Senior Network Security Engineer | PAM Health Corporate

PAM Health is hiring a Senior Network Security Engineer to implement, administer, and support enterprise network security and secure WAN services. The role engineers firewalls, SD-WAN, VPNs, segmentation, and hybrid-cloud connectivity while serving as a technical escalation point and partnering with infrastructure, security, cloud, application teams, and vendors to support reliable connectivity for patient care and clinical operations.

Responsibilities:

• Implement, configure, maintain, and troubleshoot enterprise firewalls, Secure SD-WAN, VPNs, segmentation, and secure network connectivity
• Deploy and administer Fortinet solutions including physical and virtual FortiGate firewalls, FortiManager, FortiAnalyzer, and Secure SD-WAN across hospitals, corporate locations, and cloud environments
• Execute approved architecture standards, templates, routing designs, firewall policies, NAT, VPN configurations, high-availability designs, and security profiles
• Support Microsoft Azure network security operations including virtual networks, subnets, peering, route tables/UDRs, hybrid connectivity, and virtual firewall/network appliance deployments within the SD-WAN fabric
• Support secure connectivity to Google Cloud Platform and other third-party cloud or SaaS environments as required by business and application needs
• Administer firewall policy requests and rule lifecycle activities including implementation, validation, documentation, recertification, cleanup, and change control
• Monitor firewall and SD-WAN health, security events, logs, performance, capacity, software lifecycle, licensing, and resiliency; identify and remediate operational issues
• Serve as a technical escalation point for firewall, SD-WAN, VPN, routing, and hybrid-cloud connectivity incidents and participate in root cause analysis
• Participate in hospital deployments, migrations, upgrades, maintenance windows, and cutovers while coordinating with Network Infrastructure, vendors, and service providers
• Maintain accurate architecture diagrams, implementation documentation, configuration standards, runbooks, audit evidence, and operational procedures
• Support disaster recovery, redundancy, business continuity, and security-control validation for network firewall and secure connectivity services
• Inclusiveness: Promotes cooperation, fairness and equity; shows respect for people and their differences; works to understand perspectives of others; demonstrates empathy; brings out the best in others and in his/her team
• Stewardship and Resource Management: Demonstrates accountability and sound judgment in managing company resources; appropriate understanding of confidentiality and company values; adheres to and supports company policies, procedures and safety guidelines
• Problem-Solving: Identifies problems and involves others in seeking solutions; conducts appropriate analysis and searches for best solutions; effectively and efficiently implements appropriate responses to correct problems; responds promptly and effectively to new challenges
• Decision-Making: Makes clear, consistent decisions; acts with integrity in all decisions; distinguishes relevant from irrelevant information; makes timely, appropriate decisions
• Communication: Connects with peers, subordinate employees and all customers; actively listens; clearly and effectively shares information; demonstrates effective oral and written communication skills; negotiates effectively
• Quality Improvement: Strives for efficient, effective, high-quality performance in self and in the department; delivers timely and accurate results; resilient when responding to matters that are challenging; takes initiative to make improvements
• Teamwork: Encourages cooperation and collaboration; builds effective teams; works in partnership with others; is flexible; responsive to the needs of others
• Development: Maintains up-to-date skills through involvement with professional organizations and/or continuing education
• Maintains the highest level of customer service via courtesy, compassion and positive communication
• Promotes the mission and vision of PAM Health within the work environment and the community
• Respects dignity and confidentiality by adherence to all applicable policies and procedures
• Provide professional, courteous support to clinical staff, hospital leadership, and business users
• Act as a technical point of contact for IT leadership and clinical stakeholders
• Communicate technical risks, impacts, and outcomes clearly and effectively
• Maintain strict adherence to HIPAA, security, and organizational policies
• Works in a manner that promotes safety; wears clothing appropriate to the performance of the job
• Participates in OSHA required training
• Follows universal precautions as appropriate for position; complies with Employee Health requirements for continued employment
• Reports unsafe practices to management
• Knows own role in case of an emergency

Requirements:

• 5+ years of experience in enterprise network engineering, network security, or infrastructure security roles
• 3+ years of hands-on experience implementing and supporting next-generation firewalls, VPNs, secure WAN, and/or SD-WAN technologies
• Hands-on experience supporting complex multi-site network environments including routing, segmentation, high availability, and secure remote connectivity
• Hands-on Microsoft Azure networking experience required, including virtual networks, routing, hybrid connectivity, and virtual firewall/network appliance deployments
• Strong working knowledge of enterprise firewall administration, Secure SD-WAN, IPsec VPNs, network segmentation, high availability, policy implementation, and threat-prevention controls
• Hands-on knowledge of Fortinet FortiGate, FortiManager, FortiAnalyzer, and Fortinet Secure SD-WAN technologies
• Working knowledge of Microsoft Azure networking including VNets, subnets, peering, route tables/UDRs, VPN Gateway, ExpressRoute concepts, and virtual network appliances/firewalls
• Strong understanding of TCP/IP, BGP, OSPF, VLANs, VRFs, DNS, DHCP, NAT, QoS, and enterprise routing fundamentals
• Knowledge of firewall security profiles and controls including IPS, application control, web/DNS filtering, SSL inspection, and DLP where implemented
• Experience with network security monitoring, logging, syslog/SIEM integration, performance analysis, packet capture, and advanced troubleshooting
• Ability to implement scalable and resilient hybrid-cloud and multi-site network security designs in accordance with approved architecture standards
• Familiarity with ITSM processes including incident, change, problem, and configuration management
• Strong documentation, troubleshooting, communication, collaboration, and decision-making skills
• Associate or Bachelor's degree in Information Technology, Cybersecurity, Computer Networking, or related field preferred
• equivalent combination of education, certifications, and relevant experience considered
• Experience with Fortinet FortiGate, FortiManager, FortiAnalyzer, and Secure SD-WAN strongly preferred
• Healthcare or other regulated-industry experience preferred
• Google Cloud networking experience including VPCs, routing, Cloud VPN/Interconnect concepts, and firewall policy is preferred but not required
• relevant Fortinet, Microsoft Azure, Cisco, or network security certifications preferred