Security & Network Solutions Engineer

We are seeking an experienced Security & Network Solutions Engineer who can serve as the technical bridge between Athena Security, customer IT and cybersecurity teams, and physical security leadership.

This person will be responsible for completing customer network, cybersecurity, compliance, and vendor security assessment forms while also participating in technical meetings with Directors of Security, CISOs, network engineers, infrastructure teams, and hospital IT departments.

The ideal candidate must be equally comfortable explaining security architecture to executives and troubleshooting a network connection with an engineer., * Complete detailed network, cybersecurity, IT, compliance, and vendor security assessment questionnaires.

• Respond accurately to customer questions regarding system architecture, data flows, encryption, access controls, cloud infrastructure, disaster recovery, logging, patching, and security practices.
• Participate in customer technical review and implementation meetings.
• Communicate confidently with Directors of Security, CISOs, CIOs, network engineers, cybersecurity teams, and hospital IT leadership.
• Explain how Athena systems communicate from cloud infrastructure through VPNs, firewalls, routers, switches, cellular networks, and local networks to iPads and other endpoint devices.
• Review customer network requirements and identify potential configuration or connectivity issues.
• Troubleshoot VPN tunnels, firewall rules, routing, DNS, ports, IP addressing, and connectivity problems.
• Work with customer IT teams to bring systems online and resolve network issues.
• Document network architecture, data flows, firewall requirements, IP addresses, ports, and troubleshooting procedures.
• Support security assessments and technical responses related to HIPAA, SOC 2, encryption, access controls, incident response, business continuity, and other enterprise security requirements., This is not a back-office-only technical position. The candidate must:
• Speak confidently with Directors and executives.
• Communicate effectively with highly technical network and cybersecurity engineers.
• Translate technical infrastructure into language that nontechnical security leaders can understand.
• Remain calm and organized during customer troubleshooting calls.
• Ask the right diagnostic questions rather than guessing.
• Clearly explain technical problems, risks, and recommended solutions.
• Write professional responses suitable for enterprise security assessments and customer documentation.

• TCP/IP networking and IP addressing
• Public and private IP addresses
• Static and dynamic IP addressing
• Subnets and subnet masks
• Default gateways and routing
• DNS and domain name resolution
• DHCP
• NAT and port forwarding
• Firewalls and firewall rules
• TCP and UDP ports
• VPN architecture and troubleshooting
• Site-to-site VPNs
• IPsec VPN tunnels
• SSL/TLS VPNs
• Routers, switches, and network segmentation
• VLANs
• Wi-Fi and cellular connectivity
• Cloud-to-customer network connections
• iPad and mobile-device connectivity
• Network troubleshooting tools and techniques

Advanced Architecture Knowledge

The candidate must understand and be able to troubleshoot:

• Dual-homed systems with two network interfaces or connectivity paths
• Systems connected simultaneously to private customer networks and external or cellular networks
• Multiple gateways and routing priorities
• Split tunneling
• Asymmetric routing
• Failover and redundant network paths
• VPN routing conflicts
• Firewall and access-control issues
• DNS versus direct IP connectivity
• Systems that can reach one network resource but not another

The person should be able to systematically determine whether a problem is caused by the endpoint device, IP configuration, subnet, gateway, routing table, firewall, VPN tunnel, DNS, customer network, cloud infrastructure, or application.

Security Assessment Experience

The ideal candidate has experience completing or supporting:

• Vendor security questionnaires
• Network security assessments
• Third-party risk assessments
• Cybersecurity questionnaires
• Hospital and healthcare security reviews
• Data-flow worksheets and diagrams
• Architecture reviews
• HIPAA security assessments
• SOC 2 security questions
• Business continuity and disaster recovery questionnaires
• Incident response questionnaires
• Encryption and data-retention assessments

The candidate must be able to take a complicated technical question, identify what the customer is actually asking, gather the correct information internally, and provide a clear and accurate written response., * 5+ years of network engineering, cybersecurity, solutions engineering, or technical implementation experience.

• Experience working with enterprise or hospital networks.
• Experience supporting SaaS or cloud-connected hardware systems.
• Experience with VPNs, firewalls, routers, iPads, and mobile endpoints.
• Experience with cloud infrastructure and hybrid cloud/on-premise environments.
• Experience participating in enterprise customer security and architecture reviews.
• Experience creating network diagrams and data-flow diagrams.

What Success Looks Like

A successful person in this role can receive a 200-question customer security assessment, understand the technical intent behind the questions, work with the correct internal teams to verify answers, and return a professional and accurate response.

The same person should also be able to join a customer call and troubleshoot why an iPad or system cannot communicate through a customer network, identify whether the issue involves IP addressing, routing, firewall rules, VPN configuration, DNS, or a dual-homed architecture, and work directly with the customer’s technical team to resolve it.

Pulled from the full job description

• 401(k)
• Health insurance
• Dental insurance, * 401(k)
• Dental insurance
• Health insurance