Sr Network Security Engineer

Senior Network Security Engineer

It's fun to work in a company where people truly believe in what they're doing!

We're committed to bringing passion and customer focus to the business.

Public Partnerships LLC (PPL) provides helps people with disabilities, chronic illnesses, or other long-term health conditions stay at home and "self-direct" their care. Known as consumer direction in New York, this long-term care model empowers people to take control of who provides their services and where. PPL was selected to be the Statewide Fiscal Intermediary for the New York Consumer Directed Personal Assistance Program (CDPAP) starting in 2025. We will, along with a diverse alliance of service partners across the state, support the delivery of culturally sensitive and disability competent care to CDPAP participants. We are looking for people who share our passion for helping New Yorkers live happy, healthy, and independent lives to support CDPAP consumers and their personal assistants across a broad spectrum of services and functions.

Our culture attracts and rewards people who are compassionate, results-oriented, and driven to exceed customer expectations. We desire motivated candidates who are excited to join our fast-paced, consumer-focused environment, and who want to make a difference in helping transform the lives of the people we serve.

Job Summary

The Senior Network Security Engineer is a hands-on technical security leader responsible for ensuring that PPL's network environment — including its cloud-primary infrastructure in Microsoft Azure, secondary presence in AWS, Fortinet-protected physical locations, and remote-first workforce — is designed, configured, and operated in alignment with PPL's security requirements, standards, and regulatory obligations. Reporting to the Director of Cybersecurity Operations, this role defines network security requirements, reviews and validates network architecture and controls, performs security assessments and audits, and partners closely with the Infrastructure team's Sr. Network Engineer, who owns administration of PPL's network and network security devices. The role serves as the Information Security team's subject matter expert on network security — driving zero-trust strategy, supporting incident response, evidencing compliance, and protecting the confidentiality and integrity of Medicare and Medicaid protected health information (PHI).

Key Responsibilities

• Network Security Strategy, Standards & Architecture Review
• Network Threat Detection & Incident Response
• Monitoring & Detection Oversight
• Risk, Compliance & Governance Support
• Collaboration, Communication & Awareness

Required Skills:

• Strong knowledge of information security and network security principles, controls, and best practices across cloud, on-premises, and remote-workforce environments.
• Hands-on experience assessing, configuring, or operating Fortinet firewall environments (FortiGate, FortiAnalyzer, FortiManager) at scale; ability to review configurations, rules, and policies for security compliance.
• Demonstrated knowledge of cloud network security in Microsoft Azure (NSGs, Azure Firewall, Application Gateway/WAF, private endpoints, hub-and-spoke design, ExpressRoute/VPN gateways) and AWS (security groups, NACLs, AWS Network Firewall, WAF, Transit Gateway, PrivateLink).
• Experience defining security requirements and reviewing architectures for ZTNA and secure remote access for distributed and remote-first workforces, including conditional access, identity-aware proxies, and integration with modern identity platforms.
• Demonstrated experience with network segmentation, micro-segmentation, and zero-trust networking principles.
• Proficiency in network protocols, routing, switching, TLS inspection, and packet/flow analysis sufficient to support detection engineering and incident response across cloud and on-premises environments.
• Proven ability to investigate, analyze, and respond to network-based security incidents, including log analysis, alert triage, and forensic review.
• Exposure to artificial intelligence platforms and the network security considerations specific to them — including data egress controls, secure access to AI services, and monitoring of AI-related network traffic.
• Strong understanding of healthcare-relevant regulatory and framework requirements (HIPAA, NIST 800-53, SOC 2, CMS) as they apply to network security controls.
• Ability to communicate network security findings, risks, and recommendations effectively to both technical and non-technical stakeholders.
• Strong organizational skills with the ability to manage multiple workstreams simultaneously.

Qualifications: Education:

Bachelor's degree in computer science, Information Systems, Network Engineering, Cybersecurity, or related field. Equivalent professional experience may be considered in lieu of a degree.

Experience:

Minimum of 6–8 years of progressive experience in network engineering and/or network security, with at least 3 years in a dedicated network security role and demonstrated cloud network security experience.

Certifications (Preferred:

One or more of: Fortinet NSE 4 / NSE 5 / NSE 7, Microsoft AZ-700 (Azure Network Engineer Associate), AWS Advanced Networking Specialty or AWS Security Specialty, CISSP, CCNP Security, or GIAC GCIA / GCIH.

Preferred Attributes:

Experience in healthcare, financial services, or other regulated industries; familiarity with maturing security programs in cloud-primary, remote-first organizations; experience with infrastructure-as-code and automation for network security (Terraform, Ansible, scripting).

Working Conditions:

Office and remote work.

Up to 10% of travel expected.

Supervisory Responsibility (If applicable):

No direct reports at this time; expected to provide technical leadership, mentorship, and direction to junior security staff and applicable contractors.

Compensation: $104,000-$117,000

This role is eligible for a base salary within the posted range. Actual compensation will be determined based on a variety of factors, including skills, experience, and geographic location. Compensation may vary for positions based in high cost-of-labor markets.

PPL is an Equal Opportunity Employer dedicated to celebrating diversity and intentionally creating a culture of inclusion. We believe that we work best when our employees feel empowered and accepted, and that starts by honoring each of our unique life experiences. At PPL, all aspects of employment regarding recruitment, hiring, training, promotion, compensation, benefits, transfers, layoffs, return from layoff, company-sponsored training, education, and social and recreational programs are based on merit, business needs, job requirements, and individual qualifications. We do not discriminate on the basis of race, color, religion or belief, national, social, or ethnic origin, sex, gender identity and/or expression, age, physical, mental, or sensory disability, sexual orientation, marital, civil union, or domestic partnership status, past or present military service, citizenship status, family medical history or genetic information, family or parental status, or any other status protected under federal, state, or local law. PPL will not tolerate discrimination or harassment based on any of these characteristics.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!