fractional CTO
Technical partner to a founding team of physicians building a value-based care platform — architecting the stack and embedding security from the first commit.
About AlignHTC
The track record is the product.
AlignHTC is a focused technical practice, not a generalist agency. It was founded on a simple idea: health-tech founders don’t need another consultant who produces strategy decks. They need an operator who has actually built and secured the systems — and will do it again, for them.
The defining engagement
An acquisition that put the architecture to the test.
As lead Infrastructure, DevSecOps, and Compliance engineer for a venture-backed health-tech startup, AlignHTC’s founder rebuilt the platform’s infrastructure as code and carried it through SOC 2 Type 2 and HIPAA compliance.
That architecture was then tested in the most demanding way possible. When the startup was acquired, the infrastructure and security posture had to withstand the acquirer’s technical due diligence — the most rigorous audit a startup’s technology will ever face.
It held. That is the standard AlignHTC builds to: not “compliant enough for now,” but architecture with code, controls, and evidence that can survive the hardest scrutiny there is.
Role
Lead Infrastructure & DevSecOps Engineer
Scope
IaC rebuild · CI/CD hardening · SOC 2 Type 2 · HIPAA
Outcome
Passed M&A technical due diligence for successful acquisition
Cloud architecture made reproducible from code
Identity, network, and encryption controls implemented in the platform
Deployment path hardened with reviewable security gates
Evidence posture organized for auditors and diligence reviewers
The operator difference
An engineer who never stopped building.
There is a category of consultant who advises from a distance — frameworks, slide decks, recommendations handed off to someone else to implement. AlignHTC is the opposite of that.
The work is hands-on by definition. Writing the infrastructure-as-code. Configuring the AWS environments. Building the CI/CD pipelines. Implementing the controls and producing the evidence. Standing up the secure AI tooling that can answer compliance questions, accelerate engineering workflows, and still leave a reviewable evidence trail.
That is what a founder is actually buying: not advice about the build, but the build — done by someone who has carried health-tech infrastructure through compliance, through enterprise security review, and through acquisition.
M&A technical due diligence
Owned infrastructure and security architecture that held up under acquisition-grade technical scrutiny.
SOC 2 Type 2 · HIPAA · HITRUST
Navigated all three frameworks as an engineer — implementing controls, not just advising on them.
Infrastructure as Code
Rebuilt production health-tech environments as version-controlled, reproducible IaC.
Custom AI / RAG tooling
Built policy-aware RAG and AI workflow systems with review paths, evidence trails, and security constraints.
Where the work is now
Active engagements.
Beyond this acquisition pedigree, AlignHTC’s practice spans current and recent work with high-calibre health-tech companies — described here within the bounds of client confidentiality.
compliance engineering
Cloud infrastructure and compliance work for the team behind an FDA-authorized clinical AI platform.
developer workflow
Development and delivery workflows architected for a high-growth senior-care analytics platform.
Client identities are held confidential. Specifics — including names, where permitted — can be discussed directly on a strategy call.
Next step
Work with the operator directly.
Every engagement is led hands-on by AlignHTC's founder. The strategy session is a direct conversation — no account managers, no handoff.