{"id":4053534,"url":"https://alion.io/job/astiva-health-it-network-security-engineer","title":"IT Network & Security Engineer","company":{"id":2559070,"name":"Astiva Health","domain":"astivahealth.com","url":"https://alion.io/company/astivahealth","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Orange, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":85000,"max":130000,"currency":"USD","period":"year","gross":null,"usd_annual":130000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Defense in Depth","optional":false},{"name":"DNS","optional":false},{"name":"HIPAA","optional":false},{"name":"Incident Management","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"VLAN","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false},{"name":"Zero Trust","optional":false},{"name":"Active Directory","optional":true},{"name":"ChatGPT","optional":true},{"name":"Claude","optional":true},{"name":"Copilot","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Windows Server","optional":true}],"status":"live","first_seen_at":"2026-11-10T22:55:57Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T03:16:11Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Description\nAbout Us\nAstiva Health, Inc., located in Orange, CA is a premier healthcare provider specializing in Medicare and HMO services. With a focus on delivering comprehensive care tailored to the needs of our diverse community, we prioritize accessibility, affordability, and quality in all aspects of our services. Join us in our mission to transform healthcare delivery and make a meaningful difference in the lives of our members.\nJob Summary\nAstiva Health is a Medicare Advantage organization dedicated to delivering high-quality, coordinated care to its members. The IT Network & Security Engineer designs, maintains, and secures the enterprise network infrastructure and cloud environments connecting our offices, staff, and core health data systems against cyber threats. Working closely with IT, security, and business leadership, this role owns network reliability and defense-in-depth security controls, enforcing the HIPAA Security Rule, protecting Protected Health Information (PHI), and ensuring compliance with CMS and healthcare regulatory standards.\nKey Responsibilities\nNetwork Infrastructure & Operations: Install, configure, and maintain network infrastructure, including routers, switches, firewalls, wireless access points, VPNs, and structured cabling.\nPerimeter & Cyber Defense: Design, configure, and monitor next-generation firewalls, Web Application Firewalls (WAF), secure VPN tunnels, and Intrusion Detection/Prevention Systems (IDS/IPS).\nPerformance & Troubleshooting: Monitor network performance, availability, and capacity; troubleshoot and resolve connectivity issues for staff, core business systems, and clinical integrations.\nHIPAA & PHI Security: Manage firewall policies, micro-segmentation, and zero-trust remote access to protect PHI and strictly comply with HIPAA Security Rule requirements.\nCloud Security & Architecture: Support secure connectivity and cloud security guardrails between on-premises offices and Microsoft Azure (VNets, ExpressRoute/VPN gateways, Network Security Groups, and Entra ID).\nVulnerability & Incident Management: Apply firmware updates and security patches; run vulnerability scans, remediate findings, analyze SIEM logs, and respond promptly to network security incidents.\nAccess Control & Zero Trust: Administer Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and Privileged Access Management (PAM) frameworks for network infrastructure.\nChange & Maintenance Management: Follow strict change management for network/security modifications: schedule within maintenance windows, back up configurations, and maintain tested rollback plans.\nOn-Call & Emergency Response: Participate in scheduled after-hours maintenance windows and an on-call rotation to address emergency network outages, critical security alerts, and system incidents.\nAudit Readiness & Vendor Risk: Partner with compliance teams to gather technical evidence for HIPAA, HITRUST, NIST CSF, and CMS security audits; perform technical security evaluations for First-Tier, Downstream, and Related Entities (FDRs).\nUnified Communications & QoS: Support VoIP and unified communications systems, ensuring proper Quality of Service (QoS) for voice and video traffic.\nVendor & Inventory Management: Coordinate with ISPs, telecom providers, and hardware vendors; maintain detailed inventory of network equipment, circuits, and licenses.\nDocumentation & Disaster Recovery: Maintain up-to-date network topology maps, security policies, incident runbooks, and disaster recovery architectures.\nRequirements\nRequired Qualifications\nBachelor's degree in information technology, Computer Science, Cybersecurity, Network Engineering, or related field (or equivalent practical experience).\n3+ years of hands-on experience in network administration, network engineering, or enterprise network security.\nStrong working knowledge of TCP/IP, routing and switching, VLAN segregation, DNS security, and IPsec/SSL VPN tunnels.