[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_148":149,"_150":151},"routes/employer-profile.$company_id",{"_11":120,"_13":14,"_15":16,"_17":121,"_19":122,"_21":22},"routes/employer-profile.$company_id.$business_name",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22},"businessInfo",{"_64":91,"_92":22,"_25":26,"_87":88,"_93":94,"_30":31,"_95":96,"_97":22,"_98":-5,"_99":-5,"_100":101,"_102":59,"_89":90,"_28":103,"_104":103,"_105":103,"_106":103,"_70":103,"_80":107,"_108":103,"_109":103,"_110":59,"_111":112,"_113":103},"canonicalUrl","https://www.redballoon.work/employer-profile/33325/zest-health","company_id",33325,"employerProfile",{"_25":26,"_87":88,"_89":90,"_64":91,"_92":22,"_93":94,"_30":31,"_95":96,"_97":22,"_98":-5,"_99":-5,"_100":101,"_102":59,"_28":103,"_104":103,"_105":103,"_106":103,"_70":103,"_80":107,"_108":103,"_109":103,"_110":59,"_111":112,"_113":103,"_114":-7,"_115":-7,"_116":117},"postings",[23,24],"showMore",false,{"_25":26,"_70":71,"_27":59,"_28":29,"_30":31,"_32":72,"_34":73,"_36":74,"_38":75,"_40":76,"_42":77,"_44":78,"_46":79,"_48":49,"_50":51,"_52":53,"_54":55,"_80":81,"_56":57,"_58":59,"_60":82,"_62":83,"_64":84,"_66":22,"_67":85},{"_25":26,"_27":22,"_28":29,"_30":31,"_32":33,"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_62":63,"_64":65,"_66":22,"_67":68},"business_name","Zest Health","city_exists","country_code","US","domain","rb","id","2174764","job_roles",[],"job_summary","

About Us

Zest Health is redefining care for the 40M+ Americans with chronic dermatologic conditions like eczema and psoriasis. Through our virtual dermatology clinic, Zest is making care more accessible, effective, and affordable. Join our well-resourced, passionate team as we set the new gold standard for value-based specialty care.

The Role

We're hiring our first dedicated Corporate IT and Security Engineer. Today these responsibilities are spread across the software engineering team. You'll take them over and build the processes that let us grow without security and compliance becoming a bottleneck.

This is a hands-on role with broad ownership. In a typical week, you might add a new application to Okta and wire up its provisioning, run a quarterly access review, ship a new device policy in our MDM, close out a control in our compliance platform, draft answers to a client security questionnaire, or flag a new vulnerability to the engineering team and track it to remediation.

You don't need to have done all of this before. You need a solid foundation in identity, endpoints, and security fundamentals, the judgment to know what matters, and the drive to own a function at a fast-growing startup. As the company scales, this role grows with it.

We expect AI to be part of how you work, not a novelty. You'll have LLM tooling and MCP connections to Vanta and our other systems, and we want you to use them to automate the repetitive parts of IT, security, and compliance so your time goes to judgment calls. You'll also help decide how the rest of the company uses AI safely.

Engineering will continue to own secure product development. You'll be the SME in the threat landscape: you'll help set standards, track security developments that affect our stack, coordinate testing, and make sure findings get fixed.

Core Responsibilities

Identity and access

Administer Okta: add and configure new applications, manage SSO and MFA, and maintain groups and access policies
Own access provisioning and deprovisioning across every system we use, developing sustainable and clear SLAs to support the entire organization
Own the employee onboarding and offboarding process, from the first-day laptop to the last-day access removal, and keep it fast, reliable, and auditable
Run regular access reviews and make sure least-privilege holds up over time
Automate repetitive identity work, such as access requests, provisioning steps, and access review prep, with Okta Workflows, scripting, and AI-assisted tooling

Endpoints and IT

Manage our MDM: enrollment, device policies, encryption, patching, and endpoint compliance
Maintain an accurate inventory of devices, applications, accounts, and licenses
Serve as the first point of contact for employee IT and security questions

Security and compliance

Own day-to-day operation of our compliance program: control monitoring, evidence collection, audit preparation, and coordination with auditors
Own policy approvals and the annual policy review cycle
Administer HIPAA and security awareness training and track completion
Create and maintain the processes and policies we need to meet compliance requirements, including incident notification procedures
Track security developments, vulnerabilities, and vendor advisories relevant to our stack and drive remediation

Client trust

Own responses to client security assessments and questionnaires, and maintain a reusable library of security and compliance answers
Support client audits and security reviews as our healthcare partnerships continually expand

