IT Network & Security Engineer

Astiva Health•Orange, CA

14h•$85,000 - $130,000

About The Position

Astiva Health is a Medicare Advantage organization focused on delivering high-quality, coordinated care. The IT Network & Security Engineer designs, maintains, and secures enterprise network infrastructure and cloud environments connecting offices, staff, and core health data systems. The role is responsible for network reliability and defense-in-depth security controls, protecting Protected Health Information (PHI), enforcing the HIPAA Security Rule, and supporting compliance with CMS and other healthcare regulatory standards. The engineer works closely with IT, security, and business leadership. The position covers network infrastructure operations, perimeter and cyber defense, cloud security, vulnerability and incident management, access control, audit readiness, unified communications, vendor coordination, documentation, and disaster recovery. The role also participates in scheduled after-hours maintenance windows and an on-call rotation for emergency outages and security incidents.

Requirements

Bachelor's degree in information technology, computer science, cybersecurity, network engineering, or a related field, or equivalent practical experience.
At least 3 years of hands-on experience in network administration, network engineering, or enterprise network security.
Strong working knowledge of TCP/IP, routing and switching, VLAN segregation, DNS security, and IPsec/SSL VPN tunnels.
Experience configuring and managing enterprise firewalls and VPN solutions, such as Palo Alto, Fortinet, Cisco ASA/Firepower, or Meraki.
Experience with network monitoring and diagnostic tools and security log analysis, such as Wireshark, PRTG, SolarWinds, and SIEM platforms.
Understanding of network security best practices, including firewall policy management, network segmentation, MFA, and security log reviews.
Practical understanding of HIPAA Security Rule compliance, data privacy principles, and security frameworks such as NIST CSF and HITRUST.
Flexibility and willingness to participate in periodic weekend or after-hours maintenance windows and emergency on-call rotations.
Ability to read and interpret documents, write routine reports and correspondence, and speak effectively before groups and customers or employees.
Ability to perform basic arithmetic and compute rates, ratios, and percentages, and to draw and interpret bar graphs.
Ability to solve practical problems with limited standardization and interpret written, oral, diagrammatic, or schedule-based instructions.

Nice To Haves

Active industry security or networking certification, such as CISSP, CCNA, CCNP, CCSP, CompTIA Security+, or vendor credentials such as PCNSA/PCNSE.
Prior experience in healthcare, managed care, healthcare payer, or Medicare Advantage environments.
Deep technical knowledge of HIPAA compliance, CMS guidelines, and FDR vendor security oversight.
Hands-on experience with Microsoft Azure networking, Network Security Groups, ExpressRoute, Windows Server, Active Directory, or Microsoft Entra ID.
Scripting skills for network automation, security reporting, and task execution using PowerShell or Python.
Comfort using AI-assisted tools such as Claude, ChatGPT, or GitHub Copilot for network scripting, threat analysis, and documentation.

Responsibilities

Install, configure, and maintain network infrastructure, including routers, switches, firewalls, wireless access points, VPNs, and structured cabling.
Design, configure, and monitor next-generation firewalls, Web Application Firewalls, secure VPN tunnels, and Intrusion Detection/Prevention Systems.
Monitor network performance, availability, and capacity; troubleshoot and resolve connectivity issues for staff, business systems, and clinical integrations.
Manage firewall policies, micro-segmentation, and zero-trust remote access to protect PHI and comply with HIPAA Security Rule requirements.
Support secure connectivity and cloud security guardrails between on-premises offices and Microsoft Azure.
Apply firmware updates and security patches, run vulnerability scans, remediate findings, analyze SIEM logs, and respond to network security incidents.
Administer Multi-Factor Authentication, Role-Based Access Control, and Privileged Access Management frameworks for network infrastructure.
Follow change management procedures for network and security modifications, including maintenance scheduling, configuration backups, and tested rollback plans.
Participate in scheduled after-hours maintenance windows and an on-call rotation for emergency outages, critical security alerts, and system incidents.
Partner with compliance teams to gather technical evidence for HIPAA, HITRUST, NIST CSF, and CMS security audits, and perform technical security evaluations for First-Tier, Downstream, and Related Entities.
Support VoIP and unified communications systems and ensure appropriate Quality of Service for voice and video traffic.
Coordinate with ISPs, telecom providers, and hardware vendors; maintain inventory of network equipment, circuits, and licenses.
Maintain network topology maps, security policies, incident runbooks, and disaster recovery architectures.