 4+ years leading multiple teams and developing Engineering Managers.
Direct ownership of DevOps, SRE, platform, or engineering operations at meaningful scale, including CI/CD, infrastructure as code, and cloud infrastructure (AWS or GCP).
Experience owning a customer-facing production operations, integrations, or technical support function with real SLAs and real consequences when they slip.
Demonstrated track record running incident management and on-call for production systems, including leading incidents and driving fixes that hold.
Experience operating inside a regulated environment: HIPAA, SOC 2, HITRUST, PCI, or comparable, with enough fluency to take ownership of a security program with appropriate support around you.
Proven ability to absorb and restructure a team inherited from another part of the business, including the change management required to make it stick.
Comfort with genuine breadth across quality engineering, infrastructure, corporate IT, security, and customer-facing operations

Preferred:

Prior experience as a designated Security Officer, Information Security Officer, or equivalent.
Technical ownership of a SOC 2 Type II or HITRUST certification effort.
Healthcare data integration experience with eligibility files, 834/837, HL7, FHIR, claims, or comparable enterprise data exchange.
Quality engineering leadership with experience building a test automation strategy rather than inheriting one.
Corporate IT ownership at a company scaling past several hundred employees.
Experience in virtual care, digital health, or another environment where clinical and enterprise requirements both apply.

Vida is proud to be an Equal Employment Opportunity and Affirmative Action employer.

Diversity is more than a commitment at Vida—it is the foundation of what we do. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, religion, gender, gender identity or expression, sexual orientation, marital status, national origin, genetics, disability, age, or Veteran status. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.

We seek to recruit, develop and retain the most talented people from a diverse candidate pool. We don’t just accept differences — we celebrate them, we support them, and we thrive on them for the benefit of our employees, our platform and those we serve. Vida is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures.

We do not accept unsolicited assistance from any headhunters or recruitment firms for any of our job openings. All resumes or profiles submitted by search firms to any employee at Vida in any form without a valid, signed search agreement in place for the specific position will be deemed the sole property of Vida. No fee will be paid in the event the candidate is hired by Vida as a result of the unsolicited referral.

**Vida is authorized to do business in many, but not all, states. If you are not located in or able to work from a state where Vida is registered, you will not be eligible for employment. Please speak with your recruiter to learn more about where Vida is registered.

Please note: Applicants must be authorized to work in the U.S. as Vida is unable to sponsor work visas for any position.

All Vida Employees must reside in/be able to work from the U.S.- international work is prohibited. Job postings at Vida will remain open through end of year, until filled.

Originally posted on Himalayas

Job Description

ABOUT US

At Vida, we help people get better- and we're helping the healthcare system get better, too.

Responsibilities:

Own test strategy and automation, CI/CD, infrastructure as code, cloud platform, and developer environments.
Set and enforce the quality gates and deployment practices that let product engineering move quickly without breaking things.
Drive measurable improvement in developer productivity, build and deploy reliability, and time to recovery.
Own corporate IT, identity and access management, endpoint and device management, and SaaS and vendor security.
Serve as Vida's Security Officer with named accountability for the information security program: policy ownership, risk assessment, security awareness, vulnerability management, and incident response.
Act as the executive point of contact for customer security diligence, questionnaires, and audit activity, and make that process a fast, unremarkable part of the sales cycle.
Build and lead the security roadmap, and hire the security depth the program requires.
Own client data operations and eligibility and data feed operations end to end, including their reliability, monitoring, and automation.
Own Tier 2/3 technical escalations from Customer Success, with clear SLAs and a durable prioritization partnership with CS leadership.
Transition this team from a support-shaped function into an engineering-shaped one: better tooling, engineering standards, meaningful automation, and a real career ladder for the people on it.
Own incident management for customer-visible issues, including on-call rotations, escalation paths, incident command, and the postmortem discipline that keeps the same incident from recurring.
Establish one operating standard across all of your teams including shared on-call practices, a single incident process, common definitions of healthy, and metrics that leadership actually reviews.
Define and report the small set of reliability and security measures that give the company a shared language for system health.
Develop the Managers and Senior Engineers you inherit, assess the bench honestly, and hire to fill the gaps.
Land the Production Operations transition into Engineering without dropping a customer commitment.
Stand up the SLA and prioritization agreement with Customer Success, and reduce the team's manual workload enough that its capacity isn't capped by toil.
Take clear ownership of the security program, publish a prioritized roadmap with real dates, and get current on our posture and gaps.
Unify on-call and incident practice across the organization.
Additional resposibilities as needed.