Secure development partnership

Partner with Engineering on application security standards, dependency and vulnerability scanning, and penetration test coordination
Track application security findings through remediation and verify that critical issues are resolved
Help engineers adopt new tools with appropriate access, privacy, and data controls

Qualifications

2+ years of experience in corporate IT, systems administration, IT security, security operations, or a related role
Hands-on experience with an identity provider (Okta or similar), including SSO, MFA, and user lifecycle management
Experience with an MDM platform (Kandji, Jamf, Intune, Mosyle, or similar), ideally in a primarily macOS environment
Experience with employee onboarding and offboarding, access provisioning, and access reviews
Familiarity with SOC 2 or a similar compliance framework, including how controls, policies, and evidence fit together
Working knowledge of security fundamentals: least privilege, endpoint security, vulnerability management, and incident response basics
Clear written communication. Much of this job is documenting processes, writing policies, and explaining security to non-technical teammates
Fluency with LLM tools (Claude and Gemini) as a normal part of your work, and the judgment to verify their output before you act on it
Good judgment when balancing security, usability, and speed
Comfort operating within a broad function, learning quickly, and solving problems directly
Commitment to work Eastern Timezone hours

Preferred Qualifications

Experience supporting a SOC 2 audit from readiness through report
Experience with HIPAA or another healthcare compliance requirement
Experience with a compliance automation platform (Vanta, Drata, Secureframe, or similar)
Experience responding to client security questionnaires or enterprise diligence requests
Ability to automate IT and security workflows with scripting, APIs, or modern automation tools
Comfort in a codebase: opening pull requests for security patches and dependency updates
Familiarity with cloud identity and security in AWS, GCP, or Azure
Experience as an early IT or security hire at a growing startup

Why Join the Zest Team?

You'll be the owner of IT, identity, and compliance at a fast-growing company, not a ticket queue at a large one
The scope of this role expands as the company does. Successful people in this seat grow into senior security, GRC, or IT leadership roles
Do meaningful work alongside dynamic, mission-driven teammates
Opportunity to join a high-growth start-up that is revolutionizing care delivery for dermatology patients
Robust compensation package inclusive of competitive pay, equity grants, and retirement plan matching
Employer-sponsored medical, dental, and vision plans

This role is not eligible for visa sponsorship, now or in the future. Candidates must be authorized to work in the U.S. without sponsorship.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other legally protected basis, in accordance with applicable law.

","job_type",[69],"location_cities",[],"location_city_states",[],"location_geos",[],"location_regions",[],"pay_period","annual","pay_structure","salary","posted_datetime",1794595932,"priority",2,"remote_type","Location-based","searchable",true,"skills",[],"supplemental_pay",[],"tags",[],"talent_network","title","Corporate IT and Security Engineer","Full-time","city","DC","2174765",[],"

Washington, DC (hybrid, 3 days in office, preferred) or East or Central Remote

Full-time, exempt

Reports to: VP of Operations

About Us:

Job Summary

Zest Health is building the category leader in value-based dermatology, and we’re hiring the person who builds the pipeline to do it.

Every new partner launch and market expansion depends on having the right people ready before go-live. As our Talent and People Operations Manager, you’ll build the talent pipeline that enables continual business growth and ensures we launch on time, then run and scale the people operations that make every new hire successful: onboarding, systems, and the policies and processes a growing company needs. You’ll work directly with the leadership team and shape the roadmap with us. As Zest scales, so does your scope, and we expect the person in this role to grow into a People leader.

This is for a talent acquisition professional who wants more than a recruiting seat: someone who builds before the need exists, wants to learn the operating side of a company, and is looking to grow into a People leader at a fast-paced business.

Scope of Work

Talent pipeline (roughly half your time)

Build and maintain proactive pipelines of patient-facing personnel (licensed clinicians, care coordinators, and enrollment specialists)
Recruit for a diverse set of business roles across marketing, product, and more, including sourcing, screening, scheduling, reference checks, and offers
Work with leadership to craft a long-term talent strategy based on brand investments and creative pipeline strategies
Work with Operations, Growth, and Clinical leadership to turn new partner launches into hiring plans, lead times, and pipeline targets
Manage our ATS, and report on pipeline health, time to fill, and pipeline coverage by state

People operations (roughly half your time)

Run onboarding and offboarding for employees and contractors, including pre-employment checks, new hire paperwork, system access coordination, and exit steps
Serve as day-to-day contact for our PEO on new hires, changes, and terminations
Prepare employment verification letters and other HR correspondence
Partner with counsel on HR compliance questions, as needed
Improve and build the processes that help us scale people operations as the company grows

