5 jobs found

Job Description Job Description: Job Summary The Senior Data Center & Cloud Network Engineer is responsible for designing, implementing, operating, securing, and modernizing the Bank's network infrastructure across enterprise data centers, corporate offices, branch locations, and the Microsoft Azure cloud environment. This senior-level, hands-on engineering role serves as a critical bridge between the Bank's traditional on-premises infrastructure and its evolving hybrid-cloud architecture. The position combines deep expertise in enterprise networking, data center technologies, cloud networking, cybersecurity, resiliency, and network automation to deliver secure, scalable, and universally available solutions that support business operations and strategic initiatives. The Senior Data Center & Cloud Network Engineer partners closely with Cloud Engineering, Infrastructure Services, Information Security, Enterprise Architecture, Risk Management, Internal Audit, telecommunications providers, and other technology teams to develop, implement, and maintain network solutions that align with business objectives, regulatory requirements, and industry best practices. Key Responsibilities Design, implement, maintain, and troubleshoot enterprise data center, core network, and cloud network infrastructure. Engineer universally available and resilient routing, switching, network segmentation, and redundancy solutions to support business continuity objectives. Configure, monitor, and troubleshoot networking technologies including BGP, OSPF, TCP/IP, VLANs, routing, switching, NAT, DNS, DHCP, and VPN services. Support connectivity and operational readiness across primary and disaster recovery data centers, corporate offices, branch locations, and colocation facilities. Design, deploy, and manage Microsoft Azure networking services, including Virtual Networks (VNets), subnets, peering, User Defined Routes (UDRs), Network Security Groups (NSGs), Private Link, Private Endpoints, and Private DNS. Architect and support hybrid cloud networking solutions utilizing Azure ExpressRoute, VPN Gateway, Hub-and-Spoke, and Azure Virtual WAN architectures. Implement and support Azure networking and security services, including Azure Firewall, Application Gateway/WAF, Azure Load Balancer, Azure Kubernetes Service (AKS), and Azure Platform-as-a-Service (PaaS) networking requirements. Manage and optimize enterprise WAN environments, including MPLS, Internet, VPN, and carrier-based connectivity solutions, while evaluating and implementing SD-WAN and SASE technologies. Configure, maintain, and support next-generation firewall platforms to enable secure network segmentation, Zero Trust architectures, and secure remote access. Partner with Information Security teams to implement network security standards, firewall policies, threat prevention controls, vulnerability remediation, and regulatory compliance requirements. Administer and support enterprise DNS, DHCP, IPAM, load balancing, and application delivery technologies. Develop and maintain network automation solutions using Terraform, Python, PowerShell, Ansible, APIs, Git, and Infrastructure-as-Code (IaC) methodologies. Implement proactive monitoring, telemetry, alerting, performance analysis, and capacity planning to ensure network reliability and availability. Participate in incident response, root cause analysis, problem management, disaster recovery testing, and 24x7 production support activities as required. Create and maintain network architecture diagrams, standards, policies, procedures, configurations, and technical documentation. Lead network modernization initiatives, technology evaluations, and strategic infrastructure projects to improve scalability, performance, and security. Collaborate with infrastructure, cloud, security, and application teams to support enterprise technology initiatives and business objectives. Provide technical leadership, mentoring, and knowledge transfer to junior engineers and operational support teams. Compliance Responsibilities Complies with all applicable state and federal banking laws, regulations, and internal policies related but not limited to lending, operations, and deposit requirements, including Bank Secrecy Act (BSA), Anti-Money Laundering (AML) requirements, Office of Foreign Assets Control (OFAC) regulations, Customer Identification Program (CIP) requirements, Financial Elder Abuse reporting laws, Sexual Harassment prevention policies, information security and privacy requirements. Required Knowledge Extensive hands-on experience designing, implementing, and supporting enterprise data center and core network infrastructure. Advanced knowledge of networking protocols and technologies, including TCP/IP, BGP, OSPF, VLANs, routing, switching, NAT, DNS, DHCP, VPN, network segmentation, and high-availability architectures. Demonstrated experience designing resilient, scalable, and universally available network infrastructures that support mission-critical business operations. Strong knowledge of enterprise network security principles and hands-on experience administering next-generation firewall platforms, network segmentation, and secure remote-access solutions. Experience supporting enterprise WAN technologies, including MPLS, Internet, VPN, SD-WAN, and carrier-provided connectivity services. Advanced Microsoft Azure networking expertise, including: Virtual Networks (VNets) Subnets and VNet Peering