IT Network & Security Engineer

Astiva Health•Orange, CA

About The Position

Astiva Health, Inc. is a healthcare provider specializing in Medicare and HMO services. The IT Network & Security Engineer designs, maintains, and secures enterprise network infrastructure and cloud environments that connect offices, staff, and core health data systems. The role works with IT, security, and business leadership to maintain network reliability and defense-in-depth controls, protect Protected Health Information (PHI), enforce the HIPAA Security Rule, and support compliance with CMS and other healthcare regulatory standards. The position covers network infrastructure and operations, perimeter defense, performance monitoring, troubleshooting, cloud security, vulnerability and incident management, access control, audit readiness, unified communications, vendor coordination, documentation, and disaster recovery. The employee also participates in scheduled after-hours maintenance windows and an on-call rotation for emergencies and critical incidents.

Requirements

Bachelor's degree in information technology, computer science, cybersecurity, network engineering, or a related field, or equivalent practical experience.
At least 3 years of hands-on experience in network administration, network engineering, or enterprise network security.
Working knowledge of TCP/IP, routing and switching, VLAN segregation, DNS security, and IPsec/SSL VPN tunnels.
Experience configuring and managing enterprise firewalls and VPN solutions, such as Palo Alto, Fortinet, Cisco ASA/Firepower, or Meraki.
Experience with network monitoring and diagnostic tools and security log analysis, such as Wireshark, PRTG, SolarWinds, or SIEM platforms.
Understanding of network security practices, including firewall policy management, network segmentation, MFA, and security log reviews.
Practical understanding of HIPAA Security Rule compliance, data privacy principles, and security frameworks such as NIST CSF and HITRUST.
Flexibility and willingness to participate in periodic weekend or after-hours maintenance windows and emergency on-call rotations.
Ability to read and interpret safety rules, operating and maintenance instructions, and procedure manuals; write routine reports and correspondence; and speak effectively before groups and customers or employees.
Ability to perform basic arithmetic, compute rates, ratios, and percentages, and draw and interpret bar graphs.
Ability to solve practical problems, work with concrete variables where standardization is limited, and interpret written, oral, diagrammatic, or schedule-based instructions.

Nice To Haves

Active security or networking certifications such as CISSP, CCNA, CCNP, CCSP, CompTIA Security+, or vendor-specific credentials such as PCNSA or PCNSE.
Prior experience in healthcare, managed care, healthcare payer, or Medicare Advantage environments.
Deep technical knowledge of HIPAA compliance, CMS guidelines, and FDR vendor security oversight.
Hands-on experience with Microsoft Azure networking, Network Security Groups, ExpressRoute, Windows Server, Active Directory, or Microsoft Entra ID.
Scripting skills for network automation, security reporting, and task execution using PowerShell or Python.
Comfort using AI-assisted tools such as Claude, ChatGPT, or GitHub Copilot for network scripting, threat analysis, and documentation.

Responsibilities

Install, configure, and maintain network infrastructure, including routers, switches, firewalls, wireless access points, VPNs, and structured cabling.
Design, configure, and monitor next-generation firewalls, Web Application Firewalls, secure VPN tunnels, and IDS/IPS systems.
Monitor network performance, availability, and capacity; troubleshoot connectivity issues affecting staff, business systems, and clinical integrations.
Manage firewall policies, micro-segmentation, and zero-trust remote access to protect PHI and comply with HIPAA Security Rule requirements.
Support secure connectivity and cloud security controls between on-premises offices and Microsoft Azure, including VNets, ExpressRoute or VPN gateways, Network Security Groups, and Entra ID.
Apply firmware updates and security patches; run vulnerability scans, remediate findings, analyze SIEM logs, and respond to network security incidents.
Administer MFA, RBAC, and PAM frameworks for network infrastructure.
Follow change-management procedures for network and security modifications, including scheduling maintenance windows, backing up configurations, and maintaining tested rollback plans.
Participate in scheduled after-hours maintenance windows and an on-call rotation for emergency outages, critical security alerts, and system incidents.
Partner with compliance teams to gather technical evidence for HIPAA, HITRUST, NIST CSF, and CMS security audits; conduct technical security evaluations for FDRs.
Support VoIP and unified communications systems and ensure appropriate QoS for voice and video traffic.
Coordinate with ISPs, telecom providers, and hardware vendors; maintain inventory of network equipment, circuits, and licenses.
Maintain network topology maps, security policies, incident runbooks, and disaster recovery architectures.