The Senior Security Engineer, Network Security, is a senior-level technical role reporting to the Manager of Network Protection. This position is responsible for designing, engineering, implementing, and maintaining advanced network security technologies and configurations in support of the Cybersecurity Risk Management Department. The Senior Engineer is expected to possess an expert-level understanding of firewall architectures, network protection technologies, and security best practices. The role is also responsible for identifying and remediating security gaps, strengthening existing controls, developing new capabilities, and collaborating with Cyber Security and Information Technology teams to safeguard the organization’s infrastructure and data across a large, diverse healthcare environment. Familiarity with regulatory and industry frameworks such as HIPAA Security Rule and NIST Cybersecurity Framework is required.
Essential Duties and Responsibilities:
- Assist in designing, engineering, managing, reviewing, and recommending improvements for new and existing network security solutions, configurations, and technologies.
- Enhance preventative and automated network security controls aligned with business requirements to strengthen protection against cyber threats.
- Assist in developing strategies for expanding network segmentation, implementing zero trust concepts, and increasing visibility into cybersecurity risks across a wide spectrum of healthcare technologies and assets.
- Assist in developing and improving standards and processes for the identification, prioritization, and remediation of threats, as well as methodologies for metrics and KPIs related to network protection, security performance, and compliance.
- Provide technical guidance to enterprise Cyber Security and Information Technology teams regarding the impact of network security controls, driving issues to remediation and ensuring secure-by-design configurations.
- Assist in developing and documenting an overall network protection strategy, including perimeter definition, external access controls, cloud and data center security, device classifications, and service-level segmentation.
- Perform other duties and responsibilities as assigned by cybersecurity leadership.
Qualifications:
Education
- High School diploma required.
- Bachelor’s Degree in Information Technology, Computer Science, or related field, or equivalent experience preferred.
Required Experience
- 5+ years of experience in Cyber Security, Firewall, Network, and Cloud Security Technologies.
- Extensive experience working within a large healthcare system.
- Hands-on experience with Palo Alto Networks firewalls (physical and virtual), Panorama, Prisma Access, SD-WAN, Network Access Control (NAC), Web Application Firewalls (WAF), Terraform, Cloud Armor, and Google Cloud Platform (GCP).
Activities:
- Design, engineer, and implement firewall and network protection technologies.
- Serve as a technical thought leader for network protection and contribute to strategic decision-making.
- Operate effectively in structured, process-driven environments and participate in process optimization efforts.
- Provide ongoing operational and engineering support for network security platforms and configurations.
Competencies:
- Advanced knowledge of security principles, issues, techniques, and implementations.
- Proven ability to proactively identify and resolve complex technical problems.
- Strong understanding of threat actor techniques, tactics, and procedures (TTPs).
- Ability to communicate complex technical concepts clearly and effectively.
- Excellent written and verbal communication skills.
- Ability to work effectively in a remote capacity on a large, distributed team.
Preferred Experience
- 8+ years of experience in Cyber Security, Firewall, and Network Security Technologies.
Preferred License / Registration / Certification
- CISSP, GIAC, OSCP, PCNSA, PCNSE, SISE, CCNA, or other industry-standard certifications.
Computer Skills Preferred
- Experience with Office, GSuite, Linux, Windows, Visio, hybrid cloud environments, and various cybersecurity tools and technologies as required.