Senior Cybersecurity & Network Security Engineer (On-Site)

ameripharma; Laguna Hills (CA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive pay

Full benefits package

401k program

PTO & sick leave

Opportunities for growth and casual, &

Job summary

AmeriPharma is seeking a Senior Cybersecurity & Network Security Engineer to lead enterprise security, protect PHI data, and ensure HIPAA/HITECH compliance across infrastructure, apps, cloud, and endpoints.

The role owns risk reduction, IAM, centralized monitoring, and data protection. Ideal candidates are proactive, detail-oriented, and capable of building secure, scalable, and audit-ready environments supporting patient care.

Qualifications

• Design and enforce secure access controls using SSO, MFA, RBAC, and least-privilege principles.
• Manage full user lifecycle, including provisioning, de-provisioning, and access reviews.
• Ensure secure and auditable access to PHI systems, applications, and databases.

Responsibilities

• Design and enforce secure access controls using SSO, MFA, RBAC, and least-privilege principles.
• Manage full user lifecycle, including provisioning, de-provisioning, and access reviews.
• Ensure secure and auditable access to PHI systems, applications, and databases.
• Build and maintain centralized logging across systems (Google Workspace, endpoints, servers, firewalls, etc.).
• Develop real-time alerting, dashboards, and automated response workflows.
• Monitor for suspicious activity, unauthorized access, and potential data breaches.
• Classify and protect sensitive data, including PHI, across cloud and on-prem environments.
• Implement Data Loss Prevention (DLP) policies and monitor data access and sharing.
• Define and enforce data retention, archiving, and secure disposal policies.
• Secure network environments, including firewalls, VPNs, and remote access.
• Enforce network segmentation across clinical, corporate, IoT, and guest environments.
• Protect RDS environments and distributed workforce infrastructure.
• Secure AWS, Azure, and Google Cloud environments.
• Protect APIs, internal applications, and data flows.
• Ensure end-to-end protection of sensitive healthcare data.
• Maintain a centralized risk register and lead risk assessments.
• Align security controls with HIPAA, HITECH, and internal policies.
• Support audits and maintain proper documentation and evidence.
• Lead incident response efforts including detection, containment, and remediation.
• Conduct forensic investigations and root cause analysis.
• Perform vulnerability scanning, threat hunting, and remediation tracking.
• Support penetration testing and validate remediation efforts.
• Optimize and integrate security tools (SIEM, EDR/XDR, endpoint protection, etc.).
• Automate workflows and continuously improve system visibility and protection.
• Enforce endpoint compliance and patch management.
• Secure automation platforms and API integrations.
• Prevent unauthorized data access and system misuse.

Skills

IAM design

Security monitoring

Data security

Network security

Cloud security

Risk management

Incident response

Endpoint security

Automation

Security testing

Education

CISSP

CISM

CEH

Security+

CCNA/CCNP

AWS or Azure Security Certifications

Tools

Google Workspace Admin

Bitdefender

NinjaOne

EDR/XDR

SIEM

Cloud platforms (AWS/Azure/GCP)

Job description

About AmeriPharma

AmeriPharma Specialty Care is a national specialty pharmacy and home infusion provider serving patients with complex and rare conditions, including IVIG and SCIG therapy, TPN, biologics, oncology support, and rare disease therapies.

AmeriPharma operates accredited ambulatory infusion centers and provides home-based infusion nationwide, supported by a fully integrated intake, clinical, and revenue cycle infrastructure. The MedBox division extends AmeriPharma’s mission to senior, home-based, and long-term care populations through medication adherence and multi-dose packaging services.

Why Join Us?

We're a rapidly growing digital pharmacy where you will have the opportunity to contribute to our joint success on a daily basis. We value new ideas, creativity, and productivity. We like people who are passionate about their roles and people who like to grow and change as the company evolves.

At AmeriPharma, you'll have access to:

• Competitive pay and generous compensation structures
• Full benefits package including medical, dental, vision, and life that fits your lifestyle and goals
• Employee assistance program to assist with mental health, legal questions, financial counseling, and more!
• 401k program
• Comprehensive PTO and sick leave options
• Opportunities for growth and advancement
• Casual Fridays

Job Summary

AmeriPharma is seeking a Senior Cybersecurity & Network Security Engineer to lead the protection of enterprise systems, safeguard sensitive data, and ensure compliance with healthcare regulations such as HIPAA and HITECH. This is a senior, hands-on role responsible for executing security strategies across infrastructure, applications, cloud environments, and endpoints.

