[Hiring] Security Engineer @Amplity Health

Role Description

We are seeking an experienced Security Engineer to join our IT Security team, with strong expertise in network security, firewall technologies, and secure infrastructure. This is a hands-on engineering role responsible for supporting and improving the organization’s security controls across network, cloud, identity, endpoint and SaaS environments. A key focus will be ownership of network security technologies and ensuring that connectivity between users, offices, cloud environments and third parties is appropriately secured and monitored.

Key Responsibilities

• Take technical ownership of network security controls, including next-generation firewalls, firewall policies, VPNs, network segmentation and secure connectivity.
• Manage and maintain firewall rulesets, including rule creation, review, optimization and removal of unnecessary or obsolete access.
• Troubleshoot network and firewall issues across corporate, cloud and remote-access environments.
• Support the design and implementation of secure network architectures, including segmentation and least-privilege connectivity.
• Review network traffic, logs and security events to identify suspicious activity and assist with investigations.
• Assess security implications of new network connections, third-party integrations and infrastructure changes.
• Work with Infrastructure and DevOps teams to ensure security is incorporated into network and cloud architecture.
• Follow formal change management processes for network and firewall changes, including obtaining required approvals, testing changes before implementation, documenting rollback plans, and performing post-change validation to confirm security controls and connectivity function as intended.
• Maintain appropriate documentation covering network security architecture, firewall configurations and operational procedures.

Security Engineering

• Manage and improve security technologies across endpoint, cloud, identity, email and network environments.
• Investigate security alerts and provide technical support during security incidents.
• Identify vulnerabilities and configuration weaknesses and work with technology owners through remediation.
• Implement security controls based on risk, security standards and organizational requirements.
• Support security monitoring and detection capabilities and help improve visibility across the technology environment.
• Participate in vulnerability management, security assessments and remediation activities.
• Support security elements of technology projects, migrations and integrations.
• Assist with security evidence and technical controls supporting frameworks such as SOC 2, CIS Controls and ISO 27001-aligned practices.
• Contribute to continuous improvement of security tooling, processes and automation.

Qualifications

• Strong hands-on experience in enterprise networking fundamentals, including TCP/IP, routing, switching, DNS, DHCP, NAT and VLANs.
• Enterprise firewall administration and troubleshooting.
• Firewall policies, network segmentation and access-control design.
• Site-to-site and remote-access VPN technologies.
• Analyzing network traffic and logs to troubleshoot connectivity and security issues.
• Network security architecture and secure connectivity.
• Cloud networking and security, ideally within Microsoft Azure.
• Security incident investigation and troubleshooting.
• Vulnerability management and remediation.
• Working within a modern Microsoft enterprise environment.

Desirable Experience

• Experience with Palo Alto Networks, Fortinet, Cisco or similar next-generation firewall platforms.
• Microsoft Azure networking, including VNets, NSGs, routing and private connectivity.
• Microsoft Entra ID.
• Microsoft Intune.
• Microsoft Defender.
• Netskope or other SSE/SASE technologies.
• SIEM and security monitoring platforms.
• EDR/XDR technologies.
• Infrastructure-as-Code or automation, such as PowerShell, Python or Terraform.
• Security within DevOps or CI/CD environments.
• Cloud security posture management.
• SOC 2, CIS Controls, NIST CSF or ISO 27001 environments.

Technical Skills & Attributes

• Strong technical troubleshooting skills with the ability to work methodically across network, infrastructure and security layers.
• Comfortable taking ownership of technical issues from investigation through resolution.
• Able to balance security requirements against operational and business needs.
• Strong understanding of least privilege, defense in depth and Zero Trust principles.
• Able to communicate technical risks clearly to both technical and non-technical stakeholders.
• Comfortable working independently while collaborating closely with Infrastructure, DevOps and other IT teams.
• Curious and willing to learn technologies outside their immediate area of expertise.

Education & Experience

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent practical work experience).
• 5+ years of hands-on experience in systems administration, network infrastructure, or enterprise IT operations.

Qualifications

• Relevant industry experience is more important than specific certifications, although certifications such as the following would be beneficial:
• Palo Alto PCNSA/PCNSE.
• Fortinet FCP/FCSS.
• Cisco CCNA/CCNP.
• Microsoft AZ-500.
• Microsoft SC-200 / SC-300.
• CompTIA Security+.

EPIIC Values

• Excellence: We set high standards, are solutions-focused, and achieve outstanding results with professionalism and positivity.
• Passion: We love what we do; our energy inspires, engages, and motivates others.
• Innovation: Our ideas set us apart; we are curious, bold, and challenge conventional ways of working.
• Integrity: We are open, honest, and transparent, doing the right thing with courage and understanding.
• Collaboration: We are better together, actively seeking the participation of others to achieve greater outcomes.