Network & Security Engineer I

maxRTE

10h

About The Position

As a Network & Security Engineer at maxRTE, you will help own the security and connectivity of the company’s AWS cloud environment, network infrastructure, and internal IT operations. This high-impact, varied role supports the security, reliability, and scalability of systems used by healthcare providers and patients. You will collaborate closely with the platform engineering team to align infrastructure and security decisions with product goals. The role spans networking, cloud security, code security, and IT security. It involves improving client and partner connectivity, monitoring and remediating vulnerabilities, maintaining HIPAA-compliant configurations, securing code and container pipelines, and managing device and identity security for a distributed remote workforce.

Requirements

At least 5 years of experience in network engineering, security engineering, cloud infrastructure, or a related role.
Deep hands-on experience with AWS networking, including VPC, Site-to-Site VPN, Transit Gateway, Route 53, Elastic Load Balancing, API Gateway, PrivateLink, security groups, and NACLs.
Strong networking fundamentals, including TCP/IP, IPsec, BGP, NAT, DNS, and TLS, with experience troubleshooting VPN and TCP connections with external partners.
Hands-on experience with AWS security services, including Security Hub, Inspector, GuardDuty, IAM, CloudTrail, KMS, and WAF.
Experience identifying, triaging, and remediating security vulnerabilities across cloud resources, container images, and application code dependencies.
Ability to read, understand, and make targeted fixes in Python, C#/.NET, and/or Node.js codebases.
Proven ability to design and implement Infrastructure as Code using Terraform, CloudFormation, or equivalent.
Experience managing IT administration for a distributed team, including MDM/device management, identity providers, and RBAC.
Strong written and verbal communication skills, with the ability to translate technical findings into clear action items for engineering and leadership.
Ability to work autonomously in a small-team environment with broad, varied ownership.
Understanding of HIPAA compliance requirements and their application to cloud infrastructure, networks, and devices.

Nice To Haves

Experience with Rippling for device management, identity, and HR/IT workflows.
AWS Certified Security Specialty, AWS Certified Advanced Networking Specialty, CISSP, or similar certifications.
Experience with CI/CD security tooling such as Renovate, Snyk, SonarQube, or GitHub Advanced Security.
Experience supporting SOC 2, HITRUST, or similar compliance audits.
Familiarity with healthcare revenue cycle management, EDI/X12, HL7, or payer connectivity.
Experience with ECS or other containerized workload management.
Background working in a SaaS or health tech environment.

Responsibilities

Own and improve Site-to-Site VPN and TCP connectivity for clients and partners, including VPC architecture, route tables, subnets, security groups, and NACLs.
Design and implement automated client onboarding experiences using templating and Infrastructure as Code.
Design, secure, and maintain API networking, including API Gateway, load balancers, PrivateLink, Route 53, TLS, and WAF configurations.
Troubleshoot connectivity issues with client and partner network teams, including IPsec tunnels, routing, NAT, and IP allowlisting.
Harden existing network configurations to improve security and reduce manual work for new client connections.
Help manage interface infrastructure supporting healthcare data integrations, ensuring availability, performance, and observability.
Monitor and remediate vulnerabilities across AWS resources, including Lambda functions, ECR images, and EC2 instances, using AWS Inspector, Security Hub, GuardDuty, and related tools.
Automate vulnerability prevention through image lifecycle policies, patch management with SSM Patch Manager, and Security Hub automation rules.
Reduce vulnerability counts over time and define and track remediation SLAs.
Maintain and improve HIPAA-compliant configurations across cloud resources and services.
Support security questionnaires, vendor reviews, and audits by documenting the company’s security posture accurately.
Patch and resolve critical and high-severity vulnerabilities in Python, C#, and Node.js dependencies and container images, escalating larger code changes to platform or product engineers when needed.
Implement and maintain dependency scanning, automated dependency updates, secret scanning, and static analysis in CI/CD pipelines.
Harden container base images and build pipelines to reduce vulnerabilities at their source.
Partner with engineers on secure coding practices and review security-sensitive changes.
Manage device security, enrollment, and lifecycle, including encryption, OS patch compliance, and remote wipe capabilities using Rippling.
Own identity and access management across AWS, internal applications, and SaaS tools, enforcing least privilege, RBAC, SSO, and MFA.
Administer device vulnerability scanning and ensure endpoint compliance for a distributed remote workforce.
Support onboarding and offboarding, including provisioning and deprovisioning accounts, devices, and access across platforms.
Help develop and maintain security policies, incident response procedures, and security awareness practices.