As the technical security lead under IT, this role owns risk reduction, identity and access management, centralized monitoring, and data protection. The ideal candidate is proactive, detail-oriented, and experienced in building secure, scalable, and audit-ready environments, playing a key role in protecting systems that directly support patient care.

Key Responsibilities

Identity & Access Management (IAM)

• Design and enforce secure access controls using SSO, MFA, RBAC, and least-privilege principles
• Manage full user lifecycle, including provisioning, de-provisioning, and access reviews
• Ensure secure and auditable access to PHI systems, applications, and databases

Security Monitoring & Logging

• Build and maintain centralized logging across systems (Google Workspace, endpoints, servers, firewalls, etc.)
• Develop real-time alerting, dashboards, and automated response workflows
• Monitor for suspicious activity, unauthorized access, and potential data breaches

Data Security & Governance

• Classify and protect sensitive data, including PHI, across cloud and on-prem environments
• Implement Data Loss Prevention (DLP) policies and monitor data access and sharing
• Define and enforce data retention, archiving, and secure disposal policies

Network & Infrastructure Security

• Secure network environments, including firewalls, VPNs, and remote access
• Enforce network segmentation across clinical, corporate, IoT, and guest environments
• Protect RDS environments and distributed workforce infrastructure

Cloud & Application Security

• Secure AWS, Azure, and Google Cloud environments
• Protect APIs, internal applications, and data flows
• Ensure end-to-end protection of sensitive healthcare data

Risk Management & Compliance

• Maintain a centralized risk register and lead risk assessments
• Align security controls with HIPAA, HITECH, and internal policies
• Support audits and maintain proper documentation and evidence

Security Operations & Incident Response

• Lead incident response efforts including detection, containment, and remediation
• Conduct forensic investigations and root cause analysis
• Perform vulnerability scanning, threat hunting, and remediation tracking

Security Testing & Tool Optimization

• Support penetration testing and validate remediation efforts
• Optimize and integrate security tools (SIEM, EDR/XDR, endpoint protection, etc.)
• Automate workflows and continuously improve system visibility and protection

Endpoint & Automation Security

• Enforce endpoint compliance and patch management
• Secure automation platforms and API integrations
• Prevent unauthorized data access and system misuse

Technical Expertise

• Strong background in network security architecture and IAM (SSO, MFA, RBAC)
• Experience with SIEM/logging systems and endpoint security tools (EDR/XDR)
• Hands-on experience with tools such as Google Workspace Admin, Bitdefender, NinjaOne
• Familiarity with cloud platforms (AWS, Azure, GCP) and API security
• Experience with scripting/automation (Python, PowerShell)
• Knowledge of security testing (SAST, DAST) and penetration testing methodologies

Preferred Certifications

• CISSP, CISM, CEH, Security+
• CCNA/CCNP
• AWS or Azure Security certifications

• Identity & Access Management (IAM)
• Security Monitoring & Logging
• Data Security & Governance
• Network & Infrastructure Security
• Cloud & Application Security
• Risk Management & Compliance
• Security Operations & Incident Response
• Endpoint & Automation Security

AmeriPharma’s Mission Statement

Our goal is to achieve superior clinical and economic outcomes while maintaining the utmost compassion and care for our patients. It is our joint and individual responsibility daily to demonstrate to outpatients, prescribers, colleagues, and others that We Care!

Physical Requirements

The physical requirements for this role includes constant sedentary work that primarily involves sitting/standing; ability to hear, see and speak; type and write, repeating motions that may include the wrists, hands and/or fingers. Must be physically able to operate a computer and other office productivity machinery (i.e., a calculator, copy machine, printer); constantly communicate with colleagues and clients including via telephone and email. Must be able to lift up to 15 pounds at times. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

EEO Statement

The above statements are intended to describe the work being performed by people assigned to this job. They are not intended to be anexhaustive list of all responsibilities, duties and skills required. The duties and responsibilities of this position are subject to change and otherduties may be assigned or removed at any time. AmeriPharma values diversity in its workforce and is proud to be an AAP/EEO employer.All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, age, protected veteran status, or on the basis of disability or any other legally protected class.