IT Network & Security Engineer

Description

About Us

Astiva Health, Inc., located in Orange, CA is a premier healthcare provider specializing in Medicare and HMO services. With a focus on delivering comprehensive care tailored to the needs of our diverse community, we prioritize accessibility, affordability, and quality in all aspects of our services. Join us in our mission to transform healthcare delivery and make a meaningful difference in the lives of our members.

Job Summary

Astiva Health is a Medicare Advantage organization dedicated to delivering high-quality, coordinated care to its members. The IT Network & Security Engineer designs, maintains, and secures the enterprise network infrastructure and cloud environments connecting our offices, staff, and core health data systems against cyber threats. Working closely with IT, security, and business leadership, this role owns network reliability and defense-in-depth security controls, enforcing the HIPAA Security Rule, protecting Protected Health Information (PHI), and ensuring compliance with CMS and healthcare regulatory standards.

Key Responsibilities

• •Network Infrastructure & Operations: Install, configure, and maintain network infrastructure, including routers, switches, firewalls, wireless access points, VPNs, and structured cabling.
• •Perimeter & Cyber Defense: Design, configure, and monitor next-generation firewalls, Web Application Firewalls (WAF), secure VPN tunnels, and Intrusion Detection/Prevention Systems (IDS/IPS).
• •Performance & Troubleshooting: Monitor network performance, availability, and capacity; troubleshoot and resolve connectivity issues for staff, core business systems, and clinical integrations.
• •HIPAA & PHI Security: Manage firewall policies, micro-segmentation, and zero-trust remote access to protect PHI and strictly comply with HIPAA Security Rule requirements.
• •Cloud Security & Architecture: Support secure connectivity and cloud security guardrails between on-premises offices and Microsoft Azure (VNets, ExpressRoute/VPN gateways, Network Security Groups, and Entra ID).
• •Vulnerability & Incident Management: Apply firmware updates and security patches; run vulnerability scans, remediate findings, analyze SIEM logs, and respond promptly to network security incidents.
• •Access Control & Zero Trust: Administer Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and Privileged Access Management (PAM) frameworks for network infrastructure.
• •Change & Maintenance Management: Follow strict change management for network/security modifications: schedule within maintenance windows, back up configurations, and maintain tested rollback plans.
• •On-Call & Emergency Response: Participate in scheduled after-hours maintenance windows and an on-call rotation to address emergency network outages, critical security alerts, and system incidents.
• •Audit Readiness & Vendor Risk: Partner with compliance teams to gather technical evidence for HIPAA, HITRUST, NIST CSF, and CMS security audits; perform technical security evaluations for First-Tier, Downstream, and Related Entities (FDRs).
• •Unified Communications & QoS: Support VoIP and unified communications systems, ensuring proper Quality of Service (QoS) for voice and video traffic.
• •Vendor & Inventory Management: Coordinate with ISPs, telecom providers, and hardware vendors; maintain detailed inventory of network equipment, circuits, and licenses.
• •Documentation & Disaster Recovery: Maintain up-to-date network topology maps, security policies, incident runbooks, and disaster recovery architectures.

Requirements

Required Qualifications

• •Bachelor's degree in information technology, Computer Science, Cybersecurity, Network Engineering, or related field (or equivalent practical experience).
• •3+ years of hands-on experience in network administration, network engineering, or enterprise network security.
• •Strong working knowledge of TCP/IP, routing and switching, VLAN segregation, DNS security, and IPsec/SSL VPN tunnels.
• •Proven experience configuring and managing enterprise firewalls and VPN solutions (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower, Meraki).
• •Experience with network monitoring, diagnostic tools, and security log analysis (e.g., Wireshark, PRTG, SolarWinds, SIEM platforms).
• •Solid understanding of network security best practices, including firewall policy management, network segmentation, MFA, and security log reviews.
• •Practical understanding of HIPAA Security Rule compliance, data privacy principles, and standard security frameworks (e.g., NIST CSF, HITRUST).
• •Flexibility and willingness to participate in periodic weekend/after-hours maintenance windows and emergency on-call rotations.

Preferred Qualifications

• •Active industry security or networking certifications such as CISSP, CCNA, CCNP, CCSP, CompTIA Security+, or vendor-specific credentials (e.g., PCNSA/PCNSE).
• •Prior experience working in a healthcare, managed care, healthcare payer, or Medicare Advantage (MAPD) environment.
• •Deep technical knowledge of HIPAA compliance, CMS guidelines, and FDR vendor security oversight.
• •Hands-on experience with Microsoft Azure networking, Network Security Groups, ExpressRoute, Windows Server, Active Directory, or Microsoft Entra ID.
• •Scripting skills for network automation, security reporting, and task execution (PowerShell or Python).
• •Comfortable using AI-assisted tools (e.g., Claude, ChatGPT, GitHub Copilot) for network scripting, threat analysis, and documentation.

BENEFITS:

• •401(k)
• •Dental Insurance
• •Health Insurance
• •Life Insurance
• •Vision Insurance
• •Paid Time Off
• •Free Lunch On-Site

LANGUAGE: Ability to read and interpret documents such as safety rules, operating and maintenance instructions, and procedure manuals. Ability to write routine reports and correspondence. Ability to speak effectively before groups and customers or employees of the organization.

MATHEMATICS: Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals. Ability to compute rate, ratio, and percent and to draw and interpret bar graphs.

REASONING ABILITY: Ability to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, diagram or schedule form.

EEO/AFFIRMATIVE ACTION STATEMENT: It is the policy of Astiva Health to provide equal employment opportunities without regard to race, color, religion, sex, national origin, age, disability, marital status, veteran status, sexual orientation, genetic information or any other protected characteristic under applicable law. This policy relates to all phases of employment, including but not limited to recruiting, employment, placement, promotion, transfer, demotion, reduction of workforce and termination, rates of pay or other forms of compensation, selection for training, the use of all facilities, and participation in all company sponsored employee activities. Provisions in applicable laws providing for bona fide occupational qualifications, business necessity or age limitations will be adhered to by the organization where appropriate. Please refer to Standard Operating Procedure 100 for more information about the organization’s Affirmative Action/EEO statement.

PHYSICAL DEMANDS: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is frequently required to sit and complete work while on a computer. The employee occasionally is required to stand, walk, use hands to finger, handle or feel, reach with hands and arms, stoop, kneel, crouch or crawl, climb or balance, talk and hear.

While performing the duties of t