Want to know if this job is worth applying to?
New York, New York, United States
Onsite
About Codes Health
We're fixing one of the most broken and crucial parts of plaintiff litigation: getting complete, accurate medical records. Today, that takes 30 to 50 days of faxing, calling, and portal-chasing across thousands of providers, each running its own back office.
We deliver records 2-3x faster. To do this, we're building an agentic layer that operates in this messy, real-world environment. Every retrieval teaches our system how to access another corner of American healthcare, building a provider data layer you can't scrape or buy. All while putting us at the most upstream point of a $20B+ market where everything downstream depends on us.
This problem extends far beyond the plaintiff legal space. It's also pervasive in healthcare, where our CEO Alvaro first encountered it while running a home health agency, as well as in disability services, life sciences/clinical trials, and the insurance industry. All of these verticals face this same challenge.
"Codes isn't just participating in the workflow; it's capturing the moment where the most important data is created, positioning itself to expand from ingestion into orchestration and ultimately own the entire stack." - Amplify Partners, Boring is Sexy
We've raised $17.5M from Amplify, General Catalyst, Haystack, and Y Combinator. We serve 130+ law firms across plaintiff litigation and mass tort, including the largest plaintiff firm in the country.
The Work
You'll own IT for a fast-growing team, keeping our people productive and our devices and systems running smoothly as we scale.
That includes:
Running our HIPAA and SOC 2 compliance work end to end: gathering evidence, monitoring controls, and maintaining policies.
Managing our device fleet and MDM, from provisioning and configuration to enforcing policies across every laptop and phone that touches company data.
Owning onboarding and offboarding.
Designing and running IT and security trainings.
Being the go-to person for software and device troubleshooting, and fixing root causes so the same issue doesn't come up twice.
We're a lean team, and this is a chance to build IT at a startup the right way from early on. You'll work closely with engineering, operations, and leadership, and you'll have real ownership over how we operate.
Who we're looking for
You might be a fit if you:
Have hands-on experience supporting compliance work for HIPAA, SOC 2, or similar frameworks.
Have managed devices through an MDM and are comfortable administering SaaS tools and identity/access systems.
Like being the person people come to when something breaks, and genuinely enjoy solving the problem.
Are organized and detail-oriented. Evidence collection, access reviews, and audit trails don't scare you.
Can explain security practices clearly to non-technical teammates without making it feel like a chore.
Want to grow with a company and help shape how its IT function is built.
You'd work directly with the founders and a small, high-bar team.
Compensation
Competitive base salary ($80K–$110K depending on experience) and early-stage equity.
.jpg?1687461219){kind=logo}
