[Hiring] Network & Security Engineer I @maxRTE

Role Description

As a Network & Security Engineer at maxRTE, you will help own the security and connectivity of our AWS cloud environment, network infrastructure, and internal IT operations. This is a high-impact, variety-filled role at a strong health tech company where your work will directly shape the security, reliability, and scalability of systems that healthcare providers and patients depend on every day.

You will make a significant positive impact across networking, cloud security, code security, and IT security while collaborating closely with our platform engineering team to align infrastructure and security decisions with product goals. If you thrive in environments where no two days look the same and you take genuine pride in making systems cleaner, tighter, and more automated than you found them, we’d love to hear from you.

Qualifications

• 5+ years of experience in network engineering, security engineering, cloud infrastructure, or a related role.
• Deep hands-on experience with AWS networking: VPC, Site-to-Site VPN, Transit Gateway, Route 53, Elastic Load Balancing, API Gateway, PrivateLink, security groups, and NACLs.
• Strong networking fundamentals, including TCP/IP, IPsec, BGP, NAT, DNS, and TLS, with experience troubleshooting VPN and TCP connections with external partners.
• Hands-on experience with AWS security services: Security Hub, Inspector, GuardDuty, IAM, CloudTrail, KMS, and WAF.
• Experience identifying, triaging, and remediating security vulnerabilities across cloud resources, container images, and application code dependencies.
• Ability to read, understand, and make targeted fixes in Python, C#/.NET, and/or Node.js codebases.
• Proven ability to design and implement Infrastructure as Code (Terraform, CloudFormation, or equivalent).
• Experience managing IT administration for a distributed team, including MDM/device management, identity providers, and RBAC.
• Strong written and verbal communication skills, with the ability to translate technical findings into clear action items for engineering and leadership.
• Comfort working autonomously in a small-team environment with broad, varied ownership.
• Understanding of HIPAA compliance requirements and how they apply to cloud infrastructure, networks, and devices.

Requirements

• Own and improve Site-to-Site VPN and TCP connectivity for clients and partners, including VPC architecture, route tables, subnets, security groups, and NACLs.
• Design and implement automated client onboarding experiences using templating and Infrastructure as Code.
• Design, secure, and maintain API networking, including API Gateway, load balancers, PrivateLink, Route 53, TLS, and WAF configurations.
• Troubleshoot connectivity issues directly with client and partner network teams, covering IPsec tunnels, routing, NAT, and IP allowlisting.
• Harden existing network configurations to improve security posture and reduce manual intervention for each new client connection.
• Help manage interface infrastructure supporting healthcare data integrations, ensuring availability, performance, and observability.
• Continuously monitor and remediate security vulnerabilities across AWS resources, including Lambdas, ECR images, EC2 instances, and beyond, using AWS Inspector, Security Hub, GuardDuty, and related tooling.
• Automate vulnerability prevention through image lifecycle policies, patch management (SSM Patch Manager), and Security Hub automation rules.
• Drive meaningful, measurable reductions in our vulnerability count over time, and define and track remediation SLAs.
• Maintain and improve HIPAA-compliant configurations across all cloud resources and services.
• Support security questionnaires, vendor reviews, and audits with clear, accurate documentation of our security posture.
• Patch and resolve critical and high-severity vulnerabilities in Python, C#, and Node.js dependencies and container images; escalate larger code changes to platform or product engineers as needed.
• Implement and maintain dependency scanning, automated dependency updates, secret scanning, and static analysis in our CI/CD pipelines.
• Harden container base images and build pipelines to reduce vulnerabilities at the source.
• Partner with engineers on secure coding practices and review security-sensitive changes.
• Manage device security, enrollment, and lifecycle, including encryption, OS patch compliance, and remote wipe capabilities, using Rippling.
• Own identity and access management across AWS (IAM and IAM Identity Center), internal applications, and SaaS tools, enforcing least-privilege, RBAC, SSO, and MFA.
• Administer device vulnerability scanning and ensure endpoint compliance for a distributed remote workforce.
• Support onboarding and offboarding workflows, including provisioning and deprovisioning accounts, devices, and access across all platforms.
• Help develop and maintain security policies, incident response procedures, and security awareness practices.

Benefits

• Competitive salary and Performance-based bonus
• Team bonding and off-site events 2x per year
• Unlimited paid time off
• Dental, Vision, Health, and Life Insurance
• 401(k) plan