Network & Security Engineer I

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of and enhance Site-to-Site VPN and TCP connectivity for clients and partners, which includes VPC architecture, route tables, subnets, security groups, and NACLs.

• Create and implement automated client onboarding processes utilizing templating and Infrastructure as Code.

• Design, secure, and manage API networking, encompassing API Gateway, load balancers, PrivateLink, Route 53, TLS, and WAF configurations.

• Diagnose connectivity issues in collaboration with client and partner network teams, focusing on IPsec tunnels, routing, NAT, and IP allowlisting.

• Strengthen network configurations to enhance security and minimize manual intervention.

• Assist in managing interface infrastructure that supports healthcare data integrations.

• Monitor and address AWS vulnerabilities using tools such as Inspector, Security Hub, GuardDuty, and others.

• Automate vulnerability prevention through image lifecycle policies, SSM Patch Manager, and automation rules within Security Hub.

• Decrease vulnerability counts while defining and tracking remediation SLAs.

• Maintain and enhance HIPAA-compliant cloud configurations.

• Provide support for security questionnaires, vendor assessments, and audits by delivering security documentation.

• Patch and resolve critical and high-severity vulnerabilities in dependencies written in Python, C#, and Node.js, as well as container images.

• Implement dependency scanning, automated updates for dependencies, secret scanning, and static analysis within CI/CD pipelines.

• Fortify container base images and build pipelines.

• Collaborate with engineers to promote secure coding practices and security-sensitive modifications.

• Oversee device security, enrollment, and lifecycle management utilizing Rippling.

• Manage identity and access control across AWS, internal applications, and SaaS tools, applying least privilege, RBAC, SSO, and MFA principles.

• Administer device vulnerability scanning and ensure endpoint compliance for a remote and distributed workforce.

• Support onboarding and offboarding processes for accounts, devices, and access.

• Assist in developing and maintaining security policies, incident response strategies, and security awareness initiatives.

• Work in coordination with platform engineering to align infrastructure and security decisions with product objectives.

⛳️ Requirements

• At least 5 years of experience in network engineering, security engineering, cloud infrastructure, or a similar role.

• Extensive hands-on experience with AWS networking components, including VPC, Site-to-Site VPN, Transit Gateway, Route 53, Elastic Load Balancing, API Gateway, PrivateLink, security groups, and NACLs.

• Strong foundational knowledge in networking, covering TCP/IP, IPsec, BGP, NAT, DNS, and TLS, with experience in troubleshooting VPN and TCP connections with external partners.

• Practical experience with AWS security services such as Security Hub, Inspector, GuardDuty, IAM, CloudTrail, KMS, and WAF.

• Proven capability to identify, triage, and remediate security vulnerabilities across cloud resources, container images, and application code dependencies.

• Ability to read, comprehend, and implement targeted fixes in codebases written in Python, C#/.NET, and/or Node.js.

• Demonstrated success in designing and implementing Infrastructure as Code using Terraform, CloudFormation, or similar tools.

• Experience in managing IT administration for a distributed team, which includes MDM/device management, identity providers, and RBAC.

• Excellent written and verbal communication skills, capable of translating technical findings into actionable items for both engineering teams and leadership.

• Comfort in working independently within a small-team environment that requires broad and diverse ownership.

• Understanding of HIPAA compliance requirements and their implications for cloud infrastructure, networks, and devices.

• Nice to have: Experience with Rippling for device management, identity, and HR/IT workflows.

• Nice to have: AWS Certified Security Specialty, AWS Certified Advanced Networking Specialty, CISSP, or similar certifications.

• Nice to have: Familiarity with CI/CD security tools such as Renovate, Snyk, SonarQube, or GitHub Advanced Security.

• Nice to have: Experience supporting SOC 2, HITRUST, or other compliance audits.

• Nice to have: Knowledge of healthcare revenue cycle management, EDI/X12, HL7, or payer connectivity.

• Nice to have: Experience with ECS or other containerized workload management solutions.

• Nice to have: Background in a SaaS or health tech environment.

🏝️ Benefits

• Performance-based bonus.

• Team bonding and off-site events held twice a year.

• Unlimited paid time off.

• Comprehensive Dental, Vision, Health, and Life Insurance.

• 401(k) retirement plan.

• Opportunities for training, mentoring, and career advancement.