Network Security Manager | PAM Health Corporate

Overview

The Network Security Manager / Architect is responsible for the architecture, implementation, and operational ownership of PAM Health's enterprise network security and secure WAN environment. This role leads the Network Firewall Security function within Infrastructure and is accountable for firewall, SD-WAN, VPN, segmentation, and hybrid-cloud network security across hospitals, corporate locations, and cloud environments.

The Manager / Architect serves as a hands-on technical architect and team leader, designing and implementing security solutions and security policy standards while supervising the network security team. The role partners with Network Infrastructure, Information Security, Cloud/AI, and application teams to deliver resilient, scalable, and secure connectivity that supports patient care and clinical operations.

Responsibilities

I. Position Responsibilities

• Own the architecture, implementation, lifecycle management, and operational governance of enterprise firewalls, SD-WAN, VPN, segmentation, and secure network connectivity
• Architect and lead deployment of Fortinet solutions, including physical and virtual FortiGate firewalls, FortiManager, FortiAnalyzer, and Secure SD-WAN across hospitals, corporate locations, and cloud environments
• Develop standardized firewall and SD-WAN configurations, templates, routing designs, security policies, NAT, VPNs, segmentation, high availability, and security profiles
• Design and operate Microsoft Azure network security integration, including virtual networks, subnets, peering, route tables/UDRs, hybrid connectivity, and virtual firewall/network appliance deployments as part of the SD-WAN fabric
• Establish secure network connectivity patterns for cloud and third-party services, including Google Cloud Platform connectivity when required by business or application needs
• Own firewall policy governance, rule lifecycle management, change review, exception handling, recertification, and documentation standards
• Monitor and optimize security, availability, performance, capacity, licensing, software lifecycle, and resiliency of firewall and SD-WAN platforms
• Lead technical escalation, incident response, and root cause analysis for firewall, SD-WAN, VPN, and hybrid-cloud connectivity issues
• Manage, prioritize, mentor, and develop the Senior Network Security Engineer while providing technical direction to the broader Network Infrastructure team
• Partner with Information Security, Cloud/AI, Infrastructure, application teams, vendors, and service providers on secure designs, new site deployments, migrations, and complex changes
• Maintain architecture diagrams, standards, implementation documentation, runbooks, audit evidence, and controls supporting HIPAA, organizational security, disaster recovery, and business continuity requirements

II. Leadership

• Inclusiveness: Promotes cooperation, fairness and equity; shows respect for people and their differences; works to understand perspectives of others; demonstrates empathy; brings out the best in others and in his/her team
• Managing Staff: Coaches, evaluates, develops, and inspires staff; sets expectations; recognizes achievements
• Stewardship and Resource Management: Demonstrates accountability and sound judgment in managing company resources; appropriate understanding of confidentiality and company values; adheres to and supports company policies, procedures and safety guidelines
• Problem-Solving: Identifies problems and involves others in seeking solutions; conducts appropriate analysis and searches for best solutions; effectively and efficiently implements appropriate responses to correct problems; responds promptly and effectively to new challenges
• Decision-Making: Makes clear, consistent decisions; acts with integrity in all decisions; distinguishes relevant from irrelevant information; makes timely, appropriate decisions.
• Strategic Planning and Organizing: Understands company vision and aligns priorities accordingly; measures outcomes; uses feedback to redirect as required; evaluates alternatives; appropriately organizes complex issues to desirable resolution
• Communication: Connects with peers, subordinate employees and all customers; actively listens; clearly and effectively shares information; demonstrates effective oral and written communication skills; negotiates effectively.
• Quality Improvement: Strives for efficient, effective, high-quality performance in self and in the department; delivers timely and accurate results; resilient when responding to matters that are challenging; takes initiative to make improvements
• Leadership: Motivates others; accepts responsibility; maintains high morale in department; develops trust and credibility; expects honest and ethical behavior of self and staff
• Teamwork: Encourages cooperation and collaboration; builds effective teams; works in partnership with others; is flexible; responsive to the needs of others
• Development: Maintains up-to-date skills through involvement with professional organizations and/or continuing education

II. Customer Service

• Maintains the highest level of customer service via courtesy, compassion and positive communication.
• Promotes the mission and vision of PAM Health within the work environment and the community.
• Respects dignity and confidentiality by adherence to all applicable policies and procedures.
• Provide professional, courteous support to clinical staff, hospital leadership, and business users
• Act as a technical point of contact for IT leadership and clinical stakeholders
• Communicate technical risks, impacts, and outcomes clearly and effectively
• Maintain strict adherence to HIPAA, security, and organizational policies

III. Health and Safety

• Works in a manner that promotes safety; wears clothing appropriate to the performance of the job.
• Participates in OSHA required training.
• Follows universal precautions as appropriate for position; complies with Employee Health requirements for continued employment.
• Reports unsafe practices to management.
• Knows own role in case of an emergency.

POSITION QUALIFICATIONS

Education and Training: Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Network Engineering, or a related field preferred; equivalent combination of education, certifications, and relevant experience considered

Experience

• 8+ years of progressive experience in enterprise network engineering, network security, or infrastructure security roles
• 5+ years of hands-on experience designing, implementing, and operating next-generation firewalls, VPNs, secure WAN, and/or SD-WAN solutions
• Demonstrated experience serving as a technical architect or lead for complex multi-site network security deployments
• Hands-on Microsoft Azure networking experience required, including virtual networks, routing, hybrid connectivity, and virtual firewall/network appliance deployments
• Experience leading, mentoring, or supervising technical staff; prior direct people-management experience preferred
• Healthcare or other regulated-industry experience strongly preferred

Knowledge, Skills, and Abilities

• Advanced knowledge of enterprise firewall architecture, secure SD-WAN, IPsec VPNs, network segmentation, high availability, policy design, and threat-prevention controls
• Strong working knowledge of Fortinet FortiGate, FortiManager, FortiAnalyzer, and Fortinet Secure SD-WAN technologies
• Advanced Microsoft Azure networking knowledge, including VNets, subnets, peering, route tables/UDRs, VPN Gateway, ExpressRoute concepts, and virtual network appliances/firewalls
• Google Cloud networking experience, including VPCs, routing, Cloud VPN/Interconnect concepts, and firewall policy, is preferred but not required
• Strong understanding of TCP/IP, BGP, OSPF, VLANs, VRFs, DNS, DHCP, NAT, QoS, and enterprise routing design
• Knowledge of network security monitoring, logging, syslog/SIEM integration, performance analysis, and advanced troubleshooting
• Ability to design scalable, resilient hybrid-cloud and multi-site network security architectures and translate business or security requirements into practical technical controls
• Strong understanding of ITSM processes including incident, change, problem, and configuration management
• Strong leadership, documentation, project coordination, vendor management, communication, and decision-making skills
• Relevant Fortinet, Microsoft Azure, Cisco, or network security certifications preferred

• PHYSICAL DEMANDS: See attached Job Activity Requirements
• WORKING CONDITIONS: Working generally indoors in well-lighted, well-ventilated areas. Working conditions as in hospital surroundings. Occasional travel to healthcare facilities may be required. Participation in on-call rotation.
• ORGANIZATIONAL DATA: This is an exempt position. No formal line(s) of promotion exists.
• The above statements are intended to describe the general nature and level of the work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skill required of personnel so classified.