Network Security Engineer

MetroPlusHealth provides the highest quality healthcare services to residents of Bronx, Brooklyn, Manhattan, Queens and Staten Island through a comprehensive list of products, including, but not limited to, New York State Medicaid Managed Care, Medicare, Child Health Plus, Exchange, Partnership in Care, MetroPlus Gold, Essential Plan, etc. As a wholly-owned subsidiary of NYC Health + Hospitals, the largest public health system in the United States, MetroPlusHealth network includes over 27,000 primary care providers, specialists and participating clinics. For more than 30 years, MetroPlusHealth has been committed to building strong relationships with its members and providers to enable New Yorkers to live their healthiest life.

Position Overview

MetroPlusHealth is seeking a Network Security Engineer. This position will report directly to the Sr. Infrastructure Architect.

This highly technical role is suited for a candidate with hands-on analytical experience as a network security engineer with the following background:

Network routing and switching

Network security appliances and applications

Site-To-Site VPN, client VPN, and encryption/decryption methods.

Content filtering, Network Access Policies, and proxy services

Our goal with the Network Security Engineer position is to improve the experience of our members, employees and coworkers, vendors, and neighbors throughout the City.

Job Description

• Design, plan, install, and support network infrastructure systems with an emphasis on security engineering.
• Work with vendors to plan and deploy solutions, resolve issues, and implement enhancements
• Work with UC Engineering, IT Security Ops, and Network Infrastructure teams on day-to-day operations of critical networks, application delivery, and platform security infrastructure.

Minimum Qualifications

• Bachelor's degree from an accredited college/university and a minimum of 12 years of experience in designing, implementing, supporting, and monitoring enterprise networks with diverse solutions from multiple vendors on a large enterprise and global scale (Cisco, Fortinet, Arista, Aruba, Checkpoint) or
• A satisfactory equivalent combination of training, education, and experience.
• Understanding of network and data center architectures, including both on prem and cloud architectures with experience in Microsoft Azure & AWS.
• Experience in virtualization managing Microsoft Windows & Linux operating systems.
• Experience with Azure, AWS, Office 365, and Azure SAML.
• Understanding of networking concepts such as DNS, IP, NAT, VLANs, subnetting, etc.
• Understanding of the OSI Model, web, and network protocols such as TCP, UDP and HTTP/S.
• Experience supporting Unified Communications applications and Contact Centers.
• Experience with load balancers such as NSX-ALB and F5.
• Knowledge of PKI infrastructures.
• Knowledge of information security standards.
• Hands-on experience with Cisco Nexus and Catalyst switches along with Cisco ISR and CUBE routers.
• Fortinet/Fortigate Security experience preferred.
• Knowledge of SIP and SIP connections to cloud providers.
• Experience demonstrating communication and leadership skills (must be willing to provide a high-level overview and lead/mentor/guide/influence and train other team members).
• Senior level technical certification or equivalent (CISSP, CCSP, MCSA) with demonstrated relevant experience.

Professional Competencies

• Leadership skills
• Mentorship skills
• Integrity and Trust
• Customer Focus
• Functional/Technical Skills
• Ability to work as a team player
• Written/oral communication skills

#MHP50

#LI-Remote