Network Security Manager | PAM Health Corporate

About the Role

The Network Security Manager / Architect is responsible for the architecture, implementation, and operational ownership of PAM Health's enterprise network security and secure WAN environment. This role leads the Network Firewall Security function within Infrastructure, overseeing firewall, SD-WAN, VPN, segmentation, and hybrid-cloud network security across hospitals, corporate locations, and cloud environments. The Manager / Architect serves as a hands-on technical architect and team leader, designing and implementing security solutions and policy standards while supervising the network security team. They collaborate with Network Infrastructure, Information Security, Cloud/AI, and application teams to deliver resilient, scalable, and secure connectivity that supports patient care and clinical operations.

Responsibilities

• Own the architecture, implementation, lifecycle management, and operational governance of enterprise firewalls, SD-WAN, VPN, segmentation, and secure network connectivity.
• Architect and lead deployment of Fortinet solutions, including physical and virtual FortiGate firewalls, FortiManager, FortiAnalyzer, and Secure SD-WAN across hospitals, corporate locations, and cloud environments.
• Develop standardized firewall and SD-WAN configurations, templates, routing designs, security policies, NAT, VPNs, segmentation, high availability, and security profiles.
• Design and operate Microsoft Azure network security integration, including virtual networks, subnets, peering, route tables/UDRs, hybrid connectivity, and virtual firewall/network appliance deployments as part of the SD-WAN fabric.
• Establish secure network connectivity patterns for cloud and third-party services, including Google Cloud Platform connectivity when required.
• Own firewall policy governance, rule lifecycle management, change review, exception handling, recertification, and documentation standards.
• Monitor and optimize security, availability, performance, capacity, licensing, software lifecycle, and resiliency of firewall and SD-WAN platforms.
• Lead technical escalation, incident response, and root cause analysis for firewall, SD-WAN, VPN, and hybrid-cloud connectivity issues.
• Manage, prioritize, mentor, and develop the Senior Network Security Engineer while providing technical direction to the broader Network Infrastructure team.
• Partner with Information Security, Cloud/AI, Infrastructure, application teams, vendors, and service providers on secure designs, new site deployments, migrations, and complex changes.
• Maintain architecture diagrams, standards, implementation documentation, runbooks, audit evidence, and controls supporting HIPAA, organizational security, disaster recovery, and business continuity requirements.

Leadership

• Promotes cooperation, fairness, and equity; respects differences; understands others' perspectives; demonstrates empathy; and brings out the best in the team.
• Coaches, evaluates, develops, and inspires staff; sets expectations; and recognizes achievements.
• Demonstrates accountability and sound judgment in managing company resources; adheres to confidentiality and company values.
• Identifies problems, involves others in seeking solutions, conducts analysis, and implements effective responses.
• Makes clear, consistent, and timely decisions with integrity.
• Aligns priorities with company vision, measures outcomes, and organizes complex issues effectively.
• Communicates clearly and effectively with peers, subordinates, and customers; negotiates successfully.
• Strives for high-quality performance, delivers timely results, and takes initiative for improvement.
• Motivates others, maintains high morale, and expects honest and ethical behavior.
• Encourages teamwork, builds effective teams, and is responsive to others' needs.
• Maintains up-to-date skills through professional development and continuing education.

Customer Service

• Maintains high customer service standards through courtesy, compassion, and positive communication.
• Promotes PAM Health's mission and vision within the work environment and community.
• Respects dignity and confidentiality by adhering to applicable policies and procedures.
• Provides professional, courteous support to clinical staff, hospital leadership, and business users.
• Acts as a technical point of contact for IT leadership and clinical stakeholders.
• Communicates technical risks, impacts, and outcomes clearly and effectively.
• Maintains strict adherence to HIPAA, security, and organizational policies.

Health and Safety

• Works in a manner that promotes safety and follows appropriate clothing standards.
• Participates in OSHA required training and complies with universal precautions.
• Reports unsafe practices and knows emergency response roles.

Qualifications

• Education and Training: Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Network Engineering, or related field preferred; equivalent experience considered.
• Experience:
  • 8+ years in enterprise network engineering, network security, or infrastructure security.
  • 5+ years designing, implementing, and operating next-generation firewalls, VPNs, secure WAN, and/or SD-WAN solutions.
  • Demonstrated experience as a technical architect for complex multi-site network security deployments.
  • Hands-on Microsoft Azure networking experience required.
  • Experience leading or mentoring technical staff; direct people-management preferred.
  • Healthcare or regulated-industry experience strongly preferred.
• Knowledge, Skills, and Abilities:
  • Advanced knowledge of enterprise firewall architecture, secure SD-WAN, IPsec VPNs, segmentation, and threat-prevention controls.
  • Strong working knowledge of Fortinet and Microsoft Azure networking technologies.
  • Understanding of TCP/IP, BGP, OSPF, VLANs, DNS, DHCP, NAT, QoS, and routing design.
  • Ability to design scalable, resilient hybrid-cloud and multi-site network security architectures.
  • Strong leadership, documentation, project coordination, and communication skills.
  • Relevant certifications (Fortinet, Microsoft Azure, Cisco) preferred.

Physical Demands and Working Conditions: See attached Job Activity Requirements. Working indoors in well-lighted, well-ventilated areas, similar to hospital surroundings. Occasional travel and on-call participation required.

Organizational Data: Exempt position with no formal lines of promotion. Responsibilities and duties may evolve over time.