Sr. Network Security Engineer - Direct Hire/Local Field Support 4755 CHI
Job Description
Job Description
Sr. Network Security Engineer – Direct Hire/Local Field Support 4755 CHI
Healthcare Infrastructure | Zero Trust | Multi‑Vendor | High‑Visibility Role
Locations: Chicago - Remote-first with occasional onsite visits to local MSP clients
Pay: $110-150K/year
About the Role
Tier4 is looking for a Senior Network Security Engineer who thrives in complex, multi‑vendor environments and loves turning chaotic networks into beautifully stable, secure architectures. If you enjoy solving real-world networking challenges, owning high‑impact projects, and representing engineering in executive‑level conversations, this role is for you.
This position supports a rapidly growing healthcare‑focused technology organization, where uptime is everything and no two networks look the same. You’ll operate with autonomy, authority, and visibility — especially in Des Moines, home to the organization’s largest and most strategically important client.
What You’ll Do
Network Engineering & Security Leadership
- Architect, deploy, and support LAN/WAN and wireless networks across multi‑site healthcare environments (Ubiquiti, Meraki, Cambium, Aruba, Cisco, Ruckus).
- Configure and maintain next‑gen firewalls (Palo Alto, Fortinet, SonicWall, Meraki) across diverse environments.
- Lead Zero Trust initiatives, including:
- ZTNA
- Network Access Control (NAC)
- Micro‑segmentation
- VPN reduction & identity‑based access strategies
Advanced Troubleshooting & Escalation
- Serve as Tier 3 escalation (approx. 70% of workload).
- Diagnose and resolve high-impact issues including spanning tree loops, routing anomalies, physical mispatch events, rogue devices, and wireless instability.
- Perform deep traffic analysis, packet captures, and threat analytics using NetFlow, Auvik, and firewall telemetry.
Project Engineering
- Execute projects ranging from small firewall upgrades to large-scale deployments involving:
- 50–70 switches
- 400–500 access points
- Multiple redundant firewalls
- Support technology refreshes across newly onboarded communities with widely varying equipment and configurations.
Client Interaction & Executive Presence
- Represent the Network Engineering function in high-visibility meetings, especially at the Des Moines corporate headquarters.
- Interface with IT Directors, CIOs, CTOs, and virtual IT leaders — requiring exceptional communication and professionalism.
- Partner with community-level leadership (Chicago) and internal NOC teams (Alpharetta) as needed.
Documentation & Standards
- Maintain network baselines, configuration repositories, documentation, and disaster‑ready backups.
- Contribute to SIEM integrations and ongoing hardening of the security posture.
- Mentor L2/L3 engineers and help level up team capability.
Technical Expertise
- 7+ years of senior-level network + security engineering experience.
- Strong multi‑vendor background — Cisco, Meraki, Palo Alto, Fortinet, SonicWall, Ubiquiti, Ruckus, etc.
- Deep knowledge of:
- Routing & switching
- VLAN segmentation & VRFs
- QoS, DNS, NAT
- 802.1X, RADIUS, EAP-TLS
- IDS/IPS, DNS filtering, gateway security layers
- Experience with Auvik or similar monitoring and packet capture tools.
- Ability to operate effectively in environments with limited physical control (mispatching, unmanaged local changes, etc.).
- Broad familiarization with adjacent IT domains (Windows servers, infrastructure, general enterprise systems).
Soft Skills
- Outstanding communication skills with the ability to converse confidently with senior IT executives.
- Highly self-managed — able to operate remotely with limited oversight.