IT Network Specialist

Allia Health; Houston (TX); On-site; USD 85,000 - 125,000; Full time

Benefits offered by this job

Medical

Vision

Dental

401(k) with match

PTO

Flex days

Holidays

Job summary

Allia Health Group in Houston is seeking an IT Network Specialist to own and secure the on‑premise network across our compounding facility and supporting sites. You will build the logging, alerting, and monitoring layer to reveal security and availability events, with escalation through the IT Operations Lead.

The role requires 5–8 years of network administration, CCNA/similar certification, and hands-on firewall management; multi-site circuit control; enterprise wireless; and a proactive, SOC‑2

Qualifications

• Bachelor's degree in information technology or a related field is preferred or hands-on equivalent.
• CCNA or equivalent certification (e.g., JNCIA, Aruba ACSA, Fortinet FCP) or demonstrated skill.
• 5–8 years in network administration or engineering.
• Multi-site network experience including carrier circuit management and failover planning.

Responsibilities

• Own the on‑premise network and its security across our facilities.
• Design and maintain network segmentation and firewall rules with change approvals.
• Deploy and operate centralized logging across devices with SOC2-ready controls.
• Build alerting rules and monitoring for security and availability events.
• Manage site connectivity, redundancy, and VPN/Zero Trust for remote access.
• Lead incident response for technical security events and document outcomes.

Skills

Network Administration

Firewall Management

Wireless Deployment

VPN & Zero Trust

SIEM Logging

Carrier Circuit Management

Education

Bachelor's degree in information technology or related field

Tools

Cisco IOS

Fortinet FortiGate

Palo Alto Firewalls

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

IT Network Specialist

Full-Time Houston, TX, US

7 days ago Requisition ID: 1390

Salary Range: $85,000.00 To $125,000.00 Annually

About Allia HealthGroup

Allia Health Group is a fast-growing digital health system revolutionizing metabolic, hormonal, and longevity care. As the parent organization behind Brello Health (women's telehealth and longevity programs), HelloWellness (men's telehealth), Southend Pharmacy (a state-licensed 503A compounding pharmacy), and Zito Care (our healthcare provider network), we deliver seamless, end-to-end care powered by a shared technology and AI platform.

We remove barriers so clinicians can focus on patients and patients can access personalized, proactive care on their own terms — whether through telehealth visits, compounded medications, lab testing, wellness support, and more, all in one connected experience across 35+ states.

Allia is building the future of healthcare by being clinician-first and patient-centered. We are innovative, empathetic, and accessible to our patients, combining cutting-edge tools with human-centered care to make high-quality longevity and wellness solutions affordable and available to more people.

At Allia Health Group, you're part of something bigger — helping shape a mission-driven enterprise that's scaling rapidly, solving real problems in healthcare inefficiencies, and making a tangible difference in people's lives every day.

Position Summary

Own the on-premise network and its security at the Southend Pharmacy compounding facility and across the infrastructure supporting our brands, working with the CTO organization’s cloud security team where site infrastructure meets cloud workloads. Beyond keeping things connected, this role builds the logging, alerting, and monitoring layer that lets us see security and availability events, which is our biggest blind spot today. Escalation and change approval run through the IT Operations Lead. Identity-integrated network access is coordinated with the Systems Administrator.

Key Responsibilities

Network Segmentation: Design and maintain zones that separate compounding production systems, PHI-bearing workstations, clinical devices, administrative users, and guest or BYOD traffic, which the 2026 HIPAA Security Rule expects.

Firewall & Perimeter Management: Own the firewall rule lifecycle, including documented periodic review, change approval, and elimination of undocumented or overly permissive rules.

Logging Architecture: Deploy and operate centralized log collection spanning firewalls, switches, wireless, servers, endpoints, and pharmacy production systems, with retention configured to the standard set by the compliance program.

Alerting & Detection: Build tuned alert rules with clear severity tiers routed to a named responder. The goal is a manageable number of alerts that are worth acting on.

Proactive Monitoring: Track throughput, latency, packet loss, and capacity on production-critical paths, watching trends so problems surface before they turn into outages.