Required Qualifications

About 5 years of recruiting experience in healthcare, including direct experience sourcing and closing licensed clinicians (telehealth, provider group, or staffing/locum experience a plus)
Experience building a pipeline ahead of need, not only filling open requisitions
Exposure to HR operations (onboarding, offboarding, HRIS), formal or informal
Ability to plan against a forecast and communicate lead times to leadership
Demonstrated ability to handle confidential employee information with discretion and professionalism
Strong problem-solving skills and a proactive, service-oriented approach
Comfort in an early-stage environment with a lot of ownership and evolving structure
Strong organizational skills and attention to detail, with the ability to manage multiple priorities and recurring deadlines

Equal Employment Opportunity

Zest Health is committed to providing equal employment opportunities to all applicants and employees in accordance with applicable federal, state, and local laws. Employment decisions are made without regard to any characteristic protected by applicable law.

We care more about what you’ve built than a perfect resume match. If you’ve recruited hard-to-fill, credentialed, or contingent talent, learn fast, and build before the need exists, we want to hear from you even if you don’t check every box.

",[69],[71],[86],[],[81],"region","WA",[],[],[],"Talent and People Operations Manager","DC|WA","primary_email","scraped_zest-health+33325@example.com","website","https://zesthealth.com",[],"has_ats","awareness","floodgate","packages",[],"is_paying_customer","logo","owner","partner_networks",{"_118":119},"enabled","","address1","address2","phone","GA","postal_code","why_join","employer_directory","creation_datetime","2026-11-13T18:52:11.201Z","about_us","headquarters","additional","profile_images",[],"member_of",[],{"_64":143,"_92":22,"_25":26,"_87":88,"_93":94,"_30":31,"_95":144,"_97":22,"_98":-5,"_99":-5,"_100":145,"_102":59,"_89":90,"_28":103,"_104":103,"_105":103,"_106":103,"_70":103,"_80":107,"_108":103,"_109":103,"_110":59,"_111":112,"_113":103},{"_25":26,"_87":88,"_89":90,"_64":143,"_92":22,"_93":94,"_30":31,"_95":144,"_97":22,"_98":-5,"_99":-5,"_100":145,"_102":59,"_28":103,"_104":103,"_105":103,"_106":103,"_70":103,"_80":107,"_108":103,"_109":103,"_110":59,"_111":112,"_113":103,"_114":-7,"_115":-7,"_116":146},[123,124],{"_25":26,"_70":71,"_27":59,"_28":29,"_30":31,"_32":72,"_34":134,"_36":74,"_38":135,"_40":136,"_42":137,"_44":138,"_46":139,"_48":49,"_50":51,"_52":53,"_54":55,"_80":81,"_56":57,"_58":59,"_60":140,"_62":141,"_64":142,"_66":22,"_67":85},{"_25":26,"_27":22,"_28":29,"_30":31,"_32":33,"_34":125,"_36":37,"_38":126,"_40":127,"_42":128,"_44":129,"_46":130,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":131,"_62":132,"_64":133,"_66":22,"_67":68},[],[69],[],[],[],[],[],[],[],[],[69],[71],[86],[],[81],[],[],[],[],[],{"_118":147},[],[],"context",{"_152":153,"_154":-5,"_155":156,"_157":158,"_30":31},"sessionFingerprint","-|-","ipHash","6f053dd887","user","featureFlags",{"_175":59,"_176":59,"_177":59,"_178":59,"_179":59,"_180":22},"env",{"_159":160,"_161":162,"_163":164,"_165":160,"_166":167,"_168":160,"_169":170,"_171":172,"_173":22,"_174":59},"APP_ENV","production","PLAUSIBLE_DATA_DOMAIN","redballoon.work","HONEYBADGER_API_KEY","hbp_LIcNlljgNFSZAIQIobiNuFHLViBC113JYxqi","HONEYBADGER_ENV","CI_COMMIT_HASH","6b354d0867a6c27ad965db44bb157f7a92554fdb","NODE_ENV","STRIPE_PUBLIC_KEY","pk_live_51JDy8pDxMYANFRt7Et8UfCz5Qk8Ty53EHsTmLc8nvM0xWFMxL7EYHOWChvW8D1crdjF1DNHFdvSt8VB2DoEtts0d00TzSn0Wcv","CDN_DOMAIN","assets.redballoon.work","DEV_MODE","ANALYTICS","fill_the_gaps","check_seeker_qualifications","google_sso","apple_sso","mobile_app","classical_commons"]

Zest Health

Current Open Positions