Senior Network Security Engineer II

As a Senior Network Security Engineer II you will lead the design, implementation, and maintenance of our organization’s network security infrastructure. The ideal candidate will have a strong background in network security, a passion for building secure systems, and proven leadership experience in managing engineering teams and design, implement, and maintain secure network infrastructures for and cloud environments. The ideal candidate will have deep expertise in network security technologies, networking in cloud platforms, and a proactive mindset to protect against evolving threats. This role involves working closely with cross-functional teams to ensure the highest levels of security and compliance for our network architecture while aligning with the company’s business objectives. This role will support the architecture, design, implementation, and operations of the company network and cloud infrastructure. This role will also be involved in leading-edge expertise to manage critical incidents and problems, and deliver consistent and reliable network operations including DDI, Firewall, VPN and load balancing. This candidate will provide technical leadership and coach junior members of the network security team. Primary Duties Design, implement, and manage secure network solutions, including firewalls, VPNs, and intrusion prevention systems (IPS), for cloud-based environments. Configure and secure networking services in cloud platforms such as AWS, Azure, or Google Cloud, including Virtual Private Clouds (VPCs), security groups, and network gateways. Monitor cloud network activity to detect, analyze, and respond to security threats and vulnerabilities . Oversee network segmentation, encryption, and secure access mechanisms to safeguard sensitive data and systems. Deploy and manage advanced network security technologies, such as Zero Trust Architecture, SD-WAN, and SASE solutions, across hybrid infrastructures. Conduct regular network security assessments, including penetration testing and vulnerability scans, in both traditional and cloud-native environments. Develop and enforce network security policies, standards, and guidelines for hybrid environments and collaborate with cloud engineering teams to implement security best practices in cloud deployments. Maintain up-to-date documentation of network security architectures, configurations, and cloud networking setups. Troubleshoot and resolve complex network security issues across corporate IT infra and cloud platforms. Minimum Qualifications Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field. 7+ years of experience in network security engineering or related roles, including experience with cloud networking and security. Preferred KSA’s Expertise in securing cloud environments such as AWS (e.g., VPCs, IAM, Security Groups), Azure (e.g., VNets, NSGs, Azure Firewall), or GCP (e.g., Cloud Armor, Cloud VPN). Hands-on experience with network security tools including firewalls, VPNs, IDS/IPS, encryption, DLP (Zscaler, Palo Alto etc). Hands-on experience with network security monitoring tools (eg: wireshark), SIEMs, and incident response. Familiarity with Infrastructure-as-Code (IaC) tools like Terraform or CloudFormation for networking automation. Certifications such as AWS Certified Advanced Networking Specialty, CCNP Security, or equivalent are highly desirable. Familiarity with DevSecOps and security monitoring in CI/CD environments and containerized environments (Docker, Kubernetes). Experience with Zero Trust models, microsegmentation, and cloud-native security solutions (e.g., AWS Security Hub, Azure Sentinel). Experience leading large-scale network security projects, from planning and implementation to monitoring and assessment. Strong analytical and troubleshooting skills, with attention to detail. Previous experience in healthcare, finance, or government sectors, particularly in managing network security within compliance frameworks like HIPAA, PCI-DSS, or SOX. Ability to automate network security tasks using Python, Bash, or other scripting languages, improving efficiency and response times for security events. Excellent communication and documentation abilities. Strong background in handling network-related incidents and conducting forensic analysis to uncover the cause and impact of security breaches. Certifications such as CISSP, CCNP, CEH, or similar are strongly preferred. Physical Requirements Sitting for prolonged periods of time. Extensive use of computers and keyboard. Occasional walking and lifting may be required. Who We Are: Aledade, a public benefit corporation, exists to empower the most transformational part of our health care landscape - independent primary care. We were founded in 2014, and since then, we've become the largest network of independent primary care in the country - helping practices, health centers and clinics deliver better care to their patients and thrive in value-based care. Additionally, by creating value-based contracts across a wide variety of health plans, we aim to flip the script on the traditional fee-for-service model. Our work strengthens continuity of care, aligns incentives and ensures primary care physicians are paid for what they do best - keeping patients healthy. If you want to help create a health care system that is good for patients, good for practices and good for society - and if you're eager to join a collaborative, inclusive and remote-first culture - you've come to the right place. What Does This Mean for You? At Aledade, you will be part of a creative culture that is driven by a passion for tackling complex issues with respect, open-mindedness and a desire to learn. You will collaborate with team members who bring a wide range of experiences, interests, backgrounds, beliefs and achievements to their work - and who are all united by a shared passion for public health and a commitment to the Aledade mission. In addition to time off to support work-life balance and enjoyment, we offer the following comprehensive benefits package designed for the overall well-being of our team members: Flexible work schedules and the ability to work remotely are available for many roles Health, dental and vision insurance paid up to 80% for employees, dependents and domestic partners Robust time-off plan (21 days of PTO in your first year) Two paid volunteer days and 11 paid holidays 12 weeks paid parental leave for all new parents Six weeks paid sabbatical after six years of service Educational Assistant Program and Clinical Employee Reimbursement Program 401(k) with up to 4% match Stock options And much more! At Aledade, we don’t just accept differences, we celebrate them! We strive to attract, develop and retain highly qualified individuals representing the diverse communities where we live and work. Aledade is committed to creating a diverse environment and is proud to be an equal opportunity employer. Employment policies and decisions at Aledade are based on merit, qualifications, performance and business needs. All qualified candidates will receive consideration for employment without regard to age, race, color, national origin, gender (including pregnancy, childbirth or medical conditions related to pregnancy or childbirth), gender identity or expression, religion, physical or mental disability, medical condition, legally protected genetic information, marital status, veteran status, or sexual orientation. Privacy Policy: By applying for this job, you agree to Aledade's Applicant Privacy Policy available at https://www.aledade.com/privacy-policy-applicants