Lynd Clinical is seeking a hands-on, strategically minded Director of Infrastructure to lead IT, cloud infrastructure, security operations, and DevOps. This role combines the breadth of a Director of IT with the technical depth of a DevOps Manager. It will be an individual contributor role with support from vendors, while having an opportunity to influence the direction of the team as we grow.

The successful candidate will build and operate a secure, scalable, compliant technology foundation that enables Lynd Clinical’s clinical, product, operations, and commercial teams to move quickly while protecting sensitive information. They will own infrastructure end to end, from employee technology and identity management to cloud architecture, software delivery, disaster recovery, vendors, and compliance readiness.

What You’ll Do

Infrastructure and Cloud Operations

• Own the reliability, security, performance, availability, and cost management of Lynd Clinical’s cloud and IT infrastructure.
• Establish infrastructure standards, technical documentation, asset inventories, operating procedures, backup, disaster recovery, and business-continuity capabilities.
• Manage cloud providers, managed service providers, security partners, training providers, and technology vendors against service, security, and cost expectations.
• Develop a practical infrastructure roadmap aligned with company growth, product needs, regulatory requirements, and risk priorities.

DevOps and Engineering Enablement

• Lead DevOps practices and tooling in partnership with Engineering, Product, Data, and Quality teams.
• Implement scalable observability capabilities, including monitoring, alerting, logging, tracing, uptime measurement, and post-incident review.

Security, Privacy, and Compliance

• Partner with Regulatory, Legal, and Clinical Operations to implement technical controls suitable for a healthcare and clinical environment.
• Oversee identity and access management, MFA, endpoint security, encryption, vulnerability management, audit logging, backup, and security incident response.
• Support compliance efforts involving HIPAA, SOC 2, HITRUST, ISO 27001, GDPR, and customer or partner security assessments, as applicable.
• Lead or support audit preparation, risk assessments, evidence collection, remediation planning, control testing, and third-party security reviews.
• Translate security and regulatory requirements into practical technology processes that protect the business while enabling execution.

IT Leadership and Business Partnership

• Own core corporate IT services: identity, collaboration tools, endpoints, mobile-device management, SaaS administration, onboarding/offboarding, and end-user support.
• Manage third party IT services providers
• Create a secure, reliable employee technology experience and define policies for access provisioning, devices, data handling, vendor access, and escalation.
• Advise senior leadership on infrastructure risk, cybersecurity posture, resilience, technology investment, compliance readiness, and key operational metrics.
• Support integration of clinical sites with a repeatable, scalable technology merger playbook

What You’ll Bring

Required Qualifications

• 8+ years of progressive experience in infrastructure, cloud operations, IT, security, DevOps, or technical leadership.
• Experience leading both corporate IT and cloud/platform or DevOps capabilities in a growth-stage, technology-enabled, or regulated organization.
• Strong working knowledge of identity and access management, endpoint management, network security, vulnerability management, incident response, and disaster recovery.
• Experience with modern infrastructure and DevOps practices, such as Git-based workflows, Terraform or equivalent tools, containers, observability platforms, and secrets management.
• Proven ability to manage technology vendors, managed service providers, budgets, and business-critical SaaS platforms.
• Strong executive communication skills, with the ability to make technical risks and investment needs understandable to nontechnical stakeholders.

Healthcare, Security, and Compliance Experience

• Experience in healthcare, life sciences, clinical research, digital health, or another regulated environment.
• Working knowledge of HIPAA safeguards and the requirements associated with protecting sensitive health information.
• Experience supporting security or compliance frameworks such as SOC 2, HITRUST, ISO 27001, NIST, GDPR, or customer security assessment programs.
• Experience supporting audits, control implementation, evidence collection, vendor-risk management, or remediation efforts.

Preferred Qualifications

• Relevant degree or equivalent practical experience.
• Certifications such as AWS Solutions Architect, Azure Administrator, CISSP, CISM, CCSP, or ITIL.
• Experience with systems processing clinical, healthcare, laboratory, research, or real-world data.
• Familiarity with regulated software-development practices, electronic-record controls, or 21 CFR Part 11.
• Familiarity with tools such as Kubernetes, Docker, GitHub Actions, GitLab CI/CD, Datadog, Splunk, Grafana, PagerDuty, Okta, Intune, Jamf, or CrowdStrike.