Healthcare IT Network & Security Engineer

Astiva Health, Inc; California; On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

401(k)

Health Insurance

Life Insurance

Vision Insurance

Paid Time Off

Free Lunch On-Site

Job summary

Astiva Health, Inc. in Orange, CA is seeking an IT Network & Security Engineer to design, secure, and manage our enterprise network and cloud environments.

You will protect PHI, enforce HIPAA controls, and ensure CMS/security standard compliance while maintaining reliable connectivity across offices and healthcare data systems. The role covers firewall management, VPNs, cloud guardrails, vulnerability management, and on-call incident response within a healthcare regulatory framework.

Qualifications

• Bachelor's degree in information technology, Computer Science, Cybersecurity, Network Engineering, or related field (or equivalent practical experience).
• 3+ years of hands-on experience in network administration, network engineering, or enterprise network security.
• Strong working knowledge of TCP/IP, routing and switching, VLAN segmentation, DNS security, and IPsec/SSL VPN tunnels.
• Proven experience configuring and managing enterprise firewalls and VPN solutions (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower, Meraki).
• Experience with network monitoring, diagnostic tools, and security log analysis (e.g., Wireshark, PRTG, SolarWinds, SIEM platforms).
• Solid understanding of network security best practices, including firewall policy management, network segmentation, MFA, and security log reviews.
• Practical understanding of HIPAA Security Rule compliance, data privacy principles, and standard security frameworks (e.g., NIST CSF, HITRUST).
• Flexibility and willingness to participate in periodic weekend/after-hours maintenance windows and emergency on-call rotations.

Responsibilities

• Network Infrastructure & Operations: Install, configure, and maintain network infrastructure, including routers, switches, firewalls, wireless access points, VPNs, and structured cabling.
• Perimeter & Cyber Defense: Design, configure, and monitor next-generation firewalls, Web Application Firewalls (WAF), secure VPN tunnels, and IDS/IPS.
• Performance & Troubleshooting: Monitor network performance, availability, and capacity; troubleshoot and resolve connectivity issues for staff, core business systems, and clinical integrations.
• HIPAA & PHI Security: Manage firewall policies, micro-segmentation, and zero-trust remote access to protect PHI and strictly comply with HIPAA Security Rule requirements.
• Cloud Security & Architecture: Support secure connectivity and cloud security guardrails between on-premises offices and Microsoft Azure (VNets, ExpressRoute/VPN gateways, Network Security Groups, and Entra ID).
• Vulnerability & Incident Management: Apply firmware updates and security patches; run vulnerability scans, remediate findings, analyze SIEM logs, and respond promptly to network security incidents.
• Access Control & Zero Trust: Administer MFA, RBAC, and PAM frameworks for network infrastructure.
• Change & Maintenance Management: Follow strict change management for network/security modifications: schedule within maintenance windows, back up configurations, and maintain tested rollback plans.
• On-Call & Emergency Response: Participate in scheduled after-hours maintenance windows and an on-call rotation to address emergency network outages, critical security alerts, and system incidents.
• Audit Readiness & Vendor Risk: Partner with compliance teams to gather technical evidence for HIPAA, HITRUST, NIST CSF, and CMS security audits; perform technical security evaluations for FDRs.
• Unified Communications & QoS: Support VoIP and unified communications systems, ensuring proper Quality of Service (QoS) for voice and video traffic.
• Vendor & Inventory Management: Coordinate with ISPs, telecom providers, and hardware vendors; maintain detailed inventory of network equipment, circuits, and licenses.
• Documentation & Disaster Recovery: Maintain up-to-date network topology maps, security policies, incident runbooks, and disaster recovery architectures.

Skills

TCP/IP

Routing & Switching

Firewalls

VPNs

SIEM

HIPAA

Azure Networking

Zero Trust

MFA

RBAC

Education

Bachelor's degree in IT / CS / Cybersecurity

Tools

Palo Alto

Fortinet

Cisco ASA/Firepower

Meraki

Job description

Astiva Health, Inc. in Orange, CA is seeking an IT Network & Security Engineer to design, secure, and manage our enterprise network and cloud environments.

You will protect PHI, enforce HIPAA controls, and ensure CMS/security standard compliance while maintaining reliable connectivity across offices and healthcare data systems. The role covers firewall management, VPNs, cloud guardrails, vulnerability management, and on-call incident response within a healthcare regulatory framework.