Network Security Manager | PAM Health Corporate

PAM Health Corp Business Office•Plano, TX

18d

About The Position

The Network Security Manager / Architect is responsible for the architecture, implementation, and operational ownership of PAM Health's enterprise network security and secure WAN environment. The role leads the Network Firewall Security function within Infrastructure and is accountable for firewall, SD-WAN, VPN, segmentation, and hybrid-cloud network security across hospitals, corporate locations, and cloud environments. This hands-on technical architect and team leader designs and implements security solutions and policy standards while supervising the network security team. The role partners with Network Infrastructure, Information Security, Cloud/AI, and application teams to deliver resilient, scalable, secure connectivity that supports patient care and clinical operations. It also provides technical leadership, supports regulated-industry controls including HIPAA, and serves as a technical point of contact for IT leadership and clinical stakeholders. Occasional travel to healthcare facilities and participation in an on-call rotation may be required.

Requirements

8+ years of progressive experience in enterprise network engineering, network security, or infrastructure security roles.
5+ years of hands-on experience designing, implementing, and operating next-generation firewalls, VPNs, secure WAN, and/or SD-WAN solutions.
Demonstrated experience serving as a technical architect or lead for complex multi-site network security deployments.
Hands-on Microsoft Azure networking experience, including virtual networks, routing, hybrid connectivity, and virtual firewall/network appliance deployments.
Advanced knowledge of enterprise firewall architecture, secure SD-WAN, IPsec VPNs, network segmentation, high availability, policy design, and threat-prevention controls.
Strong working knowledge of Fortinet FortiGate, FortiManager, FortiAnalyzer, and Fortinet Secure SD-WAN technologies.
Advanced Microsoft Azure networking knowledge, including VNets, subnets, peering, route tables/UDRs, VPN Gateway, ExpressRoute concepts, and virtual network appliances/firewalls.
Strong understanding of TCP/IP, BGP, OSPF, VLANs, VRFs, DNS, DHCP, NAT, QoS, and enterprise routing design.
Knowledge of network security monitoring, logging, syslog/SIEM integration, performance analysis, and advanced troubleshooting.
Ability to design scalable, resilient hybrid-cloud and multi-site network security architectures and translate business or security requirements into practical technical controls.
Strong understanding of ITSM processes, including incident, change, problem, and configuration management.
Strong leadership, documentation, project coordination, vendor management, communication, and decision-making skills.
Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Network Engineering, or a related field preferred; equivalent combination of education, certifications, and relevant experience considered.

Nice To Haves

Prior direct people-management experience.
Healthcare or other regulated-industry experience.
Google Cloud networking experience, including VPCs, routing, Cloud VPN/Interconnect concepts, and firewall policy.
Relevant Fortinet, Microsoft Azure, Cisco, or network security certifications.

Responsibilities

Own the architecture, implementation, lifecycle management, and operational governance of enterprise firewalls, SD-WAN, VPN, segmentation, and secure network connectivity.
Architect and lead deployment of Fortinet solutions, including physical and virtual FortiGate firewalls, FortiManager, FortiAnalyzer, and Secure SD-WAN across hospitals, corporate locations, and cloud environments.
Develop standardized firewall and SD-WAN configurations, templates, routing designs, security policies, NAT, VPNs, segmentation, high availability, and security profiles.
Design and operate Microsoft Azure network security integration, including virtual networks, subnets, peering, route tables/UDRs, hybrid connectivity, and virtual firewall/network appliance deployments as part of the SD-WAN fabric.
Establish secure network connectivity patterns for cloud and third-party services, including Google Cloud Platform connectivity when required by business or application needs.
Own firewall policy governance, rule lifecycle management, change review, exception handling, recertification, and documentation standards.
Monitor and optimize security, availability, performance, capacity, licensing, software lifecycle, and resiliency of firewall and SD-WAN platforms.
Lead technical escalation, incident response, and root cause analysis for firewall, SD-WAN, VPN, and hybrid-cloud connectivity issues.
Manage, prioritize, mentor, and develop the Senior Network Security Engineer while providing technical direction to the broader Network Infrastructure team.
Partner with Information Security, Cloud/AI, Infrastructure, application teams, vendors, and service providers on secure designs, new site deployments, migrations, and complex changes.
Maintain architecture diagrams, standards, implementation documentation, runbooks, audit evidence, and controls supporting HIPAA, organizational security, disaster recovery, and business continuity requirements.
Coach, evaluate, develop, and inspire staff; set expectations and recognize achievements.
Manage company resources responsibly and adhere to company policies, procedures, and safety guidelines.
Identify problems, analyze options, involve others in seeking solutions, and implement appropriate responses.
Make timely, consistent, and ethical decisions using relevant information.
Align priorities with company vision, organize complex issues, measure outcomes, and adapt based on feedback.
Communicate clearly with peers, staff, customers, clinical stakeholders, and IT leadership; listen actively and negotiate effectively.
Promote quality improvement, timely and accurate work, and effective departmental performance.
Promote cooperation, collaboration, trust, credibility, and ethical conduct.
Maintain up-to-date skills through professional organizations and/or continuing education.
Provide courteous, compassionate, and professional customer service to clinical staff, hospital leadership, and business users.
Promote PAM Health's mission and vision and respect dignity and confidentiality by following applicable policies and procedures.
Communicate technical risks, impacts, and outcomes clearly and maintain adherence to HIPAA, security, and organizational policies.
Work in a manner that promotes safety, participate in OSHA-required training, follow applicable universal precautions and Employee Health requirements, report unsafe practices, and know the role to perform in an emergency.