Senior Director, Engineering Operations & Security

The Sr. Director of Engineering Operations & Security will lead the organization responsible for how Vida builds, ships, secures, and operates from the test suite and the deploy pipeline, through our cloud infrastructure and corporate IT estate, out to the client data integrations and escalation paths where our enterprise customers feel every failure directly. When a member's eligibility file doesn't land, your team owns it. When a release regresses, your team's quality gates should have caught it. When a health plan sends a security questionnaire, you're the person who answers it. You will also serve as Vida's Security Officer, accountable for our information security program in a business where the trust of payers, employers, and members is inseparable from the product itself.

Responsibilities:

• Own test strategy and automation, CI/CD, infrastructure as code, cloud platform, and developer environments.
• Set and enforce the quality gates and deployment practices that let product engineering move quickly without breaking things.
• Drive measurable improvement in developer productivity, build and deploy reliability, and time to recovery.
• Own corporate IT, identity and access management, endpoint and device management, and SaaS and vendor security.
• Serve as Vida's Security Officer with named accountability for the information security program: policy ownership, risk assessment, security awareness, vulnerability management, and incident response.
• Act as the executive point of contact for customer security diligence, questionnaires, and audit activity, and make that process a fast, unremarkable part of the sales cycle.
• Build and lead the security roadmap, and hire the security depth the program requires.
• Own client data operations and eligibility and data feed operations end to end, including their reliability, monitoring, and automation.
• Own Tier 2/3 technical escalations from Customer Success, with clear SLAs and a durable prioritization partnership with CS leadership.
• Transition this team from a support-shaped function into an engineering-shaped one: better tooling, engineering standards, meaningful automation, and a real career ladder for the people on it.
• Own incident management for customer-visible issues, including on-call rotations, escalation paths, incident command, and the postmortem discipline that keeps the same incident from recurring.
• Establish one operating standard across all of your teams including shared on-call practices, a single incident process, common definitions of healthy, and metrics that leadership actually reviews.
• Define and report the small set of reliability and security measures that give the company a shared language for system health.
• Develop the Managers and Senior Engineers you inherit, assess the bench honestly, and hire to fill the gaps.
• Land the Production Operations transition into Engineering without dropping a customer commitment.
• Stand up the SLA and prioritization agreement with Customer Success, and reduce the team's manual workload enough that its capacity isn't capped by toil.
• Take clear ownership of the security program, publish a prioritized roadmap with real dates, and get current on our posture and gaps.
• Unify on-call and incident practice across the organization.
• Additional resposibilities as needed.

Qualifications

• Bachelor's Degree at a minimum.
• 10+ years in software engineering, including 4+ years leading multiple teams and developing Engineering Managers.
• Direct ownership of DevOps, SRE, platform, or engineering operations at meaningful scale, including CI/CD, infrastructure as code, and cloud infrastructure (AWS or GCP).
• Experience owning a customer-facing production operations, integrations, or technical support function with real SLAs and real consequences when they slip.
• Demonstrated track record running incident management and on-call for production systems, including leading incidents and driving fixes that hold.
• Experience operating inside a regulated environment: HIPAA, SOC 2, HITRUST, PCI, or comparable, with enough fluency to take ownership of a security program with appropriate support around you.
• Proven ability to absorb and restructure a team inherited from another part of the business, including the change management required to make it stick.
• Comfort with genuine breadth across quality engineering, infrastructure, corporate IT, security, and customer-facing operations

Preferred:

• Prior experience as a designated Security Officer, Information Security Officer, or equivalent.
• Technical ownership of a SOC 2 Type II or HITRUST certification effort.
• Healthcare data integration experience with eligibility files, 834/837, HL7, FHIR, claims, or comparable enterprise data exchange.
• Quality engineering leadership with experience building a test automation strategy rather than inheriting one.
• Corporate IT ownership at a company scaling past several hundred employees.
• Experience in virtual care, digital health, or another environment where clinical and enterprise requirements both apply.