Qualifications

Bachelor's Degree at a minimum.
10+ years in software engineering, including 4+ years leading multiple teams and developing Engineering Managers.
Direct ownership of DevOps, SRE, platform, or engineering operations at meaningful scale, including CI/CD, infrastructure as code, and cloud infrastructure (AWS or GCP).
Experience owning a customer-facing production operations, integrations, or technical support function with real SLAs and real consequences when they slip.
Demonstrated track record running incident management and on-call for production systems, including leading incidents and driving fixes that hold.
Experience operating inside a regulated environment: HIPAA, SOC 2, HITRUST, PCI, or comparable, with enough fluency to take ownership of a security program with appropriate support around you.
Proven ability to absorb and restructure a team inherited from another part of the business, including the change management required to make it stick.
Comfort with genuine breadth across quality engineering, infrastructure, corporate IT, security, and customer-facing operations

Preferred:

Prior experience as a designated Security Officer, Information Security Officer, or equivalent.
Technical ownership of a SOC 2 Type II or HITRUST certification effort.
Healthcare data integration experience with eligibility files, 834/837, HL7, FHIR, claims, or comparable enterprise data exchange.
Quality engineering leadership with experience building a test automation strategy rather than inheriting one.
Corporate IT ownership at a company scaling past several hundred employees.
Experience in virtual care, digital health, or another environment where clinical and enterprise requirements both apply.

Vida is proud to be an Equal Employment Opportunity and Affirmative Action employer.

Please note: Applicants must be authorized to work in the U.S. as Vida is unable to sponsor work visas for any position.

All Vida Employees must reside in/be able to work from the U.S.- international work is prohibited. Job postings at Vida will remain open through end of year, until filled.

Originally posted on Himalayas

Job Description

ABOUT US

At Vida, we help people get better- and we're helping the healthcare system get better, too.

Responsibilities:

Own test strategy and automation, CI/CD, infrastructure as code, cloud platform, and developer environments.
Set and enforce the quality gates and deployment practices that let product engineering move quickly without breaking things.
Drive measurable improvement in developer productivity, build and deploy reliability, and time to recovery.
Own corporate IT, identity and access management, endpoint and device management, and SaaS and vendor security.
Serve as Vida's Security Officer with named accountability for the information security program: policy ownership, risk assessment, security awareness, vulnerability management, and incident response.
Act as the executive point of contact for customer security diligence, questionnaires, and audit activity, and make that process a fast, unremarkable part of the sales cycle.
Build and lead the security roadmap, and hire the security depth the program requires.
Own client data operations and eligibility and data feed operations end to end, including their reliability, monitoring, and automation.
Own Tier 2/3 technical escalations from Customer Success, with clear SLAs and a durable prioritization partnership with CS leadership.
Transition this team from a support-shaped function into an engineering-shaped one: better tooling, engineering standards, meaningful automation, and a real career ladder for the people on it.
Own incident management for customer-visible issues, including on-call rotations, escalation paths, incident command, and the postmortem discipline that keeps the same incident from recurring.
Establish one operating standard across all of your teams including shared on-call practices, a single incident process, common definitions of healthy, and metrics that leadership actually reviews.
Define and report the small set of reliability and security measures that give the company a shared language for system health.
Develop the Managers and Senior Engineers you inherit, assess the bench honestly, and hire to fill the gaps.
Land the Production Operations transition into Engineering without dropping a customer commitment.
Stand up the SLA and prioritization agreement with Customer Success, and reduce the team's manual workload enough that its capacity isn't capped by toil.
Take clear ownership of the security program, publish a prioritized roadmap with real dates, and get current on our posture and gaps.
Unify on-call and incident practice across the organization.
Additional resposibilities as needed.

Qualifications

Bachelor's Degree at a minimum.
10+ years in software engineering, including 4+ years leading multiple teams and developing Engineering Managers.
Direct ownership of DevOps, SRE, platform, or engineering operations at meaningful scale, including CI/CD, infrastructure as code, and cloud infrastructure (AWS or GCP).
Experience owning a customer-facing production operations, integrations, or technical support function with real SLAs and real consequences when they slip.
Demonstrated track record running incident management and on-call for production systems, including leading incidents and driving fixes that hold.
Experience operating inside a regulated environment: HIPAA, SOC 2, HITRUST, PCI, or comparable, with enough fluency to take ownership of a security program with appropriate support around you.
Proven ability to absorb and restructure a team inherited from another part of the business, including the change management required to make it stick.
Comfort with genuine breadth across quality engineering, infrastructure, corporate IT, security, and customer-facing operations

Preferred:

Prior experience as a designated Security Officer, Information Security Officer, or equivalent.
Technical ownership of a SOC 2 Type II or HITRUST certification effort.
Healthcare data integration experience with eligibility files, 834/837, HL7, FHIR, claims, or comparable enterprise data exchange.
Quality engineering leadership with experience building a test automation strategy rather than inheriting one.
Corporate IT ownership at a company scaling past several hundred employees.
Experience in virtual care, digital health, or another environment where clinical and enterprise requirements both apply.

