Security Engineer - Network & Infrastructure Security

Amplity Health
United States
4 days ago
Apply on www.builtincolorado.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Compensation
$264,000.0
Working hours
Regular working hours

Tech stack

Application Firewall Microsoft Azure Cloud Computing Cloud Computing Security Cloud Engineering CompTIA Security+ Computer Networks Continuous Integration Dynamic Host Configuration Protocol Network Address Translation DevOps Domain Name System (DNS)
+26 more
Intrusion Detection and Prevention Virtual Private Networks (VPN) Python (Programming Language) Network Security Network Architecture Network Connections Routing Network Segmentation Windows PowerShell Role-Based Access Control Remote Access Technology Azure Active Directory Zero Trust Network Access Security Information and Event Management TCP/IP Virtual Local Area Networks Software Vulnerability Management Microsoft InTune National Institute of Standards and Technology Cybersecurity Framework Information Technology Integration Frameworks Fortinet CIS Benchmarks Firewall Services Module Terraform Cisco

Job description

This is a hands-on engineering role responsible for supporting and improving the organization’s security controls across network, cloud, identity, endpoint and SaaS environments. A key focus will be ownership of network security technologies and ensuring that connectivity between users, offices, cloud environments and third parties is appropriately secured and monitored., The successful candidate will combine strong networking fundamentals with practical security engineering experience and will be comfortable troubleshooting complex technical issues, implementing security controls and working across Infrastructure, DevOps and wider IT teams. Key ResponsibilitiesNetwork & Firewall Security

  • Take technical ownership of network security controls, including next-generation firewalls, firewall policies, VPNs, network segmentation and secure connectivity.
  • Manage and maintain firewall rulesets, including rule creation, review, optimization and removal of unnecessary or obsolete access.
  • Troubleshoot network and firewall issues across corporate, cloud and remote-access environments.
  • Support the design and implementation of secure network architectures, including segmentation and least-privilege connectivity.
  • Review network traffic, logs and security events to identify suspicious activity and assist with investigations.
  • Assess security implications of new network connections, third-party integrations and infrastructure changes.
  • Work with Infrastructure and DevOps teams to ensure security is incorporated into network and cloud architecture.
  • Follow formal change management processes for network and firewall changes, including obtaining required approvals, testing changes before implementation, documenting rollback plans, and performing post-change validation to confirm security controls and connectivity function as intended.
  • Maintain appropriate documentation covering network security architecture, firewall configurations and operational procedures.

Security Engineering

  • Manage and improve security technologies across endpoint, cloud, identity, email and network environments.
  • Investigate security alerts and provide technical support during security incidents.
  • Identify vulnerabilities and configuration weaknesses and work with technology owners through remediation.
  • Implement security controls based on risk, security standards and organizational requirements.
  • Support security monitoring and detection capabilities and help improve visibility across the technology environment.
  • Participate in vulnerability management, security assessments and remediation activities.
  • Support security elements of technology projects, migrations and integrations.
  • Assist with security evidence and technical controls supporting frameworks such as SOC 2, CIS Controls and ISO 27001-aligned practices.
  • Contribute to continuous improvement of security tooling, processes and automation.

Requirements

  • Enterprise networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, NAT and VLANs.
  • Enterprise firewall administration and troubleshooting.
  • Firewall policies, network segmentation and access-control design.
  • Site-to-site and remote-access VPN technologies.
  • Analyzing network traffic and logs to troubleshoot connectivity and security issues.
  • Network security architecture and secure connectivity.
  • Cloud networking and security, ideally within Microsoft Azure.
  • Security incident investigation and troubleshooting.
  • Vulnerability management and remediation.
  • Working within a modern Microsoft enterprise environment.

Desirable Experience

Experience with some of the following is a plus:

  • Palo Alto Networks, Fortinet, Cisco or similar next-generation firewall platforms
  • Microsoft Azure networking, including VNets, NSGs, routing and private connectivity
  • Microsoft Entra ID
  • Microsoft Intune
  • Microsoft Defender
  • Netskope or other SSE/SASE technologies
  • SIEM and security monitoring platforms
  • EDR/XDR technologies
  • Infrastructure-as-Code or automation, such as PowerShell, Python or Terraform
  • Security within DevOps or CI/CD environments
  • Cloud security posture management
  • SOC 2, CIS Controls, NIST CSF or ISO 27001 environments

