Network Security Engineer

Terumo Medical Corporation (TMC) develops, manufactures, and markets a complete, solutions-based portfolio of high-quality medical devices used in a broad range of applications for numerous areas of the healthcare industry. TMC places a premium on providing customers with world-class products, training and education programs that drive clear economic value, better clinical outcomes and improved quality of life for patients. TMC is part of Tokyo-based Terumo Corporation; one of the world's leading medical device manufacturers with $6+ billion in sales, 30,000+ employees worldwide and operations in more than 160 nations. Terumo Medical Corporation is comprised of two strategic business divisions: Terumo Interventional Systems and Terumo Medical Products.

We believe that the future is bright for everyone at Terumo. We work with the future in mind to generate lasting change, create a bigger impact and produce greater outcomes for today, and for decades to come.

At Terumo we believe in the power of personal growth and will encourage you to get in the driver's seat - progressing in the direction you want to go by deepening your skills throughout your career. We want you to be bold, think outside the box, experiment, innovate and deliver what's next for quality healthcare. You will be part of a collaborative, respectful and resilient team of associates and leaders around the world, working together as partners to achieve more than you thought possible, providing real-world, impactful solutions for patients.

Join us and help shape wherever we go next!

Advancing healthcare with heart

Job Summary

The Network Security Engineer will support the design, implementation and maintenance of network solutions, tools, processes and policies especially as it pertains to overall security. Working within the framework of the security program for TAH, they will facilitate accurate documentation of the network environment, accurate reporting from the network devices and secure solutions to networking challenges posed through business activity. The person in this position will support the TAH organization by providing timely troubleshooting and remediation of network & security events, as well as get involved in business unit projects through collaboration to provide input on secure network design.

Job Details/Responsibilities

Lead and collaborate on cross-functional network and security initiatives by partnering with project teams, engineers, managers, and operational groups to solve technical issues and ensure optimal deployment of technology solutions.

Architect, implement, and maintain secure network solutions, including firewalls (FortiGate/Palo Alto), F5 BigIP, Cisco ISE, Meraki, monitoring tools, and ZTNA-aligned configurations, from planning through post-implementation validation.

Serve as the senior in-house subject matter expert (SME) for networking and network security, providing advanced guidance, troubleshooting, and escalation support across the organization.

Act as primary responder for security events and major network incidents, ensuring rapid mitigation, business continuity, and proper coordination with internal and partner network operations teams.

Maintain high availability and performance of network infrastructure, including firewalls, switches, wireless access points, and application-related network components.

Ensure proper documentation, lifecycle management, and compliance for network systems, including configuration records, corporate security initiatives, vulnerability remediation, and change management procedures.

Incumbent must follow all established Environmental Health & Safety and Quality System policies, programs, rules and practices, including but not limited to product and patient safety, the health and safety of all associates as well as the environment and community at large.

Knowledge, Skills and Abilities (KSA)

• Familiar with next generation firewall technology
• Experience with cloud (GCP, Azure) network and security is desirable
• Lead application delivery and security using F5 BIG-IP (Advanced WAF/ASM, DDoS, APM, SSL/TLS, HA) in HIPAA-regulated healthcare networks.
• 5-10 years of experience managing on-prem, hybrid, and cloud network architectures, including demonstrated expertise in security network engineering
• Exceptional communication (verbal and written), organizational, and interpersonal skills
• Deep understanding of external and insider threat mitigation strategies and ZTNA design principles
• Excellent analytical, interpersonal and communication skills with the ability to communicate complex technical issues in an easy-to-understand manner
• Ability to work in a fast-paced environment, demonstrate grace under pressure, meticulous attention to details, and a methodical / analytical approach
• Exceptional problem-solving abilities.
• Ethical and trustworthy
• Incident Response experience related to network analysis

Qualifications/ Background Experiences

• A bachelor's degree in computer network related field, cyber security preferred or combination of equivalent experience
• Minimum 5 years' experience administering and maintaining Fortigate, FortiManager and FortiAnalyzer required
• 5 years of practical implementation and maintenance of network routing equipment
• 5 years of relevant professional network engineering or administration experience, with significant exposure to a variety of technologies and domains
• 5 years of advanced working knowledge of SDWAN and Network architecture.
• Experience patching and managing network configurations to include standard build installations and network system security hardening
• Experience with different routing protocols, OSPF, eBGP, iBGP
• Experience with the following technologies preferred:
  • IDS, IPS, AV, Application, DNS security
  • Network infrastructure (Cisco, Fortinet, F5.)
  • Network admission control (NAC) (Aruba ClearPass, ForeScout, Cisco, etc.)
  • Firewall management and auditing
  • Network packet brokers (Gigamon, IXIA, NetScout, etc.)
  • SSL decryption (Blue Coat, F5, Gigamon, IXIA, etc.)
  • Wi-Fi deployment and configuration (Cisco/Meraki)
  • Public key infrastructure (PKI)
  • Hardware security modules (HSM)
  • Authentication solutions (RSA, Entrust, smartcard, biometrics, etc.)
  • Log collection and aggregation (ArcSight, McAfee / Nitro, Splunk, IBM/QRadar, etc.)
  • Network gear OS Hardening (Fortinet, Cisco.)

It is Terumo's policy to provide equal employment opportunity to all its employees and applicants for employment regardless of their race, creed, color, national origin, age, ancestry, nationality, marital or domestic partnership or civil union status, sex, pregnancy, gender identity or expression, disability status, liability for military service, protected veteran status, sexual orientation, atypical cellular or blood trait, genetic information (including the refusal to submit to genetic testing), or any other category protected by law. As a Company, we value diversity of background and opinion, and prohibit discrimination or harassment on the basis of any legally protected class in the areas of hiring, recruitment, promotion, transfer, demotion, training, compensation, pay, fringe benefits, layoff, termination or any other terms and conditions of employment.

Final compensation packages may be higher or lower than what is listed, and will ultimately depend on factors including relevant experience, internal equity, skillset, knowledge, geography, education, business needs and market demand. We provide competitive and comprehensive benefit options which include: annual bonus, paid vacation, paid holidays, health, dental and vision benefits, 401(k), with matching contributions, tax advantage savings accounts, legal plan, voluntary life and AD&D insurance, voluntary long-term disability, short term disability, critical illness and accident insurance, parental leave, personal leave, tuition reimbursement, travel assistance, and an employee assistance program. Pay range: $84K - $115K