Network Security Groups (NSGs) User Defined Routes (UDRs) Private Link and Private Endpoints Private DNS Azure ExpressRoute Azure VPN Gateway Azure Firewall Azure Application Gateway/WAF Azure Load Balancer Strong understanding of hybrid-cloud networking architectures, including hub-and-spoke, Virtual WAN, and cloud-to-datacenter connectivity solutions. Proven troubleshooting skills across routing, switching, firewalls, DNS, application connectivity, WAN services, and hybrid-cloud environments. Experience supporting universally available business-critical production environments with a focus on performance, reliability, disaster recovery, and operational excellence. Knowledge of network monitoring, telemetry, alerting, capacity planning, and performance management tools and methodologies. Experience with network automation, scripting, and Infrastructure-as-Code (IaC) technologies, including Terraform, Python, PowerShell, Ansible, APIs, and Git. Understanding of Zero Trust networking principles, cybersecurity best practices, threat prevention technologies, and regulatory compliance requirements. Strong technical documentation skills, including development of network diagrams, standards, configuration documentation, policies, and operational procedures. Excellent verbal and written communication skills with the ability to effectively collaborate across Infrastructure, Cloud, Information Security, Application Development, and business teams. Ability to manage multiple priorities, lead complex technical initiatives, and effectively support enterprise-wide infrastructure modernization efforts. Knowledge, Skills and Abilities Advanced hands-on experience with Fortinet and/or Palo Alto Networks Next-Generation Firewalls (NGFWs), including firewall policy administration, network segmentation, site-to-site and remote-access VPNs, threat prevention, and high-availability configurations. Strong expertise with Cisco and/or Arista enterprise, campus, and data center networking technologies, including routing, switching, network fabric, and infrastructure modernization initiatives. Experience designing, implementing, and supporting SD-WAN, SASE/SSE, and Azure Virtual WAN solutions to improve network performance, resiliency, security, and user connectivity. Demonstrated experience with Infrastructure as Code (IaC), network automation, and orchestration using Terraform, Python, PowerShell, Ansible, APIs, Git, or similar technologies. Experience administering and supporting enterprise load balancing, application delivery, DNS, DHCP, and IPAM platforms, including Infoblox, F5, or comparable solutions. Strong understanding of data center, colocation, carrier, and cloud connectivity services, including coordination with telecommunications providers, managed service vendors, and cloud partners. Experience supporting complex, universally available environments within banking, financial services, insurance, healthcare, or other regulated industries. Working knowledge of cybersecurity frameworks, regulatory requirements, and industry standards, including NIST, CIS Controls, FFIEC, PCI DSS, SOC 2, or equivalent governance frameworks. Exceptional problem-solving, analytical, and troubleshooting skills with the ability to diagnose and resolve complex network and cloud infrastructure issues. Ability to lead technical projects, manage competing priorities, and deliver solutions in a fast-paced, mission-critical environment. Strong interpersonal, collaboration, and relationship-building skills, with the ability to effectively partner with Information Security, Infrastructure, Cloud Engineering, Application Development, and business stakeholders. Excellent verbal, written, and presentation communication skills, including the ability to develop technical documentation, architecture diagrams, standards, and executive-level communications. Strong organizational skills with the ability to manage multiple initiatives, meet deadlines, and maintain a high level of accuracy and attention to detail. Ability to work independently while serving as a technical leader, mentor, and subject matter expert for network engineering and cloud networking technologies. Commitment to continuous learning and staying current with emerging networking, cloud, automation, and cybersecurity technologies and best practices . click apply for full job details

Job Description Job Description About Us At Office Ally, we've been revolutionizing healthcare administration since our inception. What started as a clearinghouse focused on simplifying insurance claims processing for healthcare providers has grown into a full-suite healthcare technology company. We offer a range of affordable, cloud-based revenue cycle management solutions -from eligibility verification and claims management to revenue recovery and payment processing -that help healthcare organizations of all sizes streamline operations and reduce administrative burdens so they can focus on what matters most: patient care. In April 2026, Office Ally acquired Jopari Solutions, Inc, a leader in straight-through electronic claims processing for Property & Casualty (P&C), Commercial, and Government healthcare. Jopari brings deep industry expertise and innovative enterprise payment solutions that are transforming how disbursements are handled across the insurance ecosystem. Together, we are expanding our capabilities across the full healthcare transaction lifecycle, connecting