IT Network Specialist

• Own the on-premise network and its security at the Southend Pharmacy compounding facility and across infrastructure supporting Allia Health Group brands
• Design and maintain network segmentation for production systems, PHI-bearing workstations, clinical devices, administrative users, and guest/BYOD traffic
• Own firewall rule lifecycle, including review, change approval, and removal of undocumented or overly permissive rules
• Deploy and operate centralized logging across network, server, endpoint, and pharmacy production systems
• Build tuned alert rules with severity tiers and named responders
• Monitor throughput, latency, packet loss, and capacity on production-critical paths
• Manage carrier circuits, redundant paths, and scheduled failover testing
• Deploy and tune enterprise wireless with certificate-based authentication and separate production, corporate, and guest SSIDs
• Administer VPN and Zero Trust network access for remote staff and offshore contractors
• Run vulnerability scans and track remediation to closure
• Lead technical security incident response, including detection, triage, containment, eradication, and post-incident documentation
• Perform pre-authorized containment actions and escalation incidents to the IT Operations Lead when required
• Version network configurations, maintain topology documentation, and produce SOC 2 change-management evidence
• Govern carrier and hardware vendor service levels and plan equipment refreshes
• Provide documented-runbook on-site coverage for the IT Support Specialist during absences or overlapping production incidents
• Participate in an on-call rotation for production-critical and security events outside standard hours

• Bachelor's degree in information technology, computer science, network engineering, or a related field preferred
• Equivalent hands-on experience accepted in place of a degree
• CCNA, or equivalent vendor certification for comparable platforms (JNCIA, Aruba ACSA, Fortinet FCP), or demonstrated equivalent skill
• CompTIA Security+, or equivalent security fundamentals credential
• 5–8 years in network administration or network engineering
• At least 2 years owning a production network environment, including change decisions and escalation
• Multi-site experience including carrier circuit management and redundant path failover
• Direct, hands-on firewall rule administration under a change process
• Enterprise wireless deployment and troubleshooting
• Experience building centralized logging, monitoring, or SIEM capability from the ground up strongly preferred
• Experience with network segmentation in a regulated or production environment strongly preferred
• Wireless deployment supporting handheld scanners or mobile equipment strongly preferred
• Participation in security incident response strongly preferred
• Producing evidence for compliance audits strongly preferred
• Must be legally authorized to work in the United States without current or future sponsorship

Demonstrates expertise in network administration and security, with a focus on managing production environments, firewall rule administration, and incident response. Proficient in deploying enterprise wireless solutions and maintaining compliance with regulatory standards.

• Network Administration
• Firewall Rule Administration
• Incident Response
• Enterprise Wireless Deployment
• Centralized Logging

• Network Segmentation
• Vulnerability Scanning
• Change Management
• Carrier Circuit Management
• Monitoring Throughput
• Packet Loss Analysis
• VPN Administration
• Zero Trust Network Access
• SIEM Capability
• Wireless Troubleshooting

• Documentation
• Collaboration
• Problem-Solving
• Communication

• CCNA
• CompTIA Security+
• JNCIA
• Aruba ACSA
• Fortinet FCP

• PHI-Bearing Workstations
• Production Systems
• Change Approval Process
• Compliance Audits
• Regulated Environment

• Centralized Logging Systems
• Firewall Management Tools
• Network Monitoring Tools
• Wireless Access Points
• VPN Solutions