Site Connectivity & Redundancy: Manage carrier circuits and redundant paths for the pharmacy and supporting sites, and test failover on a schedule so we know it works.

Wireless Infrastructure: Deploy enterprise wireless with certificate-based authentication and separate production, corporate, and guest SSIDs, tuned for the density of scanners and mobile devices on the production floor.

Secure Remote Access: Administer VPN and Zero Trust network access for remote staff and offshore contractors, in coordination with the Systems Administrator (Identity & IAM).

Vulnerability Management: Run regular scans of network-attached infrastructure and track fixes to closure, documenting risk acceptance where a fix is deferred.

Technical Incident Response: Lead the technical side of security incidents, covering detection, triage, containment, eradication, and the write-up afterward.

Pre-Authorized Containment: Act immediately on lower-severity events such as isolating an endpoint, disabling an account, or blocking an address, and notify afterward. Escalate to the IT Operations Lead when there is suspected PHI exposure, when an action would affect compounding production, or when an incident stays open past its severity clock.

Configuration & Change Control: Version all network configurations, keep topology documentation current, and produce evidence supporting SOC 2 change-management controls.

Circuit & Vendor Governance: Hold carriers and hardware vendors accountable to contracted service levels, and plan end-of-life refresh before equipment becomes an availability risk.

Site Coverage Backup: Provide on-site coverage for the IT Support Specialist during absences or overlapping production incidents, following documented runbook procedures only. This role does not own tickets or work the standard support queue.

Coverage: Standard hours are 08:00 to 17:00 CST, Monday through Friday, with participation in an on-call rotation for production-critical and security events outside those hours.

IT Network Specialist — Qualifications

Education

Bachelor's degree in information technology, computer science, network engineering, or a related field preferred. Equivalent hands-on experience is accepted in place of a degree.

Required Certifications

CCNA, or equivalent vendor certification for comparable platforms (JNCIA, Aruba ACSA, Fortinet FCP), or demonstrated equivalent skill

CompTIA Security+, or equivalent security fundamentals credential

Preferred Certifications

Firewall certification for Palo Alto PCNSA/PCNSE, Fortinet NSE, Cisco Firepower

CWNA (Certified Wireless Network Administrator)

Cisco CyberOps Associate, GIAC GCIH, or comparable incident response training

Required Experience

5-8 years in network administration or network engineering

At least 2 years owning a production network environment, including change decisions and escalation, rather than working assigned tickets within someone else's design

Multi-site experience including carrier circuit management and redundant path failover

Direct, hands-on firewall rule administration — creating, reviewing, and removing rules under a change process

Enterprise wireless deployment and troubleshooting

Strongly Preferred Experience

Built centralized logging, monitoring, or SIEM capability from the ground up, including choosing what to collect, configuring retention, and tuning alerts. This is the highest-value qualification for this role.

Network segmentation in a regulated or production environment — healthcare, pharmaceutical, manufacturing, or PCI-scoped

Wireless deployment supporting handheld scanners or mobile equipment in a warehouse, production floor, or clinical setting

Participation in security incident response, including containment and post-incident documentation

Producing evidence for compliance audits (HIPAA, SOC 2, PCI, HITRUST)

Trainable — Not Required

HIPAA and SOC 2 specifics, pharmacy operations, and USP 797/800 controlled-area procedures. Candidates with PCI, clinical, or manufacturing OT backgrounds carry transferable instincts and should not be screened out for lacking healthcare experience.

What We Offer:

Full benefits package including medical, vision, dental, 401(k) with company match, PTO, Flex days, holidays, and more!

Allia Health Group does not provide employment visa sponsorship now or in the future. Applicants must be legally authorized to work in the United States without the need for current or future sponsorship.

Equal Opportunity Employer Statement

Allia Health Group is proud to be an Equal Opportunity Employer where we are committed to fostering a diverse and inclusive workplace. We are committed to cultivating a culture where all team members feel valued & respected. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, genetic information, disability, age, veteran status, or any other characteristics protected by applicable law.