IT Network Specialist

AP MAX INC•Houston, TX

5d•$85,000 - $125,000•Onsite

About The Position

Allia Health Group is a fast-growing digital health system revolutionizing metabolic, hormonal, and longevity care. As the parent organization behind Brello Health (women's telehealth and longevity programs), HelloWellness (men's telehealth), Southend Pharmacy (a state-licensed 503A compounding pharmacy), and Zito Care (our healthcare provider network), we deliver seamless, end-to-end care powered by a shared technology and AI platform. We remove barriers so clinicians can focus on patients and patients can access personalized, proactive care on their own terms — whether through telehealth visits, compounded medications, lab testing, wellness support, and more, all in one connected experience across 35+ states. Allia is building the future of healthcare by being clinician-first and patient-centered. We are innovative, empathetic, and accessible to our patients, combining cutting-edge tools with human-centered care to make high-quality longevity and wellness solutions affordable and available to more people. At Allia Health Group, you're part of something bigger — helping shape a mission-driven enterprise that's scaling rapidly, solving real problems in healthcare inefficiencies, and making a tangible difference in people's lives every day.

Requirements

Bachelor's degree in information technology, computer science, network engineering, or a related field preferred. Equivalent hands-on experience is accepted in place of a degree.
CCNA, or equivalent vendor certification for comparable platforms (JNCIA, Aruba ACSA, Fortinet FCP), or demonstrated equivalent skill
CompTIA Security+, or equivalent security fundamentals credential
5-8 years in network administration or network engineering
At least 2 years owning a production network environment, including change decisions and escalation, rather than working assigned tickets within someone else's design
Multi-site experience including carrier circuit management and redundant path failover
Direct, hands-on firewall rule administration — creating, reviewing, and removing rules under a change process
Enterprise wireless deployment and troubleshooting

Nice To Haves

Firewall certification for Palo Alto PCNSA/PCNSE, Fortinet NSE, Cisco Firepower
CWNA (Certified Wireless Network Administrator)
Cisco CyberOps Associate, GIAC GCIH, or comparable incident response training
Built centralized logging, monitoring, or SIEM capability from the ground up, including choosing what to collect, configuring retention, and tuning alerts.
Network segmentation in a regulated or production environment — healthcare, pharmaceutical, manufacturing, or PCI-scoped
Wireless deployment supporting handheld scanners or mobile equipment in a warehouse, production floor, or clinical setting
Participation in security incident response, including containment and post-incident documentation
Producing evidence for compliance audits (HIPAA, SOC 2, PCI, HITRUST)
HIPAA and SOC 2 specifics, pharmacy operations, and USP 797/800 controlled-area procedures.
Candidates with PCI, clinical, or manufacturing OT backgrounds carry transferable instincts and should not be screened out for lacking healthcare experience.

Responsibilities

Design and maintain network zones that separate compounding production systems, PHI-bearing workstations, clinical devices, administrative users, and guest or BYOD traffic.
Own the firewall rule lifecycle, including documented periodic review, change approval, and elimination of undocumented or overly permissive rules.
Deploy and operate centralized log collection spanning firewalls, switches, wireless, servers, endpoints, and pharmacy production systems, with retention configured to the standard set by the compliance program.
Build tuned alert rules with clear severity tiers routed to a named responder.
Track throughput, latency, packet loss, and capacity on production-critical paths, watching trends so problems surface before they turn into outages.
Manage carrier circuits and redundant paths for the pharmacy and supporting sites, and test failover on a schedule.
Deploy enterprise wireless with certificate-based authentication and separate production, corporate, and guest SSIDs, tuned for the density of scanners and mobile devices on the production floor.
Administer VPN and Zero Trust network access for remote staff and offshore contractors, in coordination with the Systems Administrator (Identity & IAM).
Run regular scans of network-attached infrastructure and track fixes to closure, documenting risk acceptance where a fix is deferred.
Lead the technical side of security incidents, covering detection, triage, containment, eradication, and the write-up afterward.
Act immediately on lower-severity events such as isolating an endpoint, disabling an account, or blocking an address, and notify afterward. Escalate to the IT Operations Lead when there is suspected PHI exposure, when an action would affect compounding production, or when an incident stays open past its severity clock.
Version all network configurations, keep topology documentation current, and produce evidence supporting SOC 2 change-management controls.
Hold carriers and hardware vendors accountable to contracted service levels, and plan end-of-life refresh before equipment becomes an availability risk.
Provide on-site coverage for the IT Support Specialist during absences or overlapping production incidents, following documented runbook procedures only.