MDVIP: Transforming Primary Care, One Patient at a Time
MDVIP is a national leader in personalized healthcare, empowering over 425,000 members to achieve their health and wellness goals through a network of more than 1,400 concierge primary care physicians. Our program emphasizes preventive medicine, offering comprehensive screenings, advanced diagnostics, and individualized wellness plans. Recognized as a Great Place to Work® since 2018, MDVIP is committed to excellence in patient care and employee satisfaction.
Position Summary
The Network Security Engineer is an individual contributor role reporting to the Sr. Network Operations Manager. This is a contract-to-perm position (6-month contract), based in Boca Raton, FL (Hybrid), supporting the Boca Raton and Atlanta (ATL) data centers.
This role provides dedicated engineering capacity for the ownership, hardening, and reliability of the organization’s on-premises and hybrid infrastructure. The Network Security Engineer sustains a predictable remediation cadence across recurring security obligations — including monthly patching, zero-day response, vulnerability remediation, OS hardening, and cloud security score — while maintaining core platform services that underpin 24/7 operational reliability. This role is critical to reducing key-person risk, closing the capacity gap between rising compliance/audit workloads and existing staffing, and ensuring remediation tied to penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments is completed on schedule.
Key Responsibilities
Security Remediation & Compliance
- Execute remediation for findings from penetration tests, annual Security Risk Assessments (SRAs), and HIPAA assessments, ensuring items are tracked to closure within defined SLAs; work with Project Managers, technology stack owners, and third-party resources to ensure timely delivery.
- Lead monthly patching cycles and rapid zero-day response across on-prem and hybrid server environments.
- Apply security remediations on infrastructure appliances including Cisco switches, firewalls (Palo Alto, Fortinet, Cisco Meraki), Linux appliances, and the virtual server environment and SANs (VMware, vSphere).
- Perform vulnerability remediation and OS/system hardening in line with established security baselines and audit requirements.
- Maintain a remediation burndown and support reporting on patch/vulnerability KPIs, including critical remediation timelines and cloud security score.
Core Platform & Infrastructure Ownership
- Track Azure Security Score trends and drive remediation of flagged recommendations, providing regular posture reporting to leadership and audit stakeholders.
- Manage the full PKI infrastructure/SSL certificate lifecycle, including issuance, renewal, tracking, and remediation of expiring or non-compliant certificates, and manage key vault rotations for critical cloud-hosted applications.
- Utilize automation tools to deploy required machine certificates across the organization.
- Manage syslog retention and forwarding across on-premises and cloud infrastructure, supporting the Security team’s SIEM ingestion, correlation, and compliance reporting needs.
- Administer network micro-segmentation using Illumio, including policy design, enforcement, and ongoing tuning.
- Review and administer security tools to harden network edge security, including next generation firewalls, SD-WAN, and switching, striving for zero trust networks.
- Manage wireless security, including network access control (NAC), utilizing Cisco wireless and HPE Aruba ClearPass.
- Administer Identity and Access Management/Privileged Access Management (IAM/PAM) using BeyondTrust for remote server access, including access reviews and privileged session controls.
- Manage and review Azure RBAC roles and access privileges, and perform Active Directory hardening in compliance with discovered vulnerabilities and best practices.
- Review and secure SDLC servers and hosted applications, both on-premises and in Azure, applying measures to keep all public endpoints secure.
Operational Reliability & Risk Reduction
- Balance day-to-day operational demands (SSL renewals/rotations, security remediation, configuration hardening, troubleshooting) with planned, time-bound deliverables.
- Identify and reduce single-point-of-failure risk by documenting procedures and cross-training across PKI, AD, cloud access, segmentation, and patching functions.
- Partner with the Azure DevOps and Security teams to align on-prem/hybrid remediation with broader cloud governance and security initiatives.
- Escalate emerging risks, audit exceptions, and outage-driving conflicts between operational and remediation priorities to leadership.
Key Competencies
- Analytical: synthesizes complex or diverse technical information, using intuition and experience to complement data.
- Collaboration: openly partners with security operations, DevOps, and business stakeholders, valuing diverse perspectives and building productive relationships.
- Communication: listens and responds effectively to stakeholder needs; writes and speaks clearly and persuasively.
- Initiative and personal accountability: identifies and creates solutions independently, sets and meets deadlines, and reports timely and prepared.
- Problem solving/decision making: thinks strategically, drawing on diverse sources to identify issues, risks, and trends and determine optimal, timely solutions.
- Strong troubleshooting skills and the ability to manage competing priorities between reactive operational work and scheduled remediation projects.
- Ability to support 24/7 platform reliability, including scheduled evening and weekend work for monthly patching cycles, zero-day response, and maintenance outside normal business hours.
- Ability to travel periodically between the Boca Raton, FL and Atlanta (ATL) data centers as needed.