Vida is proud to be an Equal Employment Opportunity and Affirmative Action employer.

Please note: Applicants must be authorized to work in the U.S. as Vida is unable to sponsor work visas for any position.

All Vida Employees must reside in/be able to work from the U.S.- international work is prohibited. Job postings at Vida will remain open through end of year, until filled.

Originally posted on Himalayas

Job Description

ABOUT US

At Vida, we help people get better- and we're helping the healthcare system get better, too.

Responsibilities:

Own test strategy and automation, CI/CD, infrastructure as code, cloud platform, and developer environments.
Set and enforce the quality gates and deployment practices that let product engineering move quickly without breaking things.
Drive measurable improvement in developer productivity, build and deploy reliability, and time to recovery.
Own corporate IT, identity and access management, endpoint and device management, and SaaS and vendor security.
Serve as Vida's Security Officer with named accountability for the information security program: policy ownership, risk assessment, security awareness, vulnerability management, and incident response.
Act as the executive point of contact for customer security diligence, questionnaires, and audit activity, and make that process a fast, unremarkable part of the sales cycle.
Build and lead the security roadmap, and hire the security depth the program requires.
Own client data operations and eligibility and data feed operations end to end, including their reliability, monitoring, and automation.
Own Tier 2/3 technical escalations from Customer Success, with clear SLAs and a durable prioritization partnership with CS leadership.
Transition this team from a support-shaped function into an engineering-shaped one: better tooling, engineering standards, meaningful automation, and a real career ladder for the people on it.
Own incident management for customer-visible issues, including on-call rotations, escalation paths, incident command, and the postmortem discipline that keeps the same incident from recurring.
Establish one operating standard across all of your teams including shared on-call practices, a single incident process, common definitions of healthy, and metrics that leadership actually reviews.
Define and report the small set of reliability and security measures that give the company a shared language for system health.
Develop the Managers and Senior Engineers you inherit, assess the bench honestly, and hire to fill the gaps.
Land the Production Operations transition into Engineering without dropping a customer commitment.
Stand up the SLA and prioritization agreement with Customer Success, and reduce the team's manual workload enough that its capacity isn't capped by toil.
Take clear ownership of the security program, publish a prioritized roadmap with real dates, and get current on our posture and gaps.
Unify on-call and incident practice across the organization.
Additional resposibilities as needed.

Qualifications

Bachelor's Degree at a minimum.
10+ years in software engineering, including 4+ years leading multiple teams and developing Engineering Managers.
Direct ownership of DevOps, SRE, platform, or engineering operations at meaningful scale, including CI/CD, infrastructure as code, and cloud infrastructure (AWS or GCP).
Experience owning a customer-facing production operations, integrations, or technical support function with real SLAs and real consequences when they slip.
Demonstrated track record running incident management and on-call for production systems, including leading incidents and driving fixes that hold.
Experience operating inside a regulated environment: HIPAA, SOC 2, HITRUST, PCI, or comparable, with enough fluency to take ownership of a security program with appropriate support around you.
Proven ability to absorb and restructure a team inherited from another part of the business, including the change management required to make it stick.
Comfort with genuine breadth across quality engineering, infrastructure, corporate IT, security, and customer-facing operations

Preferred:

Prior experience as a designated Security Officer, Information Security Officer, or equivalent.
Technical ownership of a SOC 2 Type II or HITRUST certification effort.
Healthcare data integration experience with eligibility files, 834/837, HL7, FHIR, claims, or comparable enterprise data exchange.
Quality engineering leadership with experience building a test automation strategy rather than inheriting one.
Corporate IT ownership at a company scaling past several hundred employees.
Experience in virtual care, digital health, or another environment where clinical and enterprise requirements both apply.

Vida is proud to be an Equal Employment Opportunity and Affirmative Action employer.

Please note: Applicants must be authorized to work in the U.S. as Vida is unable to sponsor work visas for any position.

All Vida Employees must reside in/be able to work from the U.S.- international work is prohibited. Job postings at Vida will remain open through end of year, until filled.

Originally posted on Himalayas