Senior Network Security Engineer II

Aledade, Inc. is a public benefit corporation focused on empowering independent primary care. The Senior Network Security Engineer II will lead the design, implementation, and maintenance of the organization's network security infrastructure, ensuring the highest levels of security and compliance while collaborating with cross-functional teams.

Responsibilities:

• Design, implement, and manage secure network solutions, including firewalls, VPNs, and intrusion prevention systems (IPS), for cloud-based environments
• Configure and secure networking services in cloud platforms such as AWS, Azure, or Google Cloud, including Virtual Private Clouds (VPCs), security groups, and network gateways
• Monitor cloud network activity to detect, analyze, and respond to security threats and vulnerabilities. Oversee network segmentation, encryption, and secure access mechanisms to safeguard sensitive data and systems
• Deploy and manage advanced network security technologies, such as Zero Trust Architecture, SD-WAN, and SASE solutions, across hybrid infrastructures
• Conduct regular network security assessments, including penetration testing and vulnerability scans, in both traditional and cloud-native environments
• Develop and enforce network security policies, standards, and guidelines for hybrid environments and collaborate with cloud engineering teams to implement security best practices in cloud deployments
• Maintain up-to-date documentation of network security architectures, configurations, and cloud networking setups
• Troubleshoot and resolve complex network security issues across corporate IT infra and cloud platforms

Requirements:

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field
• 7+ years of experience in network security engineering or related roles, including experience with cloud networking and security
• Expertise in securing cloud environments such as AWS (e.g., VPCs, IAM, Security Groups), Azure (e.g., VNets, NSGs, Azure Firewall), or GCP (e.g., Cloud Armor, Cloud VPN)
• Hands-on experience with network security tools including firewalls, VPNs, IDS/IPS, encryption, DLP (Zscaler, Palo Alto etc)
• Hands-on experience with network security monitoring tools (eg: wireshark), SIEMs, and incident response
• Familiarity with Infrastructure-as-Code (IaC) tools like Terraform or CloudFormation for networking automation
• Certifications such as AWS Certified Advanced Networking Specialty, CCNP Security, or equivalent are highly desirable
• Familiarity with DevSecOps and security monitoring in CI/CD environments and containerized environments (Docker, Kubernetes)
• Experience with Zero Trust models, microsegmentation, and cloud-native security solutions (e.g., AWS Security Hub, Azure Sentinel)
• Experience leading large-scale network security projects, from planning and implementation to monitoring and assessment
• Strong analytical and troubleshooting skills, with attention to detail
• Previous experience in healthcare, finance, or government sectors, particularly in managing network security within compliance frameworks like HIPAA, PCI-DSS, or SOX
• Ability to automate network security tasks using Python, Bash, or other scripting languages, improving efficiency and response times for security events
• Excellent communication and documentation abilities
• Strong background in handling network-related incidents and conducting forensic analysis to uncover the cause and impact of security breaches
• Certifications such as CISSP, CCNP, CEH, or similar are strongly preferred