IT Network Specialist

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full-Time Houston, TX, US

Salary Range: $85,000.00 To $ Annually

Allia Health Group is a fast-growing digital health system revolutionizing metabolic, hormonal, and longevity care. As the parent organization behind Brello Health (women's telehealth and longevity programs), Hello Wellness (men's telehealth), Southend Pharmacy (a state-licensed 503A compounding pharmacy), and Zito Care (our healthcare provider network), we deliver seamless, end-to-end care powered by a shared technology and AI platform.

We remove barriers so clinicians can focus on patients and patients can access personalized, proactive care on their own terms — whether through telehealth visits, compounded medications, lab testing, wellness support, and more, all in one connected experience across 35+ states.

Allia is building the future of healthcare by being clinician-first and patient-centered. We are innovative, empathetic, and accessible to our patients, combining cutting-edge tools with human-centered care to make high-quality longevity and wellness solutions affordable and available to more people.

At Allia Health Group, you're part of something bigger — helping shape a mission-driven enterprise that's scaling rapidly, solving real problems in healthcare inefficiencies, and making a tangible difference in people's lives every day.

Own the on-premise network and its security at the Southend Pharmacy compounding facility and across the infrastructure supporting our brands, working with the CTO organization’s cloud security team where site infrastructure meets cloud workloads. Beyond keeping things connected, this role builds the logging, alerting, and monitoring layer that lets us see security and availability events, which is our biggest blind spot today.

Escalation and change approval run through the IT Operations Lead. Identity-integrated network access is coordinated with the Systems Administrator.

Network Segmentation:
Design and maintain zones that separate compounding production systems, PHI-bearing workstations, clinical devices, administrative users, and guest or BYOD traffic, which the 2026 HIPAA Security Rule expects.

Firewall & Perimeter Management:
Own the firewall rule lifecycle, including documented periodic review, change approval, and elimination of undocumented or overly permissive rules.

Logging Architecture:
Deploy and operate centralized log collection spanning firewalls, switches, wireless, servers, endpoints, and pharmacy production systems, with retention configured to the standard set by the compliance program.

Alerting & Detection:
Build tuned alert rules with clear severity tiers routed to a named responder. The goal is a manageable number of alerts that are worth acting on.

Proactive Monitoring:
Track throughput, latency, packet loss, and capacity on production-critical paths, watching trends so problems surface before they turn into outages.

Site Connectivity & Redundancy:
Manage carrier circuits and redundant paths for the pharmacy and supporting sites, and test failover on a schedule so we know it works.

Wireless Infrastructure:
Deploy enterprise wireless with certificate-based authentication and separate production, corporate, and guest SSIDs, tuned for the density of scanners and mobile devices on the production floor.

Secure Remote Access:
Administer VPN and Zero Trust network access for remote staff and offshore contractors, in coordination with the Systems Administrator (Identity & IAM).

Vulnerability Management:
Run regular scans of network-attached infrastructure and track fixes to closure, documenting risk acceptance where a fix is deferred.

Technical Incident Response:
Lead the technical side of security incidents, covering detection, triage, containment, eradication, and the write-up afterward.

Pre-Authorized Containment:
Act immediately on lower-severity events such as isolating an endpoint, disabling an account, or blocking an address, and notify afterward. Escalate to the IT Operations Lead when there is suspected PHI exposure, when an action would affect compounding production, or when an incident stays open past its severity clock.

Configuration & Change Control:
Version all network configurations, keep topology documentation current, and produce evidence supporting SOC 2…