Network Security Manager | PAM Health Corporate

PAM Health•Plano, TX

17d

About The Position

The Network Security Manager / Architect is responsible for the architecture, implementation, and operational ownership of PAM Health’s enterprise network security and secure WAN environment. The role leads the Network Firewall Security function within Infrastructure and is accountable for firewall, SD-WAN, VPN, segmentation, and hybrid-cloud network security across hospitals, corporate locations, and cloud environments. It combines hands-on technical architecture and solution implementation with team leadership and supervision of the network security team. The position partners with Network Infrastructure, Information Security, Cloud/AI, application teams, vendors, and service providers to deliver resilient, scalable, secure connectivity that supports patient care and clinical operations. It also maintains architecture and implementation documentation, operational runbooks, audit evidence, and controls supporting HIPAA, security, disaster recovery, and business continuity requirements. The role generally works indoors in well-lighted, well-ventilated areas and in hospital surroundings. Occasional travel to healthcare facilities may be required, and participation in an on-call rotation is expected. This is an exempt position.

Requirements

Eight or more years of progressive experience in enterprise network engineering, network security, or infrastructure security roles.
Five or more years of hands-on experience designing, implementing, and operating next-generation firewalls, VPNs, secure WAN, and/or SD-WAN solutions.
Demonstrated experience serving as a technical architect or lead for complex multi-site network security deployments.
Hands-on Microsoft Azure networking experience, including virtual networks, routing, hybrid connectivity, and virtual firewall/network appliance deployments.
Advanced knowledge of enterprise firewall architecture, secure SD-WAN, IPsec VPNs, network segmentation, high availability, policy design, and threat-prevention controls.
Strong working knowledge of Fortinet FortiGate, FortiManager, FortiAnalyzer, and Fortinet Secure SD-WAN technologies.
Advanced Microsoft Azure networking knowledge, including VNets, subnets, peering, route tables/UDRs, VPN Gateway, ExpressRoute concepts, and virtual network appliances/firewalls.
Strong understanding of TCP/IP, BGP, OSPF, VLANs, VRFs, DNS, DHCP, NAT, QoS, and enterprise routing design.
Knowledge of network security monitoring, logging, syslog/SIEM integration, performance analysis, and advanced troubleshooting.
Ability to design scalable, resilient hybrid-cloud and multi-site network security architectures and translate business or security requirements into practical technical controls.
Strong understanding of ITSM processes, including incident, change, problem, and configuration management.
Strong leadership, documentation, project coordination, vendor management, communication, and decision-making skills.
Maintain strict adherence to HIPAA, security, and organizational policies.
Participation in an on-call rotation.
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Network Engineering, or a related field preferred; an equivalent combination of education, certifications, and relevant experience is considered.

Nice To Haves

Prior direct people-management experience.
Healthcare or other regulated-industry experience.
Google Cloud networking experience, including VPCs, routing, Cloud VPN/Interconnect concepts, and firewall policy.
Relevant Fortinet, Microsoft Azure, Cisco, or network security certifications.

Responsibilities

Own the architecture, implementation, lifecycle management, and operational governance of enterprise firewalls, SD-WAN, VPN, segmentation, and secure network connectivity.
Architect and lead deployment of Fortinet solutions, including physical and virtual FortiGate firewalls, FortiManager, FortiAnalyzer, and Secure SD-WAN across hospitals, corporate locations, and cloud environments.
Develop standardized firewall and SD-WAN configurations, templates, routing designs, security policies, NAT, VPNs, segmentation, high availability, and security profiles.
Design and operate Microsoft Azure network security integration, including virtual networks, subnets, peering, route tables/UDRs, hybrid connectivity, and virtual firewall/network appliance deployments as part of the SD-WAN fabric.
Establish secure network connectivity patterns for cloud and third-party services, including Google Cloud Platform connectivity when required by business or application needs.
Own firewall policy governance, rule lifecycle management, change review, exception handling, recertification, and documentation standards.
Monitor and optimize security, availability, performance, capacity, licensing, software lifecycle, and resiliency of firewall and SD-WAN platforms.
Lead technical escalation, incident response, and root cause analysis for firewall, SD-WAN, VPN, and hybrid-cloud connectivity issues.
Manage, prioritize, mentor, and develop the Senior Network Security Engineer while providing technical direction to the broader Network Infrastructure team.
Partner with Information Security, Cloud/AI, Infrastructure, application teams, vendors, and service providers on secure designs, new site deployments, migrations, and complex changes.
Maintain architecture diagrams, standards, implementation documentation, runbooks, audit evidence, and controls supporting HIPAA, organizational security, disaster recovery, and business continuity requirements.
Coach, evaluate, develop, and inspire staff; set expectations and recognize achievements.
Manage company resources responsibly and adhere to company policies, procedures, and safety guidelines.
Identify problems, analyze options, involve others in seeking solutions, and implement appropriate responses promptly and effectively.
Make clear, consistent, timely decisions with integrity and sound judgment.
Align priorities with company vision, measure outcomes, use feedback, and organize complex issues toward resolution.
Communicate effectively with peers, employees, customers, and stakeholders; listen actively and negotiate effectively.
Promote efficient, effective, high-quality work and identify opportunities for improvement.
Motivate others, build trust and credibility, maintain department morale, and promote honest and ethical behavior.
Encourage cooperation and collaboration and respond flexibly to others’ needs.
Maintain up-to-date skills through professional organizations and/or continuing education.
Provide professional, courteous support to clinical staff, hospital leadership, and business users.
Act as a technical point of contact for IT leadership and clinical stakeholders.
Communicate technical risks, impacts, and outcomes clearly and effectively.
Maintain strict adherence to HIPAA, security, and organizational policies.
Promote safety, participate in OSHA-required training, follow applicable universal precautions and Employee Health requirements, report unsafe practices, and understand the role in an emergency.
Promote PAM Health’s mission and vision, maintain customer service through courteous and compassionate communication, and respect dignity and confidentiality.