claims, payments, and data exchange to deliver a more seamless and efficient experience for providers, payers, and partners. At the core of our company are four key values that guide our mission and work: Ownership : We take pride in our responsibilities, driving results and taking accountability for the success of our projects. Empowerment : We believe in giving our team the autonomy and support to make decisions that lead to innovative solutions. Innovation : We continuously seek new and better ways to improve healthcare administration, embracing creativity and forward-thinking technology. Transparent Communication : Open, honest communication is at the heart of our collaborations, internally and with our clients, ensuring alignment and trust. About the Role The Network Engineer is responsible for designing, managing, and securing our enterprise network infrastructure. This is a hands-on role serving as the primary technical owner of our network stack spanning Palo Alto firewalls, F5 load balancers, DNS, NGINX reverse proxies, and Ubiquiti-based office networking, ensuring high availability, performance, and security across our data center, cloud, and office environments. This role works closely with cloud engineering, security, and application teams to deliver a reliable, well-segmented network fabric that supports our business operations and compliance obligations including SOC 2 and HIPAA. What You'll Do Firewall & Perimeter Security Administer and maintain Palo Alto Networks firewalls (PA-Series, VM-Series) and Panorama for centralized policy management Design and enforce security policy rulesets, NAT policies, application-based controls, and URL filtering using PAN-OS Manage GlobalProtect VPN for remote access, including gateway configuration, split tunneling, and MFA integration Configure and maintain IPsec VPN tunnels for site-to-site connectivity with data centers and cloud environments Operate and tune Palo Alto HA pairs, monitor threat logs, and respond to firewall-identified incidents Stay current on PAN-OS releases, evaluate CVEs, and manage firmware upgrade cycles in coordination with the security team Load Balancing & Traffic Management Administer F5 BIG-IP LTM for application load balancing, SSL/TLS offload, and traffic steering across server pools Configure and maintain virtual servers, pool members, health monitors, iRules, and persistence profiles Manage SSL certificate lifecycle on F5, including certificate installation, renewal, and cipher suite hardening Collaborate with application teams to optimize traffic policies, implement session persistence, and troubleshoot application delivery issues Office Networking Deploy, configure, and manage Ubiquiti UniFi switching, wireless access points, and security gateways across office locations Administer UniFi Network Application / UniFi OS for centralized device management, VLAN segmentation, and SSID configuration Design and maintain office network architecture including inter-VLAN routing, QoS policies, and guest network isolation Support office expansions, equipment refreshes, and new site bring-ups including cabling coordination and wireless site surveys Troubleshoot connectivity, throughput, and roaming issues across distributed office environments Network Security Implement and maintain network segmentation strategies using VLANs, micro-segmentation, and firewall zones Support zero-trust network access (ZTNA) initiatives and enforce least-privilege access at the network layer Manage network access control (NAC) and 802.1X authentication for wired and wireless endpoints Conduct periodic network security reviews, firewall rule audits, and access path analysis Support SOC 2 and HIPAA compliance obligations through network-level controls, evidence collection, and audit support Collaborate with the security team on threat detection, network traffic analysis, and incident containment Monitoring, Documentation & Operations Implement and maintain network monitoring using SNMP, NetFlow, syslog, and dashboarding tools Maintain accurate and up-to-date network topology diagrams, IP address management (IPAM), and runbooks Drive continuous improvement initiatives including capacity planning, redundancy reviews, and technology refresh cycles What You'll Need Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field; equivalent experience or relevant industry certifications will also be considered 3+ years of hands-on network engineering experience in an enterprise or multi-site environment Proficiency with Palo Alto Networks firewalls and PAN-OS including policy management, NAT, VPN, and HA configuration Network Engineer Experience administering F5 BIG-IP LTM including virtual servers, iRules, SSL offload, and health monitors Solid DNS fundamentals including zone management, split-horizon, record types, and hybrid DNS troubleshooting Hands-on NGINX experience for reverse proxying, TLS termination, and upstream load balancing Experience deploying and managing Ubiquiti UniFi environments across multiple sites Thorough understanding of core networking protocols including TCP/IP, BGP, OSPF, VLAN/802.1Q, STP, and LACP Familiarity with network security principles including segmentation, ACLs, NAC, 802.1X, and zero-trust concepts Experience with packet capture and analysis tools (Wireshark, tcpdump) for troubleshooting Ability to read and write basic automation scripts (Python, Bash) for network tasks Nice to Have Healthcare, SaaS, or