Network Security Manager | PAM Health Corporate

The Network Security Manager / Architect is responsible for the architecture implementation and operational ownership of PAM Healths enterprise network security and secure WAN environment. This role leads the Network Firewall Security function within Infrastructure and is accountable for firewall SD-WAN VPN segmentation and hybrid-cloud network security across hospitals corporate locations and cloud environments.

The Manager / Architect serves as a hands-on technical architect and team leader designing and implementing security solutions and security policy standards while supervising the network security team. The role partners with Network Infrastructure Information Security Cloud/AI and application teams to deliver resilient scalable and secure connectivity that supports patient care and clinical operations.

I. Position Responsibilities

Own the architecture implementation lifecycle management and operational governance of enterprise firewalls SD-WAN VPN segmentation and secure network connectivity

Architect and lead deployment of Fortinet solutions including physical and virtual FortiGate firewalls FortiManager FortiAnalyzer and Secure SD-WAN across hospitals corporate locations and cloud environments

Develop standardized firewall and SD-WAN configurations templates routing designs security policies NAT VPNs segmentation high availability and security profiles

Design and operate Microsoft Azure network security integration including virtual networks subnets peering route tables/UDRs hybrid connectivity and virtual firewall/network appliance deployments as part of the SD-WAN fabric

Establish secure network connectivity patterns for cloud and third-party services including Google Cloud Platform connectivity when required by business or application needs

Own firewall policy governance rule lifecycle management change review exception handling recertification and documentation standards

Monitor and optimize security availability performance capacity licensing software lifecycle and resiliency of firewall and SD-WAN platforms

Lead technical escalation incident response and root cause analysis for firewall SD-WAN VPN and hybrid-cloud connectivity issues

Manage prioritize mentor and develop the Senior Network Security Engineer while providing technical direction to the broader Network Infrastructure team

Partner with Information Security Cloud/AI Infrastructure application teams vendors and service providers on secure designs new site deployments migrations and complex changes

Maintain architecture diagrams standards implementation documentation runbooks audit evidence and controls supporting HIPAA organizational security disaster recovery and business continuity requirements

II. Leadership

Inclusiveness: Promotes cooperation fairness and equity; shows respect for people and their differences; works to understand perspectives of others; demonstrates empathy; brings out the best in others and in his/her team

Managing Staff: Coaches evaluates develops and inspires staff; sets expectations; recognizes achievements

Stewardship and Resource Management: Demonstrates accountability and sound judgment in managing company resources; appropriate understanding of confidentiality and company values; adheres to and supports company policies procedures and safety guidelines

Problem-Solving: Identifies problems and involves others in seeking solutions; conducts appropriate analysis and searches for best solutions; effectively and efficiently implements appropriate responses to correct problems; responds promptly and effectively to new challenges

Decision-Making: Makes clear consistent decisions; acts with integrity in all decisions; distinguishes relevant from irrelevant information; makes timely appropriate decisions.

Strategic Planning and Organizing: Understands company vision and aligns priorities accordingly; measures outcomes; uses feedback to redirect as required; evaluates alternatives; appropriately organizes complex issues to desirable resolution

Communication: Connects with peers subordinate employees and all customers; actively listens; clearly and effectively shares information; demonstrates effective oral and written communication skills; negotiates effectively.

Quality Improvement: Strives for efficient effective high-quality performance in self and in the department; delivers timely and accurate results; resilient when responding to matters that are challenging; takes initiative to make improvements

Leadership: Motivates others; accepts responsibility; maintains high morale in department; develops trust and credibility; expects honest and ethical behavior of self and staff

Teamwork: Encourages cooperation and collaboration; builds effective teams; works in partnership with others; is flexible; responsive to the needs of others

Development: Maintains up-to-date skills through involvement with professional organizations and/or continuing education

II. Customer Service

Maintains the highest level of customer service via courtesy compassion and positive communication.

Promotes the mission and vision of PAM Health within the work environment and the community.

Respects dignity and confidentiality by adherence to all applicable policies and procedures.

Provide professional courteous support to clinical staff hospital leadership and business users

Act as a technical point of contact for IT leadership and clinical stakeholders

Communicate technical risks impacts and outcomes clearly and effectively

Maintain strict adherence to HIPAA security and organizational policies

III. Health and Safety

Works in a manner that promotes safety; wears clothing appropriate to the performance of the job.

Participates in OSHA required training.

Follows universal precautions as appropriate for position; complies with Employee Health requirements for continued employment.

Reports unsafe practices to management.

Knows own role in case of an emergency.

POSITION QUALIFICATIONS:

Education and Training: Bachelors degree in Information Technology Cybersecurity Computer Science Network Engineering or a related field preferred; equivalent combination of education certifications and relevant experience considered

Experience:

8 years of progressive experience in enterprise network engineering network security or infrastructure security roles

5 years of hands-on experience designing implementing and operating next-generation firewalls VPNs secure WAN and/or SD-WAN solutions

Demonstrated experience serving as a technical architect or lead for complex multi-site network security deployments

Hands-on Microsoft Azure networking experience required including virtual networks routing hybrid connectivity and virtual firewall/network appliance deployments

Experience leading mentoring or supervising technical staff; prior direct people-management experience preferred

Healthcare or other regulated-industry experience strongly preferred

Knowledge Skills and Abilities:

Advanced knowledge of enterprise firewall architecture secure SD-WAN IPsec VPNs network segmentation high availability policy design and threat-prevention controls

Strong working knowledge of Fortinet FortiGate FortiManager FortiAnalyzer and Fortinet Secure SD-WAN technologies

Advanced Microsoft Azure networking knowledge including VNets subnets peering route tables/UDRs VPN Gateway ExpressRoute concepts and virtual network appliances/firewalls

Google Cloud networking experience including VPCs routing Cloud VPN/Interconnect concepts and firewall policy is preferred but not required

Strong understanding of TCP/IP BGP OSPF VLANs VRFs DNS DHCP NAT QoS and enterprise routing design

Knowledge of network security monitoring logging syslog/SIEM integration performance analysis and advanced troubleshooting

Ability to design scalable resilient hybrid-cloud and multi-site network security architectures and translate business or security requirements into practical technical controls

Strong understanding of ITSM processes including incident change problem and configuration management

Strong leadership documentation project coordination vendor management communication and decision-making skills

Relevant Fortinet Microsoft Azure Cisco or network security certifications preferred

PHYSICAL DEMANDS: See attached Job Activity Requirements

WORKING CONDITIONS: Working generally indoors in well-lighted well-ventilated areas. Working conditions as in hospital surroundings. Occasional travel to healthcare facilities may be required. Participation in on-call rotation.

ORGANIZATIONAL DATA: This is an exempt position. No formal line(s) of promotion exists.

The above statements are intended to describe the general nature and level of the work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skill required of personnel so classified.