Security Engineer – Network & Infrastructure Security

Amplity Health

About The Position

Amplity is seeking an experienced Security Engineer to join its IT Security team. This is a hands-on engineering role focused on supporting and improving security controls across network, cloud, identity, endpoint and SaaS environments. A key part of the role is owning network security technologies and ensuring connectivity among users, offices, cloud environments and third parties is appropriately secured and monitored. The successful candidate will combine strong networking fundamentals with practical security engineering experience. They will troubleshoot complex technical issues, implement security controls, and work with Infrastructure, DevOps and broader IT teams. The role also supports security monitoring, incident investigation, vulnerability remediation, technology projects, security assessments and evidence for security frameworks.

Requirements

Strong hands-on experience with enterprise networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, NAT and VLANs.
Enterprise firewall administration and troubleshooting experience.
Experience with firewall policies, network segmentation and access-control design.
Experience with site-to-site and remote-access VPN technologies.
Experience analyzing network traffic and logs to troubleshoot connectivity and security issues.
Experience with network security architecture and secure connectivity.
Cloud networking and security experience; Microsoft Azure is preferred.
Experience with security incident investigation and troubleshooting.
Experience with vulnerability management and remediation.
Experience working within a modern Microsoft enterprise environment.
Strong technical troubleshooting skills and ability to work methodically across network, infrastructure and security layers.
Ability to take ownership of technical issues from investigation through resolution.
Ability to balance security requirements with operational and business needs.
Strong understanding of least privilege, defense in depth and Zero Trust principles.
Ability to communicate technical risks clearly to technical and non-technical stakeholders.
Ability to work independently and collaborate with Infrastructure, DevOps and other IT teams.
Curiosity and willingness to learn technologies beyond one’s immediate area of expertise.
Bachelor’s degree in Computer Science, Information Technology or a related field, or equivalent practical work experience.
At least 5 years of hands-on experience in systems administration, network infrastructure or enterprise IT operations.

Nice To Haves

Experience with Palo Alto Networks, Fortinet, Cisco or similar next-generation firewall platforms.
Experience with Microsoft Azure networking, including VNets, NSGs, routing and private connectivity.
Experience with Microsoft Entra ID.
Experience with Microsoft Intune.
Experience with Microsoft Defender.
Experience with Netskope or other SSE/SASE technologies.
Experience with SIEM and security monitoring platforms.
Experience with EDR/XDR technologies.
Experience with Infrastructure-as-Code or automation, such as PowerShell, Python or Terraform.
Experience with security in DevOps or CI/CD environments.
Experience with cloud security posture management.
Experience in SOC 2, CIS Controls, NIST CSF or ISO 27001 environments.
Palo Alto PCNSA/PCNSE certification.
Fortinet FCP/FCSS certification.
Cisco CCNA/CCNP certification.
Microsoft AZ-500 certification.
Microsoft SC-200 or SC-300 certification.
CompTIA Security+ certification.

Responsibilities

Take technical ownership of network security controls, including next-generation firewalls, firewall policies, VPNs, network segmentation and secure connectivity.
Manage firewall rulesets, including creating, reviewing, optimizing and removing unnecessary or obsolete access rules.
Troubleshoot network and firewall issues across corporate, cloud and remote-access environments.
Support the design and implementation of secure network architectures, including segmentation and least-privilege connectivity.
Review network traffic, logs and security events to identify suspicious activity and assist with investigations.
Assess security implications of new network connections, third-party integrations and infrastructure changes.
Work with Infrastructure and DevOps teams to incorporate security into network and cloud architecture.
Follow formal change management processes for network and firewall changes, including obtaining approvals, testing changes, documenting rollback plans and performing post-change validation.
Maintain documentation covering network security architecture, firewall configurations and operational procedures.
Manage and improve security technologies across endpoint, cloud, identity, email and network environments.
Investigate security alerts and provide technical support during security incidents.
Identify vulnerabilities and configuration weaknesses and work with technology owners on remediation.
Implement security controls based on risk, security standards and organizational requirements.
Support security monitoring and detection capabilities and improve visibility across the technology environment.
Participate in vulnerability management, security assessments and remediation activities.
Support security aspects of technology projects, migrations and integrations.
Assist with security evidence and technical controls supporting frameworks such as SOC 2, CIS Controls and ISO 27001-aligned practices.
Contribute to continuous improvement of security tooling, processes and automation.
Demonstrate Amplity’s EPIIC values: Excellence, Passion, Innovation, Integrity and Collaboration.