regulated-industry experience Palo Alto Networks certifications (PCNSA, PCNSE) F5 certifications (F5-CA, F5 201/301) CCNA, CCNP, or equivalent vendor-neutral networking certifications Exposure to network automation and IaC tooling including Ansible and Terraform (network providers) Experience with Azure networking including VNets, VPN Gateway, ExpressRoute, Azure Firewall, and Private Endpoints Background in regulated environments (SOC 2, HIPAA, PCI-DSS) and evidence-based compliance support Experience with SIEM integration for network log forwarding and correlation (Microsoft Sentinel, Rapid7) Travel Requirements This role requires up to 5% travel , which may include client meetings, team gatherings, or company events Travel will typically be scheduled in advance and supported by the company Pay Transparency Office Ally is committed to fair and equitable compensation practices in alignment with pay transparency laws. Compensation for this position may vary based on individual skills, experience, and location. In addition to base pay, employees may be eligible for performance-based bonuses and a comprehensive benefits package, including medical, dental, and vision coverage, 401(k) with company match, paid time off, and other benefits. Actual compensation will be determined considering the candidate's qualifications, relevant experience, and internal equity. Office Ally Pay Transparency $100,000-$120,000 USD Why You'll Love Working at Office Ally At Office Ally, your work has a direct impact on healthcare providers and their ability to deliver exceptional care. We're driven by a mission to simplify healthcare administration, making it easier for providers to focus on what they do best-helping patients. As an Office Ally employee, you'll be at the heart of our efforts to deliver exceptional service and software solutions to our clients in the healthcare space. EEO Note Office Ally is an Equal Opportunity Employer and does not discriminate against any employee or applicant on the basis of age, color, disability, gender, national origin, race, religion, sexual orientation, veteran status, or any classification protected by federal, state, or local law.

Job Description Job Description About Us At Office Ally, we've been revolutionizing healthcare administration since our inception. What started as a clearinghouse focused on simplifying insurance claims processing for healthcare providers has grown into a full-suite healthcare technology company. We offer a range of affordable, cloud-based revenue cycle management solutions -from eligibility verification and claims management to revenue recovery and payment processing -that help healthcare organizations of all sizes streamline operations and reduce administrative burdens so they can focus on what matters most: patient care. In April 2026, Office Ally acquired Jopari Solutions, Inc, a leader in straight-through electronic claims processing for Property & Casualty (P&C), Commercial, and Government healthcare. Jopari brings deep industry expertise and innovative enterprise payment solutions that are transforming how disbursements are handled across the insurance ecosystem. Together, we are expanding our capabilities across the full healthcare transaction lifecycle, connecting claims, payments, and data exchange to deliver a more seamless and efficient experience for providers, payers, and partners. At the core of our company are four key values that guide our mission and work: Ownership : We take pride in our responsibilities, driving results and taking accountability for the success of our projects. Empowerment : We believe in giving our team the autonomy and support to make decisions that lead to innovative solutions. Innovation : We continuously seek new and better ways to improve healthcare administration, embracing creativity and forward-thinking technology. Transparent Communication : Open, honest communication is at the heart of our collaborations, internally and with our clients, ensuring alignment and trust. About the Role The Network Engineer is responsible for designing, managing, and securing our enterprise network infrastructure. This is a hands-on role serving as the primary technical owner of our network stack spanning Palo Alto firewalls, F5 load balancers, DNS, NGINX reverse proxies, and Ubiquiti-based office networking, ensuring high availability, performance, and security across our data center, cloud, and office environments. This role works closely with cloud engineering, security, and application teams to deliver a reliable, well-segmented network fabric that supports our business operations and compliance obligations including SOC 2 and HIPAA. What You'll Do Firewall & Perimeter Security Administer and maintain Palo Alto Networks firewalls (PA-Series, VM-Series) and Panorama for centralized policy management Design and enforce security policy rulesets, NAT policies, application-based controls, and URL filtering using PAN-OS Manage GlobalProtect VPN for remote access, including gateway configuration, split tunneling, and MFA integration Configure and maintain IPsec VPN tunnels for site-to-site connectivity with data centers and cloud environments Operate and tune Palo Alto HA pairs, monitor threat logs, and respond to firewall-identified incidents Stay current on PAN-OS releases, evaluate CVEs, and manage firmware upgrade cycles in coordination with the security team Load Balancing & Traffic Management