Network Engineer

IT Network Engineer IIIParadigm is an accountable specialty care management organization focused on improving the lives of people with complex injuries and diagnoses. The company has been a pioneer in value-based care since 1991 and has an exceptional track record of generating the very best outcomes for patients, payers, and providers. Deep clinical expertise is the foundation for every part of Paradigm's business: risk-based clinical solutions, case management, specialty networks, home health, shared decision support, and payment integrity programs.We are seeking a full-time, remote IT Network Engineer III. This position will perform enterprise network engineering, administration, and support functions within a hybrid on-premises and cloud environment. The Network Engineer III is accountable for the analysis, design, implementation, administration, and support of Paradigm's firewall and network infrastructure. This role operates as a senior individual contributor within the IT organization, helping to build, maintain, secure, and troubleshoot enterprise networking platforms in a dynamic and evolving environment. The position requires strong technical competency, reliability in delivering mission-critical infrastructure, and a continued focus on availability, performance, and security. Specific areas of emphasis within firewall and network responsibilities may vary by assignment, with some Network Engineer III roles serving as primary firewall owners and others serving as secondary firewall contributors while maintaining primary responsibility for core network platforms. Demonstrates a customer-first mindset through a commitment to delivering the best possible outcomes for our customers, which include; injured workers, payors, clients, providers, stakeholders, and internal teams. By fully leveraging Paradigm's solutions, delivering consistently high-quality service, and collaborating effectively with internal and external partners, we create an exceptional customer experience.ResponsibilitiesFirewall & Network EngineeringDesign, implement, administer, and support enterprise firewall-centric network infrastructure, including firewall platforms, routing, switching, and wireless technologies.Engineer, configure, and maintain firewall policies, NAT rules, VPNs, and network segmentation to support business, security, and compliance requirements.Implement secure network connectivity solutions across on-premises data centers, cloud environments, and third-party integrations.Evaluate and improve network designs to enhance resiliency, scalability, and security posture.Operations & Platform SupportMonitor firewall and network performance, availability, and capacity to ensure optimal operation of the enterprise environment.Perform system tuning, troubleshooting, and maintenance of multi-site network infrastructure.Serve as a senior escalation point for complex firewall and network incidents.Perform root cause analysis and implement corrective and preventive actions.Security & ComplianceImplement and maintain network security controls aligned with Paradigm security standards and Zero Trust principles.Partner with Information Security and GRC teams to support audits, risk assessments, and compliance initiatives.Identify and remediate network vulnerabilities, misconfigurations, and security risks.Participate in firewall and network-related security incident response and remediation efforts.Project Delivery & Change ManagementIdentify tasks necessary to achieve project goals and provide accurate work effort estimates.Lead or contribute to complex network initiatives including upgrades, migrations, firewall refreshes, and modernization projects.Execute network changes in accordance with established change management and operational processes.Coordinate activities with internal teams and external vendors to ensure successful delivery of network solutions.Documentation, Standards & Continuous ImprovementCreate and maintain accurate documentation of firewall & network architectures, firewall configurations, and operational procedures.Contribute to the development and enforcement of network standards, best practices, and lifecycle management processes.Remain current on networking, firewall, and security technologies and recommend improvements aligned with business needs.Collaboration & MentorshipWork as part of a team of infrastructure engineers who collectively demonstrate strong technical competency and operational reliability.Provide guidance and mentorship to junior network engineers.Collaborate closely with server, cloud, application, and security teams to deliver integrated infrastructure solutions.Utilizes AI tools to support day-to-day tasks, improve efficiency, and enhance output quality. Adopts new technologies as trained and applies them in alignment with established processes and guidelines.Demonstrates a customer-first mindset by developing a broad and deep (where appropriate) understanding of Paradigm organization, products, operations, and customers. Prioritizes collaboration to meet customer needs and expectations and takes personal accountability for service quality.QualificationsEducationBachelor's degree in Information Technology, Computer Science, Engineering, or a related field preferred, or equivalent experience.Experience6+ years of progressive experience in enterprise network engineering roles, with demonstrated senior-level responsibility for firewall and network platforms.Proven experience designing, implementing, and operating firewall-centric network solutions in production environments.Experience serving as a technical lead or primary owner for firewall and network initiatives, including upgrades, policy redesigns, or security-driven changes.Demonstrated experience supporting enterprise-scale, multi-site, or regulated environments.Technical CompetenciesOwning and operating next-generation enterprise firewall platforms (e.g., Palo Alto, Fortinet, Check Point, or equivalent), including policy lifecycle management, platform upgrades, and high-availability designs.Advanced, hands-on expertise with enterprise firewall platforms, including:Security policy design and lifecycle managementVPN technologies (site-to-site and remote access)NAT, segmentation, and traffic inspectionStrong expertise in enterprise networking fundamentals, including:Routing and switching architecturesNetwork resiliency and high-availability designCore network services (DNS, DHCP)Demonstrated ability to independently design and execute firewall and network changes in production environments.Experience integrating on-premises firewall and network infrastructure with cloud platforms (Azure and/or AWS).Proficiency with network monitoring, logging, troubleshooting, and packet analysis tools.Security & Operational CompetenciesExperience making risk-based decisions related to firewall policy, segmentation, and network security controls in partnership with Information Security teams.Strong understanding of network security principles, including Zero Trust concepts and defense-in-depth.Experience assessing risk, implementing security controls, and participating in security incident response related to firewall and network infrastructure.Ability to perform root cause analysis and implement long-term corrective actions following incidents or outages.Preferred ExperienceExperience operating firewall and network platforms in regulated or compliance-driven environments.Experience leading or materially influencing firewall policy redesigns, segmentation initiatives, or security-driven network changes.Familiarity with firewall or network automation, configuration standardization, or infrastructure-as-code approaches.Experience acting as a technical mentor or escalation resource for junior network engineers.Relevant industry certifications, including firewall vendor certifications and/or CCNP-level networking certifications.Paradigm Benefits:Health and wellness – We want our people to be and stay healthy, so we offer PPO, HDHP, and HMO health insurance options with Cigna and Kaiser (CA employees only).Financial incentives – Paradigm's financial benefits help prepare you for the future: competitive salaries, 401(k) matching contributions, employer-paid life and disability insurance, flexible spending and commuter accounts, and employer-matched HSA contributions.Vacation - We believe strongly that work-life balance is good for you and for our company. Our paid time off and personal holiday programs give you the flexibility you need to live your life to the fullest.Volunteer time – We want our employees to engage with and give back to their communities in meaningful ways. Full and part-time employees receive one paid day per calendar year