Network Security Engineer | Full Time

GENERAL SUMMARY:

The Network Security Engineer works in collaboration with all functional areas relative to information technology systems, networks, applications, voice and data communications, and computing services within Henry Ford Health System (HFHS). The position will be responsible for providing implementation and support of the company's multi-site network and security infrastructure. Provides consulting and regulatory compliance guidance on strategic and technical initiatives and is knowledgeable of information security best practices and regulatory and compliance requirements that impact security for the enterprise.

The Network Security Engineer is responsible for the installation, troubleshooting and subsequent proactive monitoring of firewalls, VPNs, security controls, and policies. Deals with the overall health of the network relating to security and assessments in a multi-vendor, enterprise class networked environment including, but not limited to ensuring PCI and HIPAA compliance. Adheres to change management and configuration management policies and procedures, monitors and troubleshoots network and security systems in a large network environment, uses diagnostic tools, and facilitates the selection and implementation of networks, communications, security, and systems infrastructure to match the needs of Henry Ford Health System.

REPORTING/RELATIONSHIPS
The Network Security Engineer reports to the Network Security Services Manager. This position will work in a collaborative effort with IT to assure security programs and technical controls are in compliance with policies, applicable laws and regulations. Additionally, this role will work closely with Enterprise Security Architects to develop solutions and be able to test and implement those solutions with minimal supervision.

PRINCIPAL DUTIES AND RESPONSIBILITIES:

• Install, configure, and support firewalls, wireless technologies, DLP, IPS, and VPN connections.
• Perform daily tasks of the team to include but not limited to firewall rule creations or changes, switch port configurations, monitoring of log data from all network and security devices.
• Provide tier 2 and 3 technical support; assist and provide technical leadership on all network and security devices and software within the environment.
• Monitor and track scheduled system maintenance activities in applicable tools, analyzing the duration and potential impact to customers and ensuring they are consistent with approved times for these activities.
• Identify opportunities to enhance, and improve security initiatives within the environment.
• Work with architecture team to develop solution blueprints and construct test and pilot scenarios for the solution, prior to implementation.
• Work with operational staff to implement tested solutions, develop documentation and aid in KTLO tasks.
• Implement, develop, test, support, and evaluate security-focused tools and services
• Implement and support appropriate information security architecture, including but not limited to:
  • Juniper Firewalls
  • IDS and IPS
  • Netscaler Load balancers
  • Blue Coat Proxies
  • Junos Pulse SSL VPN Gateways
  • Citrix Access Gateway
• Contributes to the development and maintenance of the Information Privacy and Security Office Services Catalog and Corporate Information Security policies and procedures.