Technical Skills & Attributes

  • Strong technical troubleshooting skills with the ability to work methodically across network, infrastructure and security layers.
  • Comfortable taking ownership of technical issues from investigation through resolution.
  • Able to balance security requirements against operational and business needs.
  • Strong understanding of least privilege, defense in depth and Zero Trust principles.
  • Able to communicate technical risks clearly to both technical and non-technical stakeholders.
  • Comfortable working independently while collaborating closely with Infrastructure, DevOps and other IT teams.
  • Curious and willing to learn technologies outside their immediate area of expertise., * Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent practical work experience)
  • 5+ years of hands-on experience in systems administration, network infrastructure, or enterprise IT operations, * Relevant industry experience isations more important than specific certifications, although certifications such as the following would be beneficial:
  • Palo Alto PCNSA/PCNSE
  • Fortinet FCP/FCSS
  • Cisco CCNA/CCNP
  • Microsoft AZ-500
  • Microsoft SC-200 / SC-300
  • CompTIA Security+

Benefits & conditions

Own and improve network, firewall, cloud, endpoint, identity, email, and SaaS security controls. Responsibilities include firewall administration, VPNs, segmentation, secure architecture, traffic and log analysis, incident investigation, vulnerability remediation, security monitoring, technical project support, compliance evidence, and automation. The role collaborates with Infrastructure and DevOps teams, troubleshoots complex connectivity and security issues, and applies least-privilege, Zero Trust, and defense-in-depth principles. The summary above was generated by AI

Join Amplity, the full-service go-to partner of biopharma companies that delivers flexible + specialized medical + commercial services. No matter where a drug is in its lifecycle, we scale with ease to maximize resources + improve impact for all our clients. Through strategic partnerships + deep therapeutic expertise, Amplity transforms how breakthrough treatments reach the people who need them., Remote or Hybrid CA, USA 264K-395K Annually Expert/Leader 264K-395K Annually Expert/Leader eCommerce * Fintech * Hardware * Payments * Software * Financial Services Own the architecture and technical strategy for Square’s go-to-market systems. Build and operate production AI agents, automated workflows, and integrations that improve sales productivity. Lead complex initiatives through architecture, implementation, testing, deployment, and operations while establishing AI evaluation, observability, security, reliability, and human-oversight practices. Partner with Sales, Product, Data, and Engineering leaders to translate business needs into scalable solutions, make build-versus-buy decisions, mentor engineers, and improve business impact through data and user feedback. Top Skills: Ai AgentsCrm PlatformsGoLarge Language Models (Llms)RetrievalTool CallingWorkflow Orchestration Square, 264K-395K Annually Entry level 264K-395K Annually Entry level eCommerce * Fintech * Hardware * Payments * Software * Financial Services Lead complex card-acquiring projects from design through production, building reliable payment systems, tooling, testing frameworks, and network integrations. Work hands-on with ISO messages, routing, authorization, clearing, settlement, reconciliation, interchange, and tokenization. Set technical direction, mentor engineers, improve reliability, participate in on-call operations, and establish standards adopted across teams. The role requires deep acquiring expertise and experience operating large-scale financial systems. Top Skills: Ai Coding AgentsCard-Network IntegrationsIso 20022Iso 8583Payment Tokenization Square

Account Executive

38 Minutes Ago Remote or Hybrid 129K-233K Annually Mid level 129K-233K Annually Mid level eCommerce * Fintech * Hardware * Payments * Software * Financial Services Own and grow a North Seattle sales territory through in-person outreach, business visits, community engagement, partnerships, demos, and full-cycle deal closing. Generate pipeline, sell Square’s software and hardware solutions to restaurants, retailers, and service businesses, build customer relationships, support onboarding, maintain Salesforce activity and forecasts, and consistently exceed sales quotas. Top Skills: Payment ProcessingSalesforce

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

  • Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
  • Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
  • Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
  • Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
  • Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

About the company

All positions at Amplity are expected to demonstrate the EPIIC Values to uphold high service standards:

  • Excellence: We set high standards, are solutions-focused, and achieve outstanding results with professionalism and positivity.

  • Passion: We love what we do; our energy inspires, engages, and motivates others.

  • Innovation: Our ideas set us apart; we are curious, bold, and challenge conventional ways of working.

  • Integrity: We are open, honest, and transparent, doing the right thing with courage and understanding.

  • Collaboration: We are better together, actively seeking the participation of others to achieve greater outcomes., Amplity powers biopharma innovation through expert-led teams that deliver. Whether you knew us in the 80’s as Physician Detailing Inc., or in the 00’s as part of Publicis Health , the companies that came together in 2019 to form Amplity have delivered contract medical, commercial + communications excellence for 40+ years.

Our people-driven, tech-enabled DNA fuels everything we do. Our professionals understand the pharmaceutical industry from the inside out. With a deep grasp on product lifecycles, marketing hurdles, operational nuances + the complex needs of providers and patients, we help our clients launch products + operate smoothly with precision - across all business shapes, sizes + specialties.

We are on a mission to improve patient outcomes through executional excellence - enabling our partners in pharma to thrive in turn. At Amplity, we are allies in excellence. And we do it quicker, better, nicer than anyone else.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.builtincolorado.com
Prepare application

Good distractions

Loading talks and stories from around this role…