Network Engineer

Overview Overview:   The Network Engineer is a core member of the Network Operations team responsible for designing, implementing, and optimizing HealthEdge’s enterprise network infrastructure across on-premises data centers, cloud environments, and remote access platforms. This role operates within a team-driven model emphasizing 24/7 availability, ITIL-aligned processes, automation, and measurable operational outcomes in support of our healthcare SaaS platform.  Essential Responsibilities: Technical Execution & Operations   Design, configure, and maintain LAN/WAN, SD-WAN, VPN, firewall, and load-balancing infrastructure across multi-site and multi-cloud environments  Monitor network performance (SolarWinds, Datadog, ThousandEyes) and proactively resolve issues before they impact service delivery and SLA targets  Implement network security controls including firewall rule sets, IDS/IPS, segmentation, NAC, and zero-trust architecture principles  Design and manage AWS network infrastructure — VPCs, subnets, route tables, IGW, NAT Gateways, and ELBs — for scalable, highly available architectures  Configure AWS Transit Gateway and VPC peering for secure, low-latency connectivity across accounts, regions, and on-premises environments  Implement AWS Direct Connect and Site-to-Site VPN for hybrid connectivity between HealthEdge data centers and AWS  Administer AWS Route 53 including private hosted zones, resolver rules, and health-check-based routing policies  Manage AWS Security Groups, Network ACLs, AWS Network Firewall, and AWS Shield for least-privilege access and DDoS protection  Leverage AWS CloudWatch, VPC Flow Logs, and AWS Network Manager for observability, traffic analysis, and anomaly detection  Support Azure or GCP networking as required — VNets/VPCs, peering, and hybrid connectivity  Incident Response & Change Management   Participate in 24/7 on-call rotation, triaging and resolving network incidents per SLA targets; contribute to post-incident reviews to drive MTTR reduction  Execute network changes through established change management processes; serve as Tier 3 escalation resource for complex issues  Automation & Continuous Improvement   Develop automation scripts and IaC (Ansible, Terraform, CloudFormation, Python) to improve monitoring, alerting, and network deployment workflows  Build and maintain IaC for AWS network resources enabling repeatable, auditable deployments; surface optimization opportunities across the team’s roadmap  Documentation & Collaboration   Maintain topology diagrams, runbooks, IPAM, and change records; support DR testing, vendor coordination, and legacy environment consolidation  Collaborate across Infrastructure, Security, DevOps, and Application teams; mentor junior team members  Required Qualifications: Bachelor’s degree in Computer Science, IT, Network Engineering, or equivalent professional experience  5+ years of hands-on enterprise network engineering or network operations experience  Strong knowledge of routing and switching protocols (BGP, OSPF, EIGRP, VLANs, STP)  Experience with enterprise firewall platforms (Palo Alto, Fortinet, Cisco ASA/FTD)  Demonstrated AWS networking expertise: VPC, Transit Gateway, Direct Connect, Route 53, Security Groups, Network ACLs, AWS Network Firewall  Proficiency with network monitoring tools (SolarWinds, Datadog, PRTG, or similar)  Experience with SD-WAN (Cisco Viptela, VMware VeloCloud, Fortinet, or equivalent)  Solid understanding of DNS, DHCP, IPAM, SSL/TLS, and PKI  Hands-on experience with IaC and automation tools (Ansible, Terraform, CloudFormation, Python)  Familiarity with ITIL-based incident, problem, and change management processes  Excellent analytical and communication skills; ability to translate technical concepts for non-technical stakeholders  Preferred Qualifications: Certifications: CCNP, CCIE, PCNSE, NSE, or AWS Advanced Networking Specialty  Experience in healthcare SaaS or regulated environments (HIPAA, HITRUST, SOC 2)  Experience with large-scale infrastructure integrations or M&A network consolidation  Familiarity with HealthEdge products (HealthRules® Payer, HealthEdge Source™, GuidingCare®, Wellframe™)  Network automation experience at scale in a 24/7 operations environment  Geographic Responsibility:   Remote, US Type of Employment: Full-time, permanent  FLSA Classification (USA Only): Exempt  Work Environment: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job:   The employee is occasionally required to move around the office. Specific vision abilities required by this job include close vision, color vision, peripheral vision, depth perception, and ability to adjust focus.   Work across multiple time zones in a hybrid or remote work environment.  Long periods of time sitting and/or standing in front of a computer using video technology.  May require travel dependent on company needs.  The above statements are intended to describe the general nature and level of the job being performed by the individual(s) assigned to this position. They are not intended to be an exhaustive list of all duties, responsibilities, and skills required. HealthEdge reserves the right to modify, add, or remove duties and to assign other duties as necessary. In addition, reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position in compliance with the Americans with Disabilities Act of 1990.  Candidates may be required to go through a pre-employment criminal background check.   HealthEdge is an equal opportunity employer. We are committed to workforce diversity and actively encourage all qualified persons to seek employment with us, including, but not limited to, racial and ethnic minorities, women, veterans and persons with disabil