Administer F5 BIG-IP LTM for application load balancing, SSL/TLS offload, and traffic steering across server pools Configure and maintain virtual servers, pool members, health monitors, iRules, and persistence profiles Manage SSL certificate lifecycle on F5, including certificate installation, renewal, and cipher suite hardening Collaborate with application teams to optimize traffic policies, implement session persistence, and troubleshoot application delivery issues Office Networking Deploy, configure, and manage Ubiquiti UniFi switching, wireless access points, and security gateways across office locations Administer UniFi Network Application / UniFi OS for centralized device management, VLAN segmentation, and SSID configuration Design and maintain office network architecture including inter-VLAN routing, QoS policies, and guest network isolation Support office expansions, equipment refreshes, and new site bring-ups including cabling coordination and wireless site surveys Troubleshoot connectivity, throughput, and roaming issues across distributed office environments Network Security Implement and maintain network segmentation strategies using VLANs, micro-segmentation, and firewall zones Support zero-trust network access (ZTNA) initiatives and enforce least-privilege access at the network layer Manage network access control (NAC) and 802.1X authentication for wired and wireless endpoints Conduct periodic network security reviews, firewall rule audits, and access path analysis Support SOC 2 and HIPAA compliance obligations through network-level controls, evidence collection, and audit support Collaborate with the security team on threat detection, network traffic analysis, and incident containment Monitoring, Documentation & Operations Implement and maintain network monitoring using SNMP, NetFlow, syslog, and dashboarding tools Maintain accurate and up-to-date network topology diagrams, IP address management (IPAM), and runbooks Drive continuous improvement initiatives including capacity planning, redundancy reviews, and technology refresh cycles What You'll Need Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field; equivalent experience or relevant industry certifications will also be considered 3+ years of hands-on network engineering experience in an enterprise or multi-site environment Proficiency with Palo Alto Networks firewalls and PAN-OS including policy management, NAT, VPN, and HA configuration Network Engineer Experience administering F5 BIG-IP LTM including virtual servers, iRules, SSL offload, and health monitors Solid DNS fundamentals including zone management, split-horizon, record types, and hybrid DNS troubleshooting Hands-on NGINX experience for reverse proxying, TLS termination, and upstream load balancing Experience deploying and managing Ubiquiti UniFi environments across multiple sites Thorough understanding of core networking protocols including TCP/IP, BGP, OSPF, VLAN/802.1Q, STP, and LACP Familiarity with network security principles including segmentation, ACLs, NAC, 802.1X, and zero-trust concepts Experience with packet capture and analysis tools (Wireshark, tcpdump) for troubleshooting Ability to read and write basic automation scripts (Python, Bash) for network tasks Nice to Have Healthcare, SaaS, or regulated-industry experience Palo Alto Networks certifications (PCNSA, PCNSE) F5 certifications (F5-CA, F5 201/301) CCNA, CCNP, or equivalent vendor-neutral networking certifications Exposure to network automation and IaC tooling including Ansible and Terraform (network providers) Experience with Azure networking including VNets, VPN Gateway, ExpressRoute, Azure Firewall, and Private Endpoints Background in regulated environments (SOC 2, HIPAA, PCI-DSS) and evidence-based compliance support Experience with SIEM integration for network log forwarding and correlation (Microsoft Sentinel, Rapid7) Travel Requirements This role requires up to 5% travel , which may include client meetings, team gatherings, or company events Travel will typically be scheduled in advance and supported by the company Pay Transparency Office Ally is committed to fair and equitable compensation practices in alignment with pay transparency laws. Compensation for this position may vary based on individual skills, experience, and location. In addition to base pay, employees may be eligible for performance-based bonuses and a comprehensive benefits package, including medical, dental, and vision coverage, 401(k) with company match, paid time off, and other benefits. Actual compensation will be determined considering the candidate's qualifications, relevant experience, and internal equity. Office Ally Pay Transparency $100,000-$120,000 USD Why You'll Love Working at Office Ally At Office Ally, your work has a direct impact on healthcare providers and their ability to deliver exceptional care. We're driven by a mission to simplify healthcare administration, making it easier for providers to focus on what they do best-helping patients. As an Office Ally employee, you'll be at the heart of our efforts to deliver exceptional service and software solutions to our clients in the healthcare space. EEO Note Office Ally is an Equal Opportunity Employer and does not discriminate against any employee or applicant on the basis of age, color, disability, gender, national origin, race, religion, sexual orientation, veteran status, or any classification protected by federal, state, or local law.

