Cyber Engineer

Deploy, manage, and maintain network security solutions across Azure and Palo Alto Networks environments, including Azure Firewalls, NSGs, Palo Alto next-generation firewalls, Strata Cloud Manager, and cloud network security controls.

• Build automation - scripts, Infrastructure as Code, and SOAR playbooks (for example, TORQ or Claude Code built workflows) - that reduces manual effort in management and delivery of the security stack.
• Monitor firewall and network telemetry, tune policies and configurations, and work to reduce friction and gaps across the environment.
• Manage Azure network security controls - virtual networks, network security groups, Azure Firewall, and related services.
• Configure and maintain GlobalProtect and Prisma Access where applicable, extending network defense into cloud and remote environments.
• Partner with the Cyber Defense Operations teams to investigate, contain, and remediate network-based incidents.
• Write and maintain runbooks, documentation, and standard operating procedures for the network defense function.
• Support control testing and evidence requests tied to HIPAA, SOC 2, and other frameworks relevant to HealthEquity's regulated environment.
• Look for opportunities to apply automation and AI to close security gaps and scale network defense as HealthEquity grows.
• Participate in an on-call rotation and respond to network security incidents outside standard business hours when needed.

This role requires direct, hands-on experience with both Azure and Palo Alto Networks.

• Production experience configuring, managing, and troubleshooting Palo Alto Networks next-generation firewalls, Panorama/Strata Cloud Manager, or Global Protect/Prisma Access.
• Production experience with Azure networking and security services, such as virtual networks, network security groups, and Azure Firewall.
• 5+ years of experience in network security engineering, network defense, or a closely related discipline.
• Advanced knowledge of core networking concepts: TCP/IP, routing, DNS, VPN, and firewall policy and segmentation design.
• Experience using AI coding services (Claude Code) to design, build, and deliver automation such as scripts, playbooks, and orchestration mechanisms.
• Clear communication skills, with the ability to explain technical risk to both technical and non-technical audiences.
• Willingness to participate in an on-call rotation.

Preferred

• Current Palo Alto Networks certification relevant to network security or security automation
• Current Microsoft Azure certification in networking or security
• Experience in healthcare, financial services, or another highly regulated industry.
• Working knowledge of HIPAA, SOC 2, or NIST Cybersecurity Framework controls.
• Experience integrating Network Security Monitoring detection tools into security operations.
• Experience with Strata Cloud Manager, Prisma Access.

401(k), This is a remote position. Salary Range $96500.00 To $123000.00 / year Benefits & Perks

The actual compensation offer is determined based on job-related knowledge, education, skills, experience, and work location. This position will be eligible for performance-based incentives as part of the total compensation package, in addition to a full range of benefits including:

• Medical, dental, and vision

• HSA contribution and match

• Dependent care FSA match

• Uncapped paid time off

• Paid parental leave

• 401(k) match

• Personal and healthcare financial literacy programs

• Ongoing education& tuition assistance

• Gym and fitness reimbursement

• Wellness program incentives

Onboarding & Travel

This is a remote role, with an in-person onboarding training component. New team members must participate in Trailhead, HealthEquity's immersive onboarding experience Trailhead is designed to foster meaningful connections, support your integration into the organization, and equip you with a strong understanding of our business. Trailhead participation is a key expectation of this role. Trailhead is held onsite at our headquarters once per quarter. HealthEquity covers all required travel and accommodations.

This role may begin with a virtual, self-paced onboarding experience, followed by a mandatory onsite Trailhead session at a later date.

HealthEquity is committed to providing reasonable accommodations to team members with qualifying disabilities. Should you be selected for this role and require an accommodation, we will put you in touch with our Benefits Team so you can begin the accommodation request process. Why work with HealthEquity

How you can make a difference HealthEquity holds the health and financial data of millions of members, and that data moves across the network this role helps defend. As a Cyber Engineer on the Network Defense team, you protect the firewalls, cloud connections, and traffic paths that keep member accounts, benefit transactions, and employer plan data secure from compromise. This role is built around automation, not manual toil. You will design scripts, playbooks, and integrations across Azure and Palo Alto Networks that let the team detect and respond to threats faster and more consistently than manual review alone allows, and you will help the team adopt AI-assisted management as those capabilities mature on both platforms. The reliability of the network you build and defend is part of how HealthEquity keeps the trust of the members, employers, and health plans it serves., HealthEquity uses Microsoft Copilot to transcribe screening interviews between candidates and their direct Talent Partner for note taking and interview summaries. By scheduling a screening interview with us, you consent to Microsoft Copilot's AI technology recording and transcribing your interview with your Talent Partner. This information will be reviewed for accuracy and then used by HealthEquity to summarize the interview, ensure accuracy, and facilitate our hiring process. We take privacy seriously. You have the option to opt out. If you wish to opt out of this Microsoft Copilot transcription, please notify your Talent Partner in advance of the interview. If we do not receive an opt-out request from you, we will assume that you consent to the use of Microsoft Copilot. At HealthEquity, our goal is to save and improve lives by empowering healthcare consumers. This shared purpose inspires everything we do, including how we approach hiring. Our process is designed to get to know the real you: your skills, experiences, and potential to make a difference. We value honesty, originality, and the courage to do the right thing, even when it is not the easiest path. Showing up as your authentic self reflects these values and helps us build something truly remarkable together. As AI is becoming a common tool throughout the application process, we want to be clear about its appropriate use at HealthEquity. Using AI to support resume writing, research, or interview preparation is perfectly acceptable, provided the content is accurate and genuinely represents your qualifications and skills. For other key parts of our interview process, however, it is important that the ideas, communication, and work you share reflect your own voice, experiences, and thinking. We ask that you participate in our live interviews and complete any assessments without AI assistance unless instructions explicitly indicate otherwise or a specific exception is discussed and approved in advance. This approach ensures fairness, celebrates your individuality, and allows your authentic perspective to shine. Behaviors that do not align with these guidelines may result in disqualification from the hiring process or termination of employment if later discovered. We appreciate your understanding and look forward to learning about the unique contributions only you can bring to HealthEquity. HealthEquity is committed to your privacy as an applicant for employment. For information on our privacy policies and practices, please visit HealthEquity Privacy.