Sr Network Systems Engineer

Waystar, Inc; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive total rewards

Flexible benefits package

Paid time off and holidays

Job summary

Waystar seeks an experienced Senior Network Engineer to design, secure, and support a complex multi-site network across offices, data centers, and cloud-linked environments.

The role emphasizes enterprise routing/switching, VPNs, firewall management, NAC, and Zero Trust architecture, with leadership in modernization, documentation, and incident response. Strong collaboration with security and cloud teams is required.

Qualifications

• 8+ years of enterprise network engineering experience in multi-site environments.
• Advanced experience with firewalls, VPNs, routing, switching, NAC, and ZTNA.
• Strong TCP/IP, DNS, DHCP, VLANs, QoS, and high-availability knowledge.
• Experience with security posture, incident response, and documentation.

Responsibilities

• Design, implement, and maintain enterprise networks across locations and data centers.
• Lead network modernization for resiliency, security, and efficiency.
• Configure routing, switching, VLANs, QoS, and wireless services.
• Design, deploy, and manage VPNs and secure remote access.
• Develop NAC policies and Zero Trust adoption roadmaps.

Skills

Enterprise networking

Network architecture

Security

ZTNA

NAC

VPN

Education

Bachelor's degree in IT/CS/Engineering

Tools

Fortinet

Arista

Job description

ABOUT THIS POSITION

Waystar is seeking an experienced Senior Network Engineer to design, implement, secure, and support a complex multi-site enterprise network infrastructure. This role will serve as a senior technical resource responsible for network architecture, security, performance optimization, and strategic modernization initiatives across corporate offices, data centers, and cloud-connected environments. The ideal candidate will possess deep expertise in enterprise routing and switching, VPN technologies, firewall administration, network access control (NAC), and Zero Trust Network Architecture (ZTNA). This individual will help maintain secure, resilient connectivity while driving modernization efforts that improve scalability, supportability, and the end-user experience.

WHAT YOU'LL DO

Network Architecture & Engineering

• Design, implement, and maintain enterprise network infrastructure across multiple locations.
• Develop scalable architectures supporting on-premises, cloud, and hybrid environments.
• Lead network modernization initiatives focused on resiliency, security, and operational efficiency.
• Evaluate networking technologies and recommend standards aligned with business and security requirements.
• Create and maintain network diagrams, configuration standards, runbooks, and technical documentation.

Routing, Switching & Wireless

• Administer enterprise routing, switching, and wireless platforms.
• Configure and support Layer 2 and Layer 3 networking services, including VLANs, routing protocols, redundancy, and QoS.
• Perform capacity planning, performance tuning, and lifecycle management of network infrastructure.

Firewall & Security Engineering

• Design, implement, and manage enterprise firewall platforms and network security controls.
• Develop segmentation strategies, access policies, and least-privilege connectivity models.
• Partner with cybersecurity teams to investigate threats, remediate vulnerabilities, and improve security posture.
• Review and implement firewall rule changes in accordance with change management standards.

VPN & Secure Remote Access

• Design and support site-to-site, client-based, and remote-access VPN solutions.
• Troubleshoot secure connectivity for employees, contractors, partners, and third-party integrations.
• Optimize remote access services for security, performance, reliability, and user experience.

Network Access Control (NAC)

• Administer and enhance Network Access Control solutions.
• Develop policies for device authentication, posture validation, onboarding, and dynamic segmentation.
• Integrate NAC capabilities with identity, endpoint management, and security platforms.
• Support secure access for corporate, BYOD, contractor, and partner devices.

Zero Trust Network Architecture (ZTNA)

• Lead the design and adoption of Zero Trust networking principles and technologies.
• Implement identity-aware access, segmentation, continuous validation, and least-privilege controls.
• Partner with security, endpoint, identity, and cloud teams to expand ZTNA capabilities.
• Develop roadmaps that advance secure access and reduce reliance on traditional network trust boundaries.

