Senior Engineer, Network Security

Lifepoint Health•Brentwood, TN

1d•Remote

About The Position

Lifepoint Health is hiring a remote Senior Engineer, Network Security, based in Brentwood, Tennessee, with up to 10% travel. The role interfaces with end users and vendors to assess, recommend, design, and implement network security solutions, firewall rules, and policies. It manages Palo Alto, Cisco, and Fortinet security devices and conducts network reviews to identify improvements to the organization’s security posture. The position focuses on designing, deploying, managing, securing, and troubleshooting enterprise security infrastructure, and calls for a self-motivated, flexible professional able to multitask in a fast-paced environment. The engineer serves as a network security lead and escalation point on projects and complex security or remote-connectivity issues. The role works with engineering, operations, cybersecurity, management, end users, and vendors to develop secure solutions, policies, and procedures. It includes firewall and VPN administration, Palo Alto Prisma Access SASE deployments, security reviews, automation, and maintenance. The employee may access or work with sensitive and confidential information and is expected to understand healthcare compliance, including HIPAA. The position is remote, with workers expected to be available during normal business hours—8 a.m. to 5 p.m., Monday through Friday—unless otherwise approved. Schedules may vary based on business needs. On-site work environments are described as well-lit, ventilated, and climate-controlled offices with routine office equipment. Hospital environments may involve exposure to bloodborne pathogens, contagious illnesses, toxic chemicals, and biohazardous materials, potentially requiring protective equipment.

Requirements

At least 6 years of experience as a Network Engineer or Network Security Engineer in a large-scale inter-network environment, with proven complex network support experience.
Established experience implementing and supporting Palo Alto Networks solutions.
Experience supporting networks with multiple routing protocols, including OSPF, EIGRP, BGP, eBGP, and static routing.
Ability to troubleshoot using protocol analysis and firewall log review.
Effective oral and written communication skills to lead planning and troubleshooting discussions and work with end users to understand and solve business problems.
Ability to deliver clearly defined, systematically executed, results-oriented solutions and adhere to project and change-management processes and standards.
Ability to perform technical consulting and problem-solving in a complex enterprise.
Current working knowledge of Microsoft Office 365 products.
Remote environment adequate to support daily technical and professional activities.
Understanding of healthcare regulatory and compliance requirements, such as HIPAA, and skill applying policies and procedures.
Knowledge of Business Office Standards and Recommended Practices.
Authorization to work in the United States without employer sponsorship.

Nice To Haves

BS/BE degree in computer science, cybersecurity, or a related IT field, or equivalent experience.
PCNSE or another intermediate-to-advanced, industry-recognized certification.
Additional experience with Cisco and Fortinet.
Experience with Google Cloud and Azure Cloud networks.

Responsibilities

Serve as Network Security lead on multifunctional project teams within IT and across lines of business.
Participate in network security planning, design, and implementation.
Act as an escalation point for complex network security and remote-connectivity challenges, collaborating with engineering and operations teams to gather requirements, design secure solutions, and communicate best practices.
Provide subject matter expertise on network security, firewalls, zero-trust architectures, and industry best practices.
Design firewall rules that support business needs while following security policies and best practices.
Configure and maintain firewalls, VPNs, and IPSEC tunnel solutions from Palo Alto, Cisco, and Fortinet.
Configure and maintain Palo Alto Prisma Access SASE to secure internet egress for locations transitioning to SD-WAN, partnering with network engineering and other teams on deployments.
Work with the Cybersecurity team to identify network-security improvements and implement risk-mitigation solutions.
Conduct periodic firewall reviews against company standards, regulatory requirements, and industry best practices.
Configure, deploy, and support VPN clients on Windows, macOS, Linux, iOS, and Android, and troubleshoot complex connectivity and performance issues.
Apply upgrades and system patches, perform periodic maintenance, and continuously improve the reliability and security posture of the environment.
Work with management to develop, communicate, implement, and maintain network policies, standards, and procedures.
Automate network security operations using Ansible, Python, PowerShell, and REST APIs to reduce manual, error-prone changes.
Apply healthcare regulatory and compliance policies and procedures, including HIPAA.