Job Description Job Description Network Security EngineerEngineer Secure, Resilient Network Services That Support Mission-Critical OperationsGeorgia System Operations Corporation (GSOC) is seeking a Network Security Engineer to design, implement, secure, and operate corporate network services and cybersecurity tools that enable reliable, protected business operations.This hands-on role combines enterprise network engineering and cybersecurity expertise across datacenter, campus, remote-site, internet-edge, and approved cloud environments. The Network Security Engineer helps safeguard availability, performance, secure access, and security visibility while advancing resilient, supportable, and automated network and security services.This opportunity is ideal for an experienced network and security professional who enjoys solving complex technical problems, strengthening controls, supporting incident response, mentoring peers, and collaborating across infrastructure, cybersecurity, application, service desk, and vendor teams. This is an onsite position and it is not eligible for visa sponsorshipWhat You'll DoAs a Network Security Engineer, you will engineer and support the network and network-focused security services that connect and protect enterprise users, systems, and sites.You will:Design, deploy, and support datacenter and campus switching, routing, VLANs, VRFs, high availability, capacity planning, and network segmentation.Administer next-generation firewalls, security zones, NAT, threat-prevention services, firewall policy lifecycle, and least-privilege access controls.Engineer WAN, internet-edge, remote-site, remote-access VPN, and site-to-site VPN connectivity, including integrations with identity, MFA, and device-trust services.Design and support corporate and guest wireless, controllers, access points, RF performance, 802.1X, network access control, device profiling, and secure authentication.Configure load balancers, virtual servers, pools, health monitors, persistence, TLS termination, and high-availability services.Manage the network-facing certificate lifecycle and PKI integrations.Engineer and operate secure web and DNS controls, network detection and response, security logging, SIEM integrations, and security-control health monitoring.Partner with the Security Operations Center on alert tuning, investigations, evidence gathering, and operational security use cases.Support secure DNS, DHCP, and IP address management and maintain telemetry, flow data, logging, alerting, packet analysis, and service dashboards.Maintain secure configuration baselines, backups, firmware and software lifecycle, and remediation of network-device and security-tool vulnerabilities.Automate repeatable work using APIs, scripting, and infrastructure-as-code practices.Develop and test network and security-platform recovery and failover capabilities.Prepare change and rollback plans and provide incident escalation, containment support, root-cause analysis, and vendor coordination. This role also:Works independently within established standards and change processes.Provides technical leadership for projects and mentors peers.Participates in technology evaluations, proof-of-concepts, cross-functional initiatives, backup support, and knowledge transfer. What You BringBachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related field. Equivalent combination of education, training, and directly related work experience may be considered.Ideally 5+ years of progressive experience supporting enterprise network and network-security infrastructure, including switching, routing, firewall administration, VPN, wireless, and troubleshooting.Strong knowledge of enterprise LAN/WAN, datacenter switching, routing, firewalls, VPN, wireless, NAC, load balancing, PKI and certificates, DNS, DHCP, IPAM, and secure configuration management.Hands-on experience operating cybersecurity tooling such as secure web and DNS services, network detection and response, vulnerability management, SIEM and logging integrations, and security monitoring.Experience with network and security automation using Python, PowerShell, Ansible, Terraform, APIs, or comparable tools.Working knowledge of NIST CSF, CIS Controls, incident-response practices, and applicable regulatory or industry requirements, including NERC CIP where relevant to the IT environment.Strong analytical, troubleshooting, documentation, communication, collaboration, and customer-service skills. Preferred QualificationsEnterprise Network EngineeringExperience engineering highly available datacenter, campus, WAN, internet-edge, remote-site, wireless, and VPN services.Experience with segmentation, least-privilege access, identity and MFA integrations, device trust, and network access control.Experience with load balancing, TLS termination, application delivery, certificate lifecycle management, and PKI integrations.Network Security & DetectionExperience operating next-generation firewalls, threat-prevention services, secure web or DNS controls, network detection and response, and vulnerability-management processes.Experience integrating network-security telemetry with SIEM, logging, alerting, dashboards, and incident-response workflows.Experience partnering with a SOC on investigation, tuning, containment, evidence, or root-cause activities.Automation, Resilience & OperationsExperience automating network or security operations through scripting, APIs, Ansible, Terraform, or infrastructure as code.Experience developing recovery, failover, configuration-backup, firmware-lifecycle, and vulnerability-remediation practices.Experience preparing changes, rollback plans, technical documentation, performance measures, and