Operations, Incident Response & Leadership

• Serve as an escalation point for complex network incidents, outages, and performance issues.
• Participate in on-call rotation, major incident response, root cause analysis, and corrective action planning.
• Plan and execute changes using established change management and maintenance processes.
• Provide technical leadership and mentorship to engineers and collaborate across infrastructure, security, cloud, and application teams.

WHAT YOU'LL NEED

• Bachelor's degree in Information Technology, Computer Science, Engineering, or equivalent practical experience.
• 8+ years of enterprise network engineering experience, including 5+ years supporting large-scale, multi-site environments.
• Advanced experience with enterprise firewalls, VPN technologies, routing and switching, network segmentation, NAC, and Zero Trust concepts.
• Strong understanding of TCP/IP, DNS, DHCP, VLANs, QoS, high availability, and dynamic routing protocols.
• Experience supporting highly available production environments and using network monitoring and troubleshooting tools.
• Excellent analytical, communication, collaboration, and technical documentation skills.

Preferred Qualifications

• Experience with Fortinet technologies such as FortiGate, FortiSwitch, FortiManager, FortiAuthenticator, FortiNAC, and FortiClient.
• Experience with Arista networking platforms and enterprise wireless solutions.
• Experience implementing Zero Trust Network Access solutions and cloud networking in Microsoft Azure.
• Experience supporting mergers, acquisitions, data center transitions, or large-scale infrastructure migrations.
• Experience in healthcare, financial technology, or another regulated industry.
• Familiarity with SOC 2, HITRUST, HIPAA, PCI DSS, or similar compliance frameworks.

Measures of Success

• Improve network availability, performance, and resiliency across enterprise locations.
• Advance the organization’s Zero Trust networking and secure remote access strategy.
• Enhance network segmentation, firewall governance, and access control maturity.
• Increase visibility and control of network-connected devices through NAC capabilities.
• Reduce operational risk through standardization, automation, lifecycle planning, and high-quality documentation.
• Deliver secure and scalable solutions that improve the employee technology experience.

ABOUT WAYSTAR

Through a smart platform and better experience, Waystar helps providers simplify healthcare payments and yield powerful results throughout the complete revenue cycle. Waystar’s healthcare payments platform combines innovative, cloud-based technology, robust data, and unparalleled client support to streamline workflows and improve financials so providers can focus on what matters most: their patients and communities. Waystar is trusted by 1M+ providers, 1K+ hospitals and health systems, and is connected to over 5K commercial and Medicaid/Medicare payers. We are deeply committed to living out our organizational values: honesty; kindness; passion; curiosity; fanatical focus; best work, always; making it happen; and joyful, optimistic & fun. Waystar products have won multiple Best in KLAS or Category Leader awards since 2010 and earned multiple #1 rankings from Black Book surveys since 2012. The Waystar platform supports more than 500,000 providers, 1,000 health systems and hospitals, and 5,000 payers and health plans. For more information, visit waystar.com or follow @Waystar on Twitter.

WAYSTAR PERKS

• Competitive total rewards (base salary + bonus, if applicable)
• Customizable benefits package (3 medical plans with Health Saving Account company match)
• We offer generous paid time off for our non-exempt team members, starting with 3 weeks + 13 paid holidays, including 2 personal floating holidays.
• We also offer flexible time off for our exempt team members + 13 paid holidays
• Paid parental leave (including maternity + paternity leave)
• Education assistance opportunities and free LinkedIn Learning access
• Free mental health and family planning programs, including adoption assistance and fertility support
• 401(K) program with company match
• Pet insurance
• Employee resource groups

Waystar is proud to be an equal opportunity workplace. We celebrate, value, and support diversity and inclusion. Qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, marital status, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Waystar provides cloud-based technology that simplifies and unifies healthcare payments. Together, our technology, data and client support streamline workflows and improve financials for our clients, so that they can focus on their patients. We are deeply committed to living out our organizational values: honesty; kindness; passion; curiosity; fanatical focus; best work, always; making it happen; and joyful, optimistic and fun.