\nProven experience configuring and managing enterprise firewalls and VPN solutions (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower, Meraki).\nExperience with network monitoring, diagnostic tools, and security log analysis (e.g., Wireshark, PRTG, SolarWinds, SIEM platforms).\nSolid understanding of network security best practices, including firewall policy management, network segmentation, MFA, and security log reviews.\nPractical understanding of HIPAA Security Rule compliance, data privacy principles, and standard security frameworks (e.g., NIST CSF, HITRUST).\nFlexibility and willingness to participate in periodic weekend/after-hours maintenance windows and emergency on-call rotations.\nPreferred Qualifications\nActive industry security or networking certifications such as CISSP, CCNA, CCNP, CCSP, CompTIA Security+, or vendor-specific credentials (e.g., PCNSA/PCNSE).\nPrior experience working in a healthcare, managed care, healthcare payer, or Medicare Advantage (MAPD) environment.\nDeep technical knowledge of HIPAA compliance, CMS guidelines, and FDR vendor security oversight.\nHands-on experience with Microsoft Azure networking, Network Security Groups, ExpressRoute, Windows Server, Active Directory, or Microsoft Entra ID.\nScripting skills for network automation, security reporting, and task execution (PowerShell or Python).\nComfortable using AI-assisted tools (e.g., Claude, ChatGPT, GitHub Copilot) for network scripting, threat analysis, and documentation.\nBENEFITS:\n401(k)\nDental Insurance\nHealth Insurance\nLife Insurance\nVision Insurance\nPaid Time Off\nFree Lunch On-Site\nLANGUAGE: Ability to read and interpret documents such as safety rules, operating and maintenance instructions, and procedure manuals. Ability to write routine reports and correspondence. Ability to speak effectively before groups and customers or employees of the organization.\nMATHEMATICS: Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals. Ability to compute rate, ratio, and percent and to draw and interpret bar graphs.\nREASONING ABILITY: Ability to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, diagram or schedule form.\nEEO/AFFIRMATIVE ACTION STATEMENT: It is the policy of Astiva Health to provide equal employment opportunities without regard to race, color, religion, sex, national origin, age, disability, marital status, veteran status, sexual orientation, genetic information or any other protected characteristic under applicable law. This policy relates to all phases of employment, including but not limited to recruiting, employment, placement, promotion, transfer, demotion, reduction of workforce and termination, rates of pay or other forms of compensation, selection for training, the use of all facilities, and participation in all company sponsored employee activities. Provisions in applicable laws providing for bona fide occupational qualifications, business necessity or age limitations will be adhered to by the organization where appropriate. Please refer to Standard Operating Procedure 100 for more information about the organization’s Affirmative Action/EEO statement.\nPHYSICAL DEMANDS: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.\nWhile performing the duties of this job, the employee is frequently required to sit and complete work while on a computer. The employee occasionally is required to stand, walk, use hands to finger, handle or feel, reach with hands and arms, stoop, kneel, crouch or crawl, climb or balance, talk and hear.\nWhile performing the duties of this job, the employee is occasionally required to lift or exert force up to 10 pounds.\nWORK ENVIRONMENT: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.\nThe noise level in the work environment is usually moderate.\nSalary Description\n$85,000 - $130,000/ year","description_format":"text","description_chars":8392,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Health insurance","Life insurance","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2026-11-11T03:16:11Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["conf:2","win:early"],"computed_at":"2026-11-11T05:32:22Z"},"pay":{"stated_usd_annual":130000,"is_top_pay":true},"html_url":"https://alion.io/job/astiva-health-it-network-security-engineer","json_url":"https://alion.io/job/astiva-health-it-network-security-engineer.json","meta":{"generated_at":"2026-11-11T05:32:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7291,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2559070},"rest":"https://alion.io/mcp/rest/get_company?id=2559070"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fastiva-health-it-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fastiva-health-it-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fastiva-health-it-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/astiva-health-it-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fastiva-health-it-network-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4053534}},{"tool":"search_jobs","arguments":{"company":"astivahealth.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4053534},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}