IT Network & Security Engineer

• Network Infrastructure & Operations: Install, configure, and maintain network infrastructure, including routers, switches, firewalls, wireless access points, VPNs, and structured cabling.
• Perimeter & Cyber Defense: Design, configure, and monitor next-generation firewalls, Web Application Firewalls (WAF), secure VPN tunnels, and Intrusion Detection/Prevention Systems (IDS/IPS).
• Performance & Troubleshooting: Monitor network performance, availability, and capacity; troubleshoot and resolve connectivity issues for staff, core business systems, and clinical integrations.
• HIPAA & PHI Security: Manage firewall policies, micro-segmentation, and zero-trust remote access to protect PHI and strictly comply with HIPAA Security Rule requirements.
• Cloud Security & Architecture: Support secure connectivity and cloud security guardrails between on-premises offices and Microsoft Azure (VNets, ExpressRoute/VPN gateways, Network Security Groups, and Entra ID).
• Vulnerability & Incident Management: Apply firmware updates and security patches; run vulnerability scans, remediate findings, analyze SIEM logs, and respond promptly to network security incidents.
• Access Control & Zero Trust: Administer Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and Privileged Access Management (PAM) frameworks for network infrastructure.
• Change & Maintenance Management: Follow strict change management for network/security modifications: schedule within maintenance windows, back up configurations, and maintain tested rollback plans.
• On-Call & Emergency Response: Participate in scheduled after-hours maintenance windows and an on-call rotation to address emergency network outages, critical security alerts, and system incidents.
• Audit Readiness & Vendor Risk: Partner with compliance teams to gather technical evidence for HIPAA, HITRUST, NIST CSF, and CMS security audits; perform technical security evaluations for First-Tier, Downstream, and Related Entities (FDRs).
• Unified Communications & QoS: Support VoIP and unified communications systems, ensuring proper Quality of Service (QoS) for voice and video traffic.
• Vendor & Inventory Management: Coordinate with ISPs, telecom providers, and hardware vendors; maintain detailed inventory of network equipment, circuits, and licenses.
• Documentation & Disaster Recovery: Maintain up-to-date network topology maps, security policies, incident runbooks, and disaster recovery architectures.

• Bachelor’s degree in information technology, Computer Science, Cybersecurity, Network Engineering, or related field (or equivalent practical experience).
• 3+ years of hands-on experience in network administration, network engineering, or enterprise network security.
• Strong working knowledge of TCP/IP, routing and switching, VLAN segregation, DNS security, and IPsec/SSL VPN tunnels.
• Proven experience configuring and managing enterprise firewalls and VPN solutions (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower, Meraki).
• Experience with network monitoring, diagnostic tools, and security log analysis (e.g., Wireshark, PRTG, SolarWinds, SIEM platforms).
• Solid understanding of network security best practices, including firewall policy management, network segmentation, MFA, and security log reviews.
• Practical understanding of HIPAA Security Rule compliance, data privacy principles, and standard security frameworks (e.g., NIST CSF, HITRUST).
• Flexibility and willingness to participate in periodic weekend/after-hours maintenance windows and emergency on-call rotations., * Active industry security or networking certifications such as CISSP, CCNA, CCNP, CCSP, CompTIA Security+, or vendor-specific credentials (e.g., PCNSA/PCNSE).
• Prior experience working in a healthcare, managed care, healthcare payer, or Medicare Advantage (MAPD) environment.
• Deep technical knowledge of HIPAA compliance, CMS guidelines, and FDR vendor security oversight.
• Hands-on experience with Microsoft Azure networking, Network Security Groups, ExpressRoute, Windows Server, Active Directory, or Microsoft Entra ID.
• Scripting skills for network automation, security reporting, and task execution (PowerShell or Python).
• Comfortable using AI-assisted tools (e.g., Claude, ChatGPT, GitHub Copilot) for network scripting, threat analysis, and documentation., LANGUAGE: Ability to read and interpret documents such as safety rules, operating and maintenance instructions, and procedure manuals. Ability to write routine reports and correspondence. Ability to speak effectively before groups and customers or employees of the organization.

MATHEMATICS: Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals. Ability to compute rate, ratio, and percent and to draw and interpret bar graphs.

REASONING ABILITY: Ability to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, diagram or schedule form., While performing the duties of this job, the employee is occasionally required to lift or exert force up to 10 pounds.

• 401(k)
• Dental Insurance
• Health Insurance
• Life Insurance
• Vision Insurance
• Paid Time Off
• Free Lunch On-Site