Senior Network Security Engineer | PAM Health Corporate

Overview

The Senior Network Security Engineer is responsible for the implementation, administration, and operational support of PAM Health's enterprise network security and secure WAN environment. This role provides hands-on engineering support for firewalls, SD-WAN, VPN, network segmentation, and hybrid-cloud connectivity across hospitals, corporate locations, and cloud environments.

Responsibilities

The Senior Network Security Engineer serves as a senior technical escalation point and works under the direction of the Network Security Manager / Architect to deploy and maintain standardized security solutions. The role partners with Network Infrastructure, Information Security, Cloud/AI, application teams, and vendors to ensure secure, resilient, and reliable connectivity that supports patient care and clinical operations.

I. Position Responsibilities

• Implement, configure, maintain, and troubleshoot enterprise firewalls, Secure SD-WAN, VPNs, segmentation, and secure network connectivity
• Deploy and administer Fortinet solutions including physical and virtual FortiGate firewalls, FortiManager, FortiAnalyzer, and Secure SD-WAN across hospitals, corporate locations, and cloud environments
• Execute approved architecture standards, templates, routing designs, firewall policies, NAT, VPN configurations, high-availability designs, and security profiles
• Support Microsoft Azure network security operations including virtual networks, subnets, peering, route tables/UDRs, hybrid connectivity, and virtual firewall/network appliance deployments within the SD-WAN fabric
• Support secure connectivity to Google Cloud Platform and other third-party cloud or SaaS environments as required by business and application needs
• Administer firewall policy requests and rule lifecycle activities including implementation, validation, documentation, recertification, cleanup, and change control
• Monitor firewall and SD-WAN health, security events, logs, performance, capacity, software lifecycle, licensing, and resiliency; identify and remediate operational issues
• Serve as a technical escalation point for firewall, SD-WAN, VPN, routing, and hybrid-cloud connectivity incidents and participate in root cause analysis
• Participate in hospital deployments, migrations, upgrades, maintenance windows, and cutovers while coordinating with Network Infrastructure, vendors, and service providers
• Maintain accurate architecture diagrams, implementation documentation, configuration standards, runbooks, audit evidence, and operational procedures
• Support disaster recovery, redundancy, business continuity, and security-control validation for network firewall and secure connectivity services

II. Leadership

• Inclusiveness: Promotes cooperation, fairness and equity; shows respect for people and their differences; works to understand perspectives of others; demonstrates empathy; brings out the best in others and in his/her team
• Stewardship and Resource Management: Demonstrates accountability and sound judgment in managing company resources; appropriate understanding of confidentiality and company values; adheres to and supports company policies, procedures and safety guidelines
• Problem-Solving: Identifies problems and involves others in seeking solutions; conducts appropriate analysis and searches for best solutions; effectively and efficiently implements appropriate responses to correct problems; responds promptly and effectively to new challenges
• Decision-Making: Makes clear, consistent decisions; acts with integrity in all decisions; distinguishes relevant from irrelevant information; makes timely, appropriate decisions.
• Communication: Connects with peers, subordinate employees and all customers; actively listens; clearly and effectively shares information; demonstrates effective oral and written communication skills; negotiates effectively.
• Quality Improvement: Strives for efficient, effective, high-quality performance in self and in the department; delivers timely and accurate results; resilient when responding to matters that are challenging; takes initiative to make improvements
• Teamwork: Encourages cooperation and collaboration; builds effective teams; works in partnership with others; is flexible; responsive to the needs of others
• Development: Maintains up-to-date skills through involvement with professional organizations and/or continuing education

II. Customer Service

• Maintains the highest level of customer service via courtesy, compassion and positive communication.
• Promotes the mission and vision of PAM Health within the work environment and the community.
• Respects dignity and confidentiality by adherence to all applicable policies and procedures.
• Provide professional, courteous support to clinical staff, hospital leadership, and business users
• Act as a technical point of contact for IT leadership and clinical stakeholders
• Communicate technical risks, impacts, and outcomes clearly and effectively
• Maintain strict adherence to HIPAA, security, and organizational policies

III. Health and Safety

• Works in a manner that promotes safety; wears clothing appropriate to the performance of the job.
• Participates in OSHA required training.
• Follows universal precautions as appropriate for position; complies with Employee Health requirements for continued employment.
• Reports unsafe practices to management.
• Knows own role in case of an emergency.

POSITION QUALIFICATIONS

Education and Training: Associate or Bachelor's degree in Information Technology, Cybersecurity, Computer Networking, or related field preferred; equivalent combination of education, certifications, and relevant experience considered

Experience

• 5+ years of experience in enterprise network engineering, network security, or infrastructure security roles
• 3+ years of hands-on experience implementing and supporting next-generation firewalls, VPNs, secure WAN, and/or SD-WAN technologies
• Hands-on experience supporting complex multi-site network environments including routing, segmentation, high availability, and secure remote connectivity
• Hands-on Microsoft Azure networking experience required, including virtual networks, routing, hybrid connectivity, and virtual firewall/network appliance deployments
• Experience with Fortinet FortiGate, FortiManager, FortiAnalyzer, and Secure SD-WAN strongly preferred
• Healthcare or other regulated-industry experience preferred

Knowledge, Skills, and Abilities

• Strong working knowledge of enterprise firewall administration, Secure SD-WAN, IPsec VPNs, network segmentation, high availability, policy implementation, and threat-prevention controls
• Hands-on knowledge of Fortinet FortiGate, FortiManager, FortiAnalyzer, and Fortinet Secure SD-WAN technologies
• Working knowledge of Microsoft Azure networking including VNets, subnets, peering, route tables/UDRs, VPN Gateway, ExpressRoute concepts, and virtual network appliances/firewalls
• Google Cloud networking experience including VPCs, routing, Cloud VPN/Interconnect concepts, and firewall policy is preferred but not required
• Strong understanding of TCP/IP, BGP, OSPF, VLANs, VRFs, DNS, DHCP, NAT, QoS, and enterprise routing fundamentals
• Knowledge of firewall security profiles and controls including IPS, application control, web/DNS filtering, SSL inspection, and DLP where implemented
• Experience with network security monitoring, logging, syslog/SIEM integration, performance analysis, packet capture, and advanced troubleshooting
• Ability to implement scalable and resilient hybrid-cloud and multi-site network security designs in accordance with approved architecture standards
• Familiarity with ITSM processes including incident, change, problem, and configuration management
• Strong documentation, troubleshooting, communication, collaboration, and decision-making skills; relevant Fortinet, Microsoft Azure, Cisco, or network security certifications preferred

• PHYSICAL DEMANDS: See attached Job Activity Requirements
• WORKING CONDITIONS: Working generally indoors in well-lighted, well-ventilated areas. Working conditions as in hospital surroundings. Occasional travel to healthcare facilities may be required. Participation in on-call rotation.
• ORGANIZATIONAL DATA: This is an exempt position. No formal line(s) of promotion exists.
• The above statements are intended to describe the general nature and level of the work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skill required of personnel so classified.