Sr. Network Security Engineer - Direct Hire/Local Field Support 4755 CHI

Job Description

Job Description

Sr. Network Security Engineer – Direct Hire/Local Field Support 4755 CHI

Healthcare Infrastructure | Zero Trust | Multi‑Vendor | High‑Visibility Role
Locations: Chicago - Remote-first with occasional onsite visits to local MSP clients

Pay: $110-150K/year

About the Role

Tier4 is looking for a Senior Network Security Engineer who thrives in complex, multi‑vendor environments and loves turning chaotic networks into beautifully stable, secure architectures. If you enjoy solving real-world networking challenges, owning high‑impact projects, and representing engineering in executive‑level conversations, this role is for you.

This position supports a rapidly growing healthcare‑focused technology organization, where uptime is everything and no two networks look the same. You’ll operate with autonomy, authority, and visibility — especially in Des Moines , home to the organization’s largest and most strategically important client.

What You’ll Do

Network Engineering & Security Leadership

• Architect, deploy, and support LAN/WAN and wireless networks across multi‑site healthcare environments (Ubiquiti, Meraki, Cambium, Aruba, Cisco, Ruckus).
• Configure and maintain next‑gen firewalls (Palo Alto, Fortinet, SonicWall, Meraki) across diverse environments.
• Lead Zero Trust initiatives, including:
• ZTNA
• Network Access Control (NAC)
• Micro‑segmentation
• VPN reduction & identity‑based access strategies

Advanced Troubleshooting & Escalation

• Serve as Tier 3 escalation (approx. 70% of workload).
• Diagnose and resolve high-impact issues including spanning tree loops, routing anomalies, physical mispatch events, rogue devices, and wireless instability.
• Perform deep traffic analysis, packet captures, and threat analytics using NetFlow, Auvik, and firewall telemetry.

Project Engineering

• Execute projects ranging from small firewall upgrades to large-scale deployments involving:
• 50–70 switches
• 400–500 access points
• Multiple redundant firewalls
• Support technology refreshes across newly onboarded communities with widely varying equipment and configurations.

Client Interaction & Executive Presence

• Represent the Network Engineering function in high-visibility meetings , especially at the Des Moines corporate headquarters.
• Interface with IT Directors, CIOs, CTOs, and virtual IT leaders — requiring exceptional communication and professionalism.
• Partner with community-level leadership (Chicago) and internal NOC teams (Alpharetta) as needed.

Documentation & Standards

• Maintain network baselines, configuration repositories, documentation, and disaster‑ready backups.
• Contribute to SIEM integrations and ongoing hardening of the security posture.
• Mentor L2/L3 engineers and help level up team capability.

Technical Expertise

• 7+ years of senior-level network + security engineering experience.
• Strong multi‑vendor background — Cisco, Meraki, Palo Alto, Fortinet, SonicWall, Ubiquiti, Ruckus, etc.
• Deep knowledge of:
• Routing & switching
• VLAN segmentation & VRFs
• QoS, DNS, NAT
• 802.1X, RADIUS, EAP-TLS
• IDS/IPS, DNS filtering, gateway security layers
• Experience with Auvik or similar monitoring and packet capture tools.
• Ability to operate effectively in environments with limited physical control (mispatching, unmanaged local changes, etc.).
• Broad familiarization with adjacent IT domains (Windows servers, infrastructure, general enterprise systems).

Soft Skills

• Outstanding communication skills with the ability to converse confidently with senior IT executives.
• Highly self-managed — able to operate remotely with limited oversight.