vendor-supported resolutions.CertificationsRelevant credentials such as CCNA, CCNP, ACP, PCNSE or equivalent firewall-vendor certification, CWNA, Security+, CISSP, AZ-700, or similar certifications are preferred. Advantages of Working at GSOCWorking at GSOC means more than just a job it's an opportunity to contribute to work that truly matters. Mission-Driven ImpactYour work supports secure, reliable corporate network services and cybersecurity capabilities used across GSOC's enterprise environment. Network Engineering & Cybersecurity DepthApply both network engineering and hands-on security expertise across switching, routing, wireless, firewalls, VPN, application delivery, monitoring, automation, and incident support. Technical Leadership & Continuous ImprovementLead technical projects, mentor peers, evaluate new technologies, automate repeatable work, and strengthen resilience, visibility, and operational supportability. Strong Values and Professional StandardsWork in an environment grounded in accountability, collaboration, integrity, security, compliance, and continuous improvement. Work Environment & BenefitsGSOC offers a professional, collaborative work environment with competitive compensation, comprehensive benefits, and a commitment to creating a respectful and inclusive workplace.Participation in an on-call rotation, emergency support, and scheduled maintenance outside normal business hours is required. Why Join GSOCAt GSOC, you will help engineer the network and security services that enable dependable business operations, secure access, security visibility, and resilient enterprise technology.You'll collaborate across infrastructure, cybersecurity, applications, service desk, and vendor teams while expanding your technical leadership and automation capabilities. Apply TodayIf you're ready to combine enterprise network engineering and cybersecurity expertise in a hands-on role supporting reliable, protected operations, we encourage you to apply. GSOC does not accept unsolicited resumes or candidate submissions from staffing agencies, search firms, or third-party recruiters. Any unsolicited resumes submitted without a valid, executed agreement will become the property of GSOC, and no placement fee will be paid. Job Posted by ApplicantPro

Job Description Job Description Description: MDVIP: Transforming Primary Care, One Patient at a Time MDVIP is a national leader in personalized healthcare, empowering over 425,000 members to achieve their health and wellness goals through a network of more than 1,400 concierge primary care physicians. Our program emphasizes preventive medicine, offering comprehensive screenings, advanced diagnostics, and individualized wellness plans. Recognized as a Great Place to Work since 2018, MDVIP is committed to excellence in patient care and employee satisfaction. Position Summary The Network Security Engineer is an individual contributor role reporting to the Sr. Network Operations Manager. This is a contract-to-perm position (6-month contract), based in Boca Raton, FL (Hybrid), supporting the Boca Raton and Atlanta (ATL) data centers. This role provides dedicated engineering capacity for the ownership, hardening, and reliability of the organization's on-premises and hybrid infrastructure. The Network Security Engineer sustains a predictable remediation cadence across recurring security obligations - including monthly patching, zero-day response, vulnerability remediation, OS hardening, and cloud security score - while maintaining core platform services that underpin 24/7 operational reliability. This role is critical to reducing key-person risk, closing the capacity gap between rising compliance/audit workloads and existing staffing, and ensuring remediation tied to penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments is completed on schedule. Key Responsibilities Security Remediation & Compliance Execute remediation for findings from penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments, ensuring items are tracked to closure within defined SLAs; work with Project Managers, technology stack owners, and third-party resources to ensure timely delivery. Lead monthly patching cycles and rapid zero-day response across on-prem and hybrid server environments. Apply security remediations on infrastructure appliances including Cisco switches, firewalls (Palo Alto, Fortinet, Cisco Meraki), Linux appliances, and the virtual server environment and SANs (VMware, vSphere). Perform vulnerability remediation and OS/system hardening in line with established security baselines and audit requirements. Maintain a remediation burndown and support reporting on patch/vulnerability KPIs, including critical remediation timelines and cloud security score. Core Platform & Infrastructure Ownership Track Azure Security Score trends and drive remediation of flagged recommendations, providing regular posture reporting to leadership and audit stakeholders. Manage the full PKI infrastructure/SSL certificate lifecycle, including issuance, renewal, tracking, and remediation of expiring or non-compliant certificates, and manage key vault rotations for critical cloud-hosted applications. Utilize automation tools to deploy required machine certificates across the organization. Manage syslog retention and forwarding across on-premises and cloud infrastructure, supporting the Security team's SIEM ingestion, correlation, and compliance reporting needs. Administer network micro-segmentation using Illumio, including policy design, enforcement, and ongoing tuning. Review and administer security tools to harden network edge security, including next generation firewalls, SD-WAN, and switching, striving for zero