IT Network Specialist

Jobtailor; Houston (TX); On-site; USD 90,000 - 140,000; Full time

Job summary

Jobtailor is seeking an experienced Senior Network Security professional to own and secure the on-premise production network for a pharmacy-focused environment. You will design segmentation, manage firewall rules, and operate centralized logging across multiple systems to ensure PHI protection and regulatory compliance.

Responsibilities include deploying enterprise wireless, VPN/Zero Trust access, vulnerability scanning, and leading incident response with SOC 2‑level documentation.

Qualifications

• Bachelor's degree preferred or equivalent hands-on experience.
• CCNA or equivalent certification (JNCIA, Aruba ACSA, Fortinet FCP) or demonstrated equivalent skill.
• CompTIA Security+ or equivalent security fundamentals credential.
• 5–8 years in network administration or network engineering.
• At least 2 years owning a production network environment with change decisions.
• Multi-site experience including carrier circuit management and redundant path failover.
• Hands-on firewall rule administration under a change process.
• Enterprise wireless deployment and troubleshooting.
• Experience building centralized logging, monitoring, or SIEM from scratch preferred.
• Experience with network segmentation in regulated/production environments preferred.
• Wireless deployment supporting scanners or mobile devices preferred.
• Experience in security incident response preferred.
• Producing evidence for compliance audits preferred.
• Authorized to work in the United States without sponsorship.

Responsibilities

• Own the on-premise network and security at the Southend Pharmacy compounding facility and across Allia Health Group brands.
• Design and maintain network segmentation for production systems, PHI-bearing workstations, clinical devices, administrative users, and guest/BYOD traffic.
• Own firewall rule lifecycle including review, change approval, and removal of undocumented or overly permissive rules.
• Deploy and operate centralized logging across network, server, endpoint, and pharmacy production systems.
• Build tuned alert rules with severity tiers and named responders.
• Monitor throughput, latency, packet loss, and capacity on production-critical paths.
• Manage carrier circuits, redundant paths, and scheduled failover testing.
• Deploy and tune enterprise wireless with certificate-based authentication and separate production, corporate, and guest SSIDs.
• Administer VPN and Zero Trust network access for remote staff and offshore contractors.
• Run vulnerability scans and track remediation to closure.
• Lead technical security incident response, including detection, triage, containment, eradication, and post-incident documentation.
• Perform pre-authorized containment actions and escalation incidents to the IT Operations Lead when required.
• Version network configurations, maintain topology documentation, and produce SOC 2 change-management evidence.
• Govern carrier and hardware vendor service levels and plan equipment refreshes.
• Provide documented-runbook on-site coverage for the IT Support Specialist during absences or overlapping production incidents.
• Participate in an on-call rotation for production-critical and security events outside standard hours.

Skills

Network Administration

Firewall Rule Administration

Incident Response

Enterprise Wireless Deployment

Centralized Logging

VPN Administration

Zero Trust Network Access

SIEM Capability

Wireless Troubleshooting

Network Segmentation

Vulnerability Scanning

Change Management

Carrier Circuit Management

Monitoring Throughput

Education

Bachelor's degree in IT / CS / Network Engineering

CCNA

CompTIA Security+

JNCIA

Aruba ACSA

Fortinet FCP

Tools

Centralized Logging Tools

Firewall Management Tools

Network Monitoring Tools

VPN Solutions

Job description

• Own the on-premise network and its security at the Southend Pharmacy compounding facility and across infrastructure supporting Allia Health Group brands
• Design and maintain network segmentation for production systems, PHI-bearing workstations, clinical devices, administrative users, and guest/BYOD traffic
• Own firewall rule lifecycle, including review, change approval, and removal of undocumented or overly permissive rules
• Deploy and operate centralized logging across network, server, endpoint, and pharmacy production systems
• Build tuned alert rules with severity tiers and named responders
• Monitor throughput, latency, packet loss, and capacity on production-critical paths
• Manage carrier circuits, redundant paths, and scheduled failover testing
• Deploy and tune enterprise wireless with certificate-based authentication and separate production, corporate, and guest SSIDs
• Administer VPN and Zero Trust network access for remote staff and offshore contractors
• Run vulnerability scans and track remediation to closure
• Lead technical security incident response, including detection, triage, containment, eradication, and post-incident documentation
• Perform pre-authorized containment actions and escalation incidents to the IT Operations Lead when required
• Version network configurations, maintain topology documentation, and produce SOC 2 change-management evidence
• Govern carrier and hardware vendor service levels and plan equipment refreshes
• Provide documented-runbook on-site coverage for the IT Support Specialist during absences or overlapping production incidents
• Participate in an on-call rotation for production-critical and security events outside standard hours

Requirements

• Bachelor's degree in information technology, computer science, network engineering, or a related field preferred
• Equivalent hands-on experience accepted in place of a degree
• CCNA, or equivalent vendor certification for comparable platforms (JNCIA, Aruba ACSA, Fortinet FCP), or demonstrated equivalent skill
• CompTIA Security+, or equivalent security fundamentals credential
• 5–8 years in network administration or network engineering
• At least 2 years owning a production network environment, including change decisions and escalation
• Multi-site experience including carrier circuit management and redundant path failover
• Direct, hands-on firewall rule administration under a change process
• Enterprise wireless deployment and troubleshooting
• Experience building centralized logging, monitoring, or SIEM capability from the ground up strongly preferred
• Experience with network segmentation in a regulated or production environment strongly preferred
• Wireless deployment supporting handheld scanners or mobile equipment strongly preferred
• Participation in security incident response strongly preferred
• Producing evidence for compliance audits strongly preferred
• Must be legally authorized to work in the United States without current or future sponsorship

Core Competencies

Demonstrates expertise in network administration and security, with a focus on managing production environments, firewall rule administration, and incident response. Proficient in deploying enterprise wireless solutions and maintaining compliance with regulatory standards.

Highest-signal resume keywords

• Network Administration
• Firewall Rule Administration
• Incident Response
• Enterprise Wireless Deployment
• Centralized Logging

Hard Skills

• Network Segmentation
• Vulnerability Scanning
• Change Management
• Carrier Circuit Management
• Monitoring Throughput
• Packet Loss Analysis
• VPN Administration
• Zero Trust Network Access
• SIEM Capability
• Wireless Troubleshooting

Soft Skills

• Documentation
• Collaboration
• Problem-Solving
• Communication

Certifications & Qualifications

• CCNA
• CompTIA Security+
• JNCIA
• Aruba ACSA
• Fortinet FCP

Industry Keywords

• PHI-Bearing Workstations
• Production Systems
• Change Approval Process
• Compliance Audits
• Regulated Environment

Tools & Technologies

• Centralized Logging Systems
• Firewall Management Tools
• Network Monitoring Tools
• Wireless Access Points
• VPN Solutions