Information Security Engineer - Network Security
Listed on 2026-07-19
-
IT/Tech
Cybersecurity, Network Security, Systems Engineer, Information Security
Information Security Engineer
The Information Security Engineer is responsible for the day-to-day administration, optimization, and troubleshooting of Harris Health's network security infrastructure, with primary ownership of the Cisco Secure Access (SASE) platform. This role serves as the organization's subject matter expert on Cisco security products and ensures the secure connectivity layer supporting the CIO-directed cloud migration is performant, resilient, and aligned with Zero Trust principles.
Reporting to the Manager of Security Operations, the Network Security Engineer collaborates closely with the broader security engineering team to ensure Cisco Secure Access integrates seamlessly with the Microsoft E5 security stack (Defender, Sentinel, Entra , Purview). This role also partners with IT infrastructure, network operations, and clinical informatics teams to maintain secure access for approximately 15,000 employees across Harris Health facilities.
The ideal candidate brings deep hands-on experience with Cisco security products and a working familiarity with Microsoft's cloud security ecosystem. This position is critical to the 24-month security transformation roadmap and the organization's Zero Trust and SASE implementation workstream.
Key Responsibilities:
Typical Duties may include:
- Security Engineering & Network-Centric Controls Engineer, deploy, and maintain security platforms including Microsoft 365 Security Suite, Cisco Secure Access, and Cisco Firepower Threat Defense / Firepower IPS
- Review and evaluate firewall rules, segmentation strategies, VPN solutions, network enclaves, and DMZ architectures
- Assist with the review, design and approval of secure network infrastructure configurations
- Create and maintain security standards, diagrams, and operational procedures
- Threat Detection, Monitoring & Response Investigate network-based threats using Firepower IPS, Secure Access logs, M365 Defender alerts, and SIEM telemetry
- Perform packet captures, traffic flow analysis, and deep network forensics
- Tune detection logic, security profiles, and policies across Cisco Secure Access and Firepower IPS
- Collaborate with the SOC on incident triage, escalation, and remediation
- Vulnerability Management, Risk & Compliance Coordinate with vulnerability management teams to identify and remediate weaknesses across network and cloud systems
- Maintain compliance with HIPAA, NIST, HITRUST, and internal security frameworks
- Maintain documentation for controls, architectures, risk mitigation, and configuration baselines
- Project Leadership & Collaboration Serve as a technical SME for projects requiring security and networking alignment
- Participate in architecture reviews, change processes, and design discussions
- Communicate risks, dependencies, and mitigation strategies clearly
Required
Qualifications & Skills:
Bachelor's degree in Information Security/ Computer Science/ Networking, or equivalent. 3+ years of cybersecurity or network engineering experience. Strong understanding of TCP/IP, DNS, DHCP, routing, switching, Cisco Firepower IPS, Cisco Secure Access, and Microsoft 365 Security. Experience in HIPAA-regulated environments. Strong analytical and troubleshooting skills. Clear communication for technical and non-technical teams. Commitment to protecting patient information. Collaborative and adaptable in dynamic healthcare environments.
Preferred Qualifications Healthcare cybersecurity experience. Certifications such as CISSP, HCISPP, CCNA, CCNA Security, CCNP Security, Security+, GSEC, or similar. Experience with Azure cloud security and Zero Trust principles.
Special Requirements :
Communication
Skills:
Above Average Verbal (Heavy Public Contact) Exceptional Verbal (e.g., Public Speaking)
Languages:
Writing /Composing (Correspondence /Reports) Other
Skills:
Analytical, PC and Word Proc.
Work Schedule:
Eligible for Telecommute
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).