trust networks. Manage wireless security, including network access control (NAC), utilizing Cisco wireless and HPE Aruba ClearPass. Administer Identity and Access Management/Privileged Access Management (IAM/PAM) using BeyondTrust for remote server access, including access reviews and privileged session controls. Manage and review Azure RBAC roles and access privileges, and perform Active Directory hardening in compliance with discovered vulnerabilities and best practices. Review and secure SDLC servers and hosted applications, both on-premises and in Azure, applying measures to keep all public endpoints secure. Operational Reliability & Risk Reduction Balance day-to-day operational demands (SSL renewals/rotations, security remediation, configuration hardening, troubleshooting) with planned, time-bound deliverables. Identify and reduce single-point-of-failure risk by documenting procedures and cross-training across PKI, AD, cloud access, segmentation, and patching functions. Partner with the Azure DevOps and Security teams to align on-prem/hybrid remediation with broader cloud governance and security initiatives. Escalate emerging risks, audit exceptions, and outage-driving conflicts between operational and remediation priorities to leadership. Key Competencies Analytical: synthesizes complex or diverse technical information, using intuition and experience to complement data. Collaboration: openly partners with security operations, DevOps, and business stakeholders, valuing diverse perspectives and building productive relationships. Communication: listens and responds effectively to stakeholder needs; writes and speaks clearly and persuasively. Initiative and personal accountability: identifies and creates solutions independently, sets and meets deadlines, and reports timely and prepared. Problem solving/decision making: thinks strategically, drawing on diverse sources to identify issues, risks, and trends and determine optimal, timely solutions. Strong troubleshooting skills and the ability to manage competing priorities between reactive operational work and scheduled remediation projects. Ability to support 24/7 platform reliability, including scheduled evening and weekend work for monthly patching cycles, zero-day response, and maintenance outside normal business hours. Ability to travel periodically between the Boca Raton, FL and Atlanta (ATL) data centers as needed. Requirements: Qualifications Required Qualifications Bachelor's degree in Computer Science, Information Security, or a related field; at least five (5) years of related business experience in network security, systems engineering, or infrastructure operations in an enterprise environment, or an equivalent combination of education and professional experience. Hands-on experience with both on-premises and cloud infrastructure platforms, including vulnerability management, patch management, and OS hardening across Windows and/or Linux server environments. Experience with PKI/SSL certificate lifecycle management and IAM/PAM tools (e.g., BeyondTrust or equivalent). Experience partnering with security operations/SIEM teams to onboard new log sources and ensure reliable syslog delivery from network infrastructure. Working knowledge of hybrid Active Directory/Microsoft Entra ID environments and familiarity with network segmentation concepts and tools (e.g., Illumio or comparable micro-segmentation platforms). Experience supporting audit and compliance remediation cycles, such as HIPAA assessments, SRAs, or penetration test findings. Proficiency with firewalls and network security appliances (Palo Alto, Fortinet, Cisco Meraki, Cisco switches), SD-WAN/next-generation firewall administration, and wireless security/NAC (Cisco wireless, HPE Aruba ClearPass). This is a hybrid role based in Boca Raton, FL, with periodic on-site support required at the Boca Raton and Atlanta (ATL) data centers. At no time may work be performed, or computer systems accessed, from outside of the U.S. Preferred Qualifications Vendor-specific certifications, Microsoft Azure, Security+, CISSP, GIAC, or an equivalent security certification. Scripting/automation experience (e.g., PowerShell) for remediation and hardening tasks. Why Join MDVIP? Be part of a mission-driven organization leading innovation in personalized healthcare. Drive transformation and growth in a dynamic, fast-paced environment. Competitive Compensation: Attractive base salary complemented by performance-based incentives. Comprehensive Benefits: Health, dental, vision insurance, and retirement plans. Professional Development: Access to ongoing training and leadership development programs. Positive Work Environment: Consistently recognized as a Great Place to Work , fostering a culture of collaboration and excellence. MDVIP is an Equal Opportunity Employer and is committed to fostering an inclusive and diverse workplace. We welcome applicants of all backgrounds and do not discriminate based on race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other protected status. We believe that diversity and inclusion drive innovation and strengthen our company culture. If you require accommodations during the application or interview process, please let us know, and we will be happy to assist. Pay Transparency: Our compensation reflects the cost of labor across appropriate US geographic markets. Pay is based on several factors including but not limited to market location and may vary depending on job-related knowledge, skills, and education/training and a candidate's work experience. Hired applicants are offered annual incentive compensation programs, subject to applicable eligibility requirements . click apply for full job details