Sr Network Systems Engineer

waystar; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Waystar is seeking an experienced Senior Network Engineer to design, implement, secure, and support a complex multi-site enterprise network infrastructure across offices and data centers.

You will lead architecture, security, and modernization initiatives, working with VPNs, firewalls, NAC, and Zero Trust to ensure performance, reliability, and a superior user experience for healthcare payments platforms.

Qualifications

• Bachelor's degree in IT or related field.
• 8+ years enterprise network engineering experience.
• Advanced experience with firewalls, VPNs, routing, NAC, and Zero Trust concepts.

Responsibilities

• Design, implement, and maintain enterprise network infrastructure across multiple locations.
• Develop scalable architectures for on-premises, cloud, and hybrid environments.
• Lead network modernization focusing on security and efficiency.
• Evaluate technologies and set standards.
• Create network diagrams, runbooks, and documentation.
• Manage firewall platforms and security controls.
• Design and support VPN solutions and secure remote access.
• Administer NAC and Zero Trust networking.

Skills

Enterprise networking

Firewall administration

VPN technologies

NAC

ZTNA

TCP/IP & DNS

Network monitoring

Documentation

Education

Bachelor's degree

Tools

Fortinet FortiGate

FortiSwitch

FortiManager

FortiNAC

FortiClient

Arista switches

Azure networking

Job description

ABOUT THIS POSITION

Waystar is seeking an experienced Senior Network Engineer to design, implement, secure, and support a complex multi-site enterprise network infrastructure. This role will serve as a senior technical resource responsible for network architecture, security, performance optimization, and strategic modernization initiatives across corporate offices, data centers, and cloud-connected environments.

The ideal candidate will possess deep expertise in enterprise routing and switching, VPN technologies, firewall administration, network access control (NAC), and Zero Trust Network Architecture (ZTNA). This individual will help maintain secure, resilient connectivity while driving modernization efforts that improve scalability, supportability, and the end-user experience.

WHAT YOU'LL DO

Network Architecture & Engineering

• Design, implement, and maintain enterprise network infrastructure across multiple locations.
• Develop scalable architectures supporting on-premises, cloud, and hybrid environments.
• Lead network modernization initiatives focused on resiliency, security, and operational efficiency.
• Evaluate networking technologies and recommend standards aligned with business and security requirements.
• Create and maintain network diagrams, configuration standards, runbooks, and technical documentation.

Routing, Switching & Wireless

• Administer enterprise routing, switching, and wireless platforms.
• Configure and support Layer 2 and Layer 3 networking services, including VLANs, routing protocols, redundancy, and QoS.
• Perform capacity planning, performance tuning, and lifecycle management of network infrastructure.

Firewall & Security Engineering

• Design, implement, and manage enterprise firewall platforms and network security controls.
• Develop segmentation strategies, access policies, and least-privilege connectivity models.
• Partner with cybersecurity teams to investigate threats, remediate vulnerabilities, and improve security posture.
• Review and implement firewall rule changes in accordance with change management standards.

VPN & Secure Remote Access

• Design and support site-to-site, client-based, and remote-access VPN solutions.
• Troubleshoot secure connectivity for employees, contractors, partners, and third-party integrations.
• Optimize remote access services for security, performance, reliability, and user experience.

Network Access Control (NAC)

• Administer and enhance Network Access Control solutions.
• Develop policies for device authentication, posture validation, onboarding, and dynamic segmentation.
• Integrate NAC capabilities with identity, endpoint management, and security platforms.
• Support secure access for corporate, BYOD, contractor, and partner devices.

Zero Trust Network Architecture (ZTNA)

• Lead the design and adoption of Zero Trust networking principles and technologies.
• Implement identity-aware access, segmentation, continuous validation, and least-privilege controls.
• Partner with security, endpoint, identity, and cloud teams to expand ZTNA capabilities.
• Develop roadmaps that advance secure access and reduce reliance on traditional network trust boundaries.

Operations, Incident Response & Leadership

• Serve as an escalation point for complex network incidents, outages, and performance issues.
• Participate in on-call rotation, major incident response, root cause analysis, and corrective action planning.
• Plan and execute changes using established change management and maintenance processes.
• Provide technical leadership and mentorship to engineers and collaborate across infrastructure, security, cloud, and application teams.

WHAT YOU'LL NEED

• Bachelor's degree in Information Technology , Computer Science, Engineering, or equivalent practical experience.
• 8+ years of enterprise network engineering experience, including 5+ years supporting large-scale, multi-site environments.
• Advanced experience with enterprise firewalls, VPN technologies, routing and switching, network segmentation, NAC, and Zero Trust concepts.
• Strong understanding of TCP/IP, DNS, DHCP, VLANs, QoS, high availability, and dynamic routing protocols.
• Experience supporting highly available production environments and using network monitoring and troubleshooting tools.
• Excellent analytical, communication, collaboration, and technical documentation skills.

Preferred Qualifications

• Experience with Fortinet technologies such as FortiGate, FortiSwitch , FortiManager , FortiAuthenticator , FortiNAC , and FortiClient.
• Experience with Arista networking platforms and enterprise wireless solutions.
• Experience implementing Zero Trust Network Access solutions and cloud networking in Microsoft Azure .
• Experience supporting mergers, acquisitions, data center transitions, or large-scale infrastructure migrations.
• Experience in healthcare, financial technology, or another regulated industry.
• Familiarity with SOC 2, HITRUST, HIPAA, PCI DSS, or similar compliance frameworks.

Measures of Success

Improve