Clinical Engineering Medical Device Security Engineer II

CommonSpirit Health•Englewood, CO

About The Position

The CE Medical Device Network Engineer II will use the latest technology and testing analysis activities to ensure security measures are implemented throughout the entire medical device life cycle. They will successfully integrate medical device security systems and tools with the existing environment. In addition, this role partners with other Clinical Engineering technicians within the region to complete medical device related work efforts and projects that are of medium to high complexity. The Clinical Engineering (CE) Medical Device Network Engineer II works in conjunction with the Clinical Engineering Medical Device Security (CE MDS) Team for the development and implementation of remediation documentation. They have joint responsibility for maintaining and enhancing the security posture for CommonSpirit Health's medical devices, networks and information. Additionally they work directly with vendors to manage device vulnerabilities. They are jointly responsible for design, implementation and support of the Clinical Engineering IT environment. They will design, develop, configure and implement solutions to resolve technical and business issues of medium to high complexity related to medical device security. This position provides specialized repair (Radiology, Clinical Engineering and Clinical Engineering network devices) and maintenance services to medical treatment and diagnostic equipment. Essential Functions All associated Job responsibilities of the Clinical Engineering Medical Device Network Engineer I. Collaborate with cross-functional teams to architect solutions that strengthen security controls of network connected medical devices without disrupting device integrity or patient safety (e.g. network architecture, active directory, group policies, windows images, end point security tools, etc.) Tests configurations and deploys risk mitigation strategies in known and some unknown environments. Prepares, documents and presents detailed guidance for system configuration and risk mitigation. Detects, identifies and resolves vulnerabilities in devices or systems. Maintains thorough documentation and completes backups. Resolves technical challenges and provides support to field technicians utilizing innovative solutions. Troubleshoot and assist with recovery of medical devices due to issues associated with upgrades, patching, security vulnerabilities, threats, etc. Collaborates with the MDS team for the development and implementation of security remediation solutions associated with medical devices within the assigned region. Collaborates with vendors to manage device cyber vulnerabilities Coordinate efforts for medical device patching and updating firmware and/or applications appropriate for the medical device. Research medical device manufacturer's resources for approved patches and updates applicable to medical devices in all modalities The job summary and responsibilities listed above are designed to indicate the general nature of the work performed within this job. They are not designed to contain or be interpreted as a comprehensive inventory of all job responsibilities required of employees assigned to this job. Employees may be required to perform other duties as assigned.

Requirements

Bachelors in HTM, Computer Science, Technology, Business disciple upon hire, or equivalent professional experience required
Minimum of 5-6 Years in Clinical Engineering Networking Role or equivalent experience.
Experience with HIPAA/HITECH compliance standards.
Valid Drivers License

Nice To Haves

Experience working with the software development life cycle or project management methodologies in addition to Customer Service related experience.
This position requires participation in a rotational on-call schedule, including nights, weekends, and holidays. Candidates must be available to respond to urgent service needs outside of regular business hours and may be required to return to the facility on short notice.

Responsibilities

Collaborate with cross-functional teams to architect solutions that strengthen security controls of network connected medical devices without disrupting device integrity or patient safety (e.g. network architecture, active directory, group policies, windows images, end point security tools, etc.)
Tests configurations and deploys risk mitigation strategies in known and some unknown environments.
Prepares, documents and presents detailed guidance for system configuration and risk mitigation.
Detects, identifies and resolves vulnerabilities in devices or systems.
Maintains thorough documentation and completes backups.
Resolves technical challenges and provides support to field technicians utilizing innovative solutions.
Troubleshoot and assist with recovery of medical devices due to issues associated with upgrades, patching, security vulnerabilities, threats, etc.
Collaborates with the MDS team for the development and implementation of security remediation solutions associated with medical devices within the assigned region.
Collaborates with vendors to manage device cyber vulnerabilities
Coordinate efforts for medical device patching and updating firmware and/or applications appropriate for the medical device.
Research medical device manufacturer's resources for approved patches and updates applicable to medical devices in all modalities