Lead Network Security Engineer

Position Summary

We have an exciting opportunity to join our team as a Lead Engineer - Network Security Systems. Reporting to the Director of Network Security Systems Engineering, the Lead Engineer is responsible for overseeing and managing the design and implementation of network security solutions, providing 2nd and 3rd level support for all network security issues or outages, ensuring smooth operation of the network infrastructure, and maintaining close vendor relationships to support current technology solutions and provide roadmap strategies for all network security systems.

• Design and implement secure network architectures, considering factors like redundancy, scalability, and fault tolerance, and assess existing network infrastructure for security vulnerabilities and propose necessary improvements.
• Configure, manage, and monitor network security devices, including firewalls, VPNs, IDS/IPS, and load balancers, ensuring proper access controls, segmentation, and hardening of network devices.
• Support responses to security incidents, conduct thorough investigations, and implement necessary remediation measures. Create incident response plans and playbooks to enhance incident handling efficiency.
• Implement and enforce network security policies, procedures, and guidelines, ensuring compliance with industry regulations and standards related to network security.
• Conduct regular network vulnerability assessments and penetration testing, collaborating with IT teams to prioritize and remediate identified vulnerabilities.
• Implement and manage network security monitoring tools to detect and respond to security threats in real-time, configuring alerts and notifications to proactively address potential security incidents.
• Collaborate with cross‑functional teams to promote a security‑first mindset across the organization.
• Stay up to date with the latest security threats, trends, and best practices, and participate in industry conferences and forums to share knowledge and gain insights.

• Bachelor's or Master’s degree in computer science, Information Security, or a related field.
• 5 or more years of relevant experience.
• Excellent Fortinet, F5, and Palo Alto troubleshooting skills with the ability to identify issues and determine solutions.
• Ability to focus, manage time and work efficiently.
• Experience and desire to work in a team environment with other engineers.
• Ability to effectively communicate with all levels of the organization.

• Design, maintain, and monitor extensive firewall, Fortinet, and F5 environments per hospital standards.
• Implement and support multi‑vendor firewall platforms featuring Palo Alto series firewalls and Cisco ASA.
• Conduct daily maintenance and checks of all firewall, Fortinet, and F5 related equipment.
• Maintain and organize reporting information and documentation for management review.
• Maintain high to detailed levels of documentation as required for all Palo Alto and F5 environments.
• Perform routine maintenance functions for all systems including OS upgrades, hardware fixes, etc.
• Provide second and third level support for all firewall and F5 systems.

• At least 5 years working with network firewalls, Fortinet, or Palo Alto NGFW experience preferred.
• Proficiency with Fortinet, F5 Access Policy Manager (APM), F5 Enterprise Manager (EM), Palo Alto Firewalls, and Cisco ASA firewalls.

NYU Langone Health provides a salary range to comply with New York state law on salary transparency: $ - $ annually. Actual salaries depend on experience, specialty, education, and hospital need.

At NYU Langone Health, we are committed to supporting our workforce and their loved ones with a comprehensive benefits and wellness package. The benefits include financial security benefits, a generous time‑off program, employee resource groups, and a holistic wellness program focusing on physical, mental, nutritional, sleep, social, financial, and preventive care.

NYU Langone Health is an equal‑opportunity employer and committed to inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration. We require applications to be completed online.

View Know Your Rights:
Workplace discrimination is illegal.

To view the Pay Transparency Notice, please .