IT Engineer

Job description

## **Health can’t wait**. Not for symptoms to get worse. Not for a six‑month appointment. Not for a system to catch up. But that’s exactly how healthcare works today. You wait, until you can’t. Alan exists to end the wait. Health is a universal right, and we believe this right can only become real when it’s coupled with prevention. We need to stop treating health as something we repair and start treating it as something we build, every day. It’s not solely a question of willpower. It’s the healthcare system itself that needs to work for everyone, in a sustainable way. So we are building the **new standard in prevention insurance.** Alan is the first company that integrates insurance, prevention, and care into a single, acclaimed user experience. We are on an incredible journey to build a **global leading company, with a** [**unique culture**](https://alan.com/en/careers). We already partner with 40K+ companies of all sizes, serving more than 1M+ members, and have reached €800M+ in ARR. Prevention as the new norm. That's what we're building with our team of 800+ people. If it speaks to you: we're hiring across France, Spain, Belgium, and Canada. And beyond. # **Mission** Alan is scaling internationally (800+ employees, 100+ healthcare professionals, 5+ countries) and needs IT Engineers to build and own the internal technology platform every Alaner works on: identity and provisioning, endpoint and SaaS security, the tooling behind our clinics, and the automation that keeps IT from scaling linearly with headcount. The scope below is what the team owns, not a checklist for one person. You'll be staffed on one or two of these areas at a time, according to your strengths and interests, and it will evolve through time based on company needs and personal appetite. # **Scope** ### **⚙️ Platform & automation** - Own and extend automations on Alan Home, our internal provisioning engine - Maintain, extend and improve helpdesk automation, SaaS provisioning flows, and onboarding/offboarding pipelines - Own the meeting room AV and room-booking platform as a product, replicable across offices ### **🔑 Identity & access** - Own the IT side of the employee lifecycle (onboarding, offboarding, mobility between jobs and countries) across Google Workspace, SSO/SAML and our SaaS ecosystem. - Grow our role-based access model: extend it to more tools and refine the permission groups, so access is granted by role rather than case by case - Make employee lifecycle events reliable, fast and auditable end-to-end - Own access reviews and least-privilege models; produce and maintain the evidence our auditors rely on - Own SaaS procurement and license management: vendor relationships, renewals, and cost optimization across our stack ### **🔒 Endpoint & SaaS security** - Own the Mac fleet in Kandji: enrollment at scale, role-based blueprints, fleet compliance - Cloudflare WARP, SaaS security controls - Maintain and strengthen our ISO 27001 certification and drive ACPR and pentest remediation on the endpoint and platform scope ### **🩺 Health Professionals IT** - The IT layer behind Alan's clinics: practitioner tooling, equipment, access - Role and permission automation for healthcare professionals, and their support and escalation process ### **🌍 Internationalisation** - Make international expansion something IT accelerates, not something it slows down: a repeatable process where every new market (Canada, KSA, Armenia...) launches on our standard stack from day one - Bring acquired entities onto that same platform # **Milestones** **First 3 months** - Acquire technical knowledge on Alan's platform: Alan Home, Google Workspace/SSO, Kandji, Cloudflare WARP - Take one project end-to-end and ship a first increment - Join the IT oncall team as technical escalation **First 6 months** - Own a workstream end-to-end, with an IT Ops teammate working alongside you - Deliver one automation or hardening initiative end-to-end - Take up documentation and automation on your scope and reduce significantly the bus factor on it - Mentor IT teammates on your core expertise **First year** - Deliver measurable IT toil reduction on your scope - Set the technical standards on your domain: how we build, document and review it - Build strong cross-functional partnerships (Engineering, Security, Workplace, Clinic, People, Audit) - Contribute to hiring and onboarding new teammates **3 years** - Lead major projects end-to-end across several communities - Be the reference the team relies on across at least two domains - Mentor the IT team and beyond, and scale IT without a linear increase in manual work As the community grows, there is room to take on more responsibility: leading a crew, owning cross-community projects, mentoring, hiring. # **What we're looking for** **Must-have - Technical/hard skills:** - **4-5+ years in IT engineering, platform, systems or corporate engineering**, with real ownership of production-facing systems - **Depth in at least one area** (platform & automation, identity, endpoint & security) **and demonstrated range beyond it.** - **You write code:** not necessarily as a full-time software engineer, but Python, APIs and pull requests in a shared repo should feel normal - **Structured problem-solving:** diagnoses methodically, asks the right clarifying questions, thinks about failure modes and rollback - **Comfort with regulated environments:** health data, ACPR, ISO 27001, HDS - **Automation & AI appetite**: uses AI tools smartly to accelerate their own delivery, with an instinct for what should be automated or delegated to AI rather than repeated **Must-have - Behavioral / soft skills:** - **Ownership & autonomy:** drives topics forward without hand-holding, including when they cross into someone else's perimeter - **Written communication:** Alan is written-first; decisions get argued in public documents and challenged by people outside your team - **Pragmatic judgment:** balances "perfect" vs. "good enough", decides with incomplete information - **Documentation culture:** reduces bus factor through clear documentation and knowledge sharing **Nice-to-have skills / Bonus points if you have:** - Experience with an internal provisioning or IdP-driven automation platform - Kandji or another MDM at scale - Cloudflare Zero Trust / WARP, Datadog - Audit remediation experience (ISO 27001, HDS) - Multi-country rollouts, or IT integration after an acquisition - Having mentored, coached or led a (small) crew - Health or healthtech ecosystem familiarity **Languages:** Fluent English & Professional French