IT Systems & Security Operations Specialist

About CertifyOS

CertifyOS is building the data infrastructure that powers modern healthcare.

Today, healthcare organizations rely on fragmented and outdated provider data. This creates unnecessary administrative work, regulatory risk, and higher costs across the system. We’re solving that problem.

Our API-first platform automates provider licensing, enrollment, credentialing, and network monitoring by connecting directly to hundreds of primary data sources. We help healthcare organizations maintain accurate, compliant, and reliable provider networks at scale.

Our vision is simple: One API. One provider ID. Frictionless provider data.

We’re backed by leading investors and built by a team with deep experience in provider data systems. At CertifyOS, we value authenticity, accountability, collaboration, results, and openness to feedback. We’re building a high-ownership team focused on solving real infrastructure problems that impact millions of patients.

ROLE OVERVIEW

CertifyOS is looking for a versatile IT Systems & Security Operations Specialist to bridge the gap between technical infrastructure management and security compliance. This mid-senior role is designed for a technical "all-rounder" who can manage L1 helpdesk escalations, lead complex system configurations, and ensure our organization remains audit-ready.

As a critical member of our global infrastructure team, you will move beyond standard ticket resolution to focus on system improvement, automation, and advanced security governance.

Work Timing: Rotational shifts (Including Night Shifts)

KEY RESPONSIBILITIES

• ADVANCED SYSTEMS CONFIGURATION & IMPROVEMENT
• System Architecture: Lead senior-level configuration and optimization of core SaaS platforms, including Google Workspace, JumpCloud (Identity Management), and Slack.
• SSO & IAM Governance: Architect and maintain Single Sign-On (SSO) integrations and Identity and Access Management (IAM) policies across all enterprise tooling.
• System Improvements: Proactively identify bottlenecks in our current IT stack and implement technical solutions to enhance performance and user experience.
• SECURITY OPERATIONS & COMPLIANCE AUDITS
• Security Frameworks: Proactively improving IT, Cloud, and Data security frameworks to mitigate risks.
• User Access Audits: Conduct regular, comprehensive audits of user permissions and system logs to ensure compliance with the principle of least privilege. Proactively enhance IT, Cloud, and Data security frameworks to mitigate risks.
• Audits & Monitoring: Conducting regular user access audits and monitoring security dashboards to lead technical vulnerability remediation.
• Vulnerability Remediation: Monitor security dashboards (EDR/MDM) and lead the technical remediation of identified vulnerabilities across the endpoint fleet.
• IT OPERATIONS, LIFECYCLE MANAGEMENT & SUPPORT
• Escalation Management: Serve as the primary senior technical resource for L1 Helpdesk analysts, resolving complex escalations that require deeper system access.
• Employee Lifecycle Management: Manage the full employee lifecycle, including ownership of end-to-end onboarding, offboarding, and asset retrieval processes, coordinating seamlessly with stakeholders.
• SECURITY, COMPLIANCE & CLIENT DUE DILIGENCE
• Client Inquiries: Lead responses to customer security questionnaires, RFPs, and TPRA/vendor security reviews, ensuring consistency and accuracy.
• Due Diligence: Serve as a key point of contact for client-facing security and compliance inquiries during due diligence processes.
• Audit Readiness: Support the Security team in collecting and organizing evidence for SOC 2, HIPAA, and HITRUST audit readiness.
• PROCESS AUTOMATION
• Workflow Engineering: Design and implement automation scripts (Python/Bash) or low-code workflows to streamline repetitive IT tasks.
• Onboarding Automation: Continuously improve the automated provisioning process to ensure new hires are fully productive within their first 24 hours.
• PERFORMANCE, REPORTING & OKRS
• Own and maintain weekly and monthly IT/Security OKRs, including tracking progress, reporting metrics, and taking full initiative ownership.

REQUIRED QUALIFICATIONS

• Experience: 5–8 years of progressive experience in IT Operations and Security.
• Technical Proficiency: Advanced knowledge of Google Workspace administration, JumpCloud (or similar IDP/MDM), and GCP IAM.
• Security Mindset: Deep experience in security frameworks (HIPAA/HITRUST/SOC 2), including hands-on experience supporting and maintaining SOC 2 audits.
• Compliance Mastery: Deep hands-on experience supporting and maintaining SOC 2 compliance/audit readiness.
• Automation Skills: Practical experience with scripting languages (Python) or automation tools to drive operational efficiency.
• Flexibility: Must be comfortable working in a rotational shift environment, including night shifts, to support our global 24/7 operations.

PREFERRED QUALIFICATIONS

• Relevant certifications (e.g., CompTIA Security+, Google Professional Workspace Administrator).
• Previous experience in a high-growth startup or the healthcare technology industry.
• Strong communication skills with the ability to report technical progress directly to executive leadership.

Benefits of Working at Certify

At Certify, we’re building with intention and taking care of the people doing the work.

Your well-being matters to us. We provide 100% coverage of health, dental, and vision insurance premiums for employees. Our US-based team benefits from unlimited PTO, with at least two weeks off each year to recharge. In India, employees are supported with health insurance, statutory leave benefits, and additional wellness (menstrual) leave for women.

We are an equal opportunity employer committed to building an inclusive environment where everyone feels valued and empowered to do their best work, and we welcome applicants from all backgrounds and experiences.

If you require reasonable accommodations during the application process, please contact recruiting@certifyos.com.

We are also committed to pay transparency and foster an open culture where compensation conversations are encouraged and respected.