NYU Langone Health is a fully integrated health system that consistently achieves the best patient outcomes through a rigorous focus on quality that has resulted in some of the lowest mortality rates in the nation. Vizient Inc. has ranked NYU Langone the No. 1 comprehensive academic medical center in the country for three years in a row, and U.S. News & World Report recently placed nine of its clinical specialties among the top five in the nation. NYU Langone offers a comprehensive range of medical services with one high standard of care across 6 inpatient locations, its Perlmutter Cancer Center, and over 320 outpatient locations in the New York area and Florida. With $14.2 billion in revenue this year, the system also includes two tuition-free medical schools, in Manhattan and on Long Island, and a vast research enterprise with over $1 billion in active awards from the National Institutes of Health.

For more information, go to NYU Langone Health, and interact with us on LinkedIn, Glassdoor, Indeed, Facebook, Twitter, YouTube and Instagram.

Position Summary:
We have an exciting opportunity to join our team as a Sr. Network Security Engineer.

In this role, the Senior Network Security Engineer will design, implement, and manage enterprise-level VPN solutions and network security infrastructure. The ideal candidate will have deep expertise in Palo Alto Global Protect, F5 VPN technologies, and enterprise firewall management across multi-vendor environments. The ideal candidate will be an expert in VPN technologies and possess broad experience across a range of leading security platforms. You will be responsible for ensuring secure, reliable, and high-performance connectivity for our global workforce and protecting our network perimeter. This position will play a critical role in the operational stability and strategic evolution of our security posture, working with technologies from Palo Alto Networks, F5, Fortinet, Forescout, and Gigamon.

Job Responsibilities:

• Design, deploy, and maintain Palo Alto Global Protect VPN infrastructure for secure remote access
• Implement and manage F5 APM (Access Policy Manager) and VPN solutions
• Configure and optimize VPN policies, authentication mechanisms, and access controls
• Troubleshoot complex VPN connectivity issues and performance bottlenecks
• Develop and maintain VPN architecture documentation and standard operating procedures
• Configure, manage, and monitor network security devices, including firewalls, VPNs, IDS/IPS, and load balancers. Ensure proper access controls, segmentation, and hardening of network devices.
• Support responses to security incidents, including conducting thorough investigations and implementing necessary remediation measures. Create incident response plans and playbooks to enhance incident handling efficiency.
• Implement, and enforce network security policies, procedures, and guidelines. Ensure compliance with industry regulations and standards related to network security.
• Conduct regular network vulnerability assessments and penetration testing. Collaborate with IT teams to prioritize and remediate identified vulnerabilities.
• Implement and manage network security monitoring tools to detect and respond to security threats in real-time. Configure alerts and notifications to proactively address potential security incidents.
• Collaborate with cross-functional teams to promote a security-first mindset across the organization.
• Stay up to date with the latest security threats, trends, and best practices. Participate in industry conferences and forums to share knowledge and gain insights.

Minimum Qualifications:
To qualify you must have a Typically requires 7 or more years of experience and BA/BS degree.

Preferred Qualifications:
- 5+ years of experience with Palo Alto Networks firewalls and Global Protect VPN
- 3+ years of hands-on experience with F5 BIG-IP (LTM, APM, ASM)
- Strong knowledge of Fortinet FortiGate firewall configuration and management
- Experience with Forescout NAC deployment and policy management
- Proficiency with Gigamon visibility platforms and packet brokering
- Experience with authentication protocols (RADIUS, LDAP, SAML, MFA)
- Palo Alto Networks Certified Network Security Engineer (PCNSE)
- F5 Certified Technology Specialist (F5-CTS)

Qualified candidates must be able to effectively communicate with all levels of the organization.

NYU Langone Health provides its staff with far more than just a place to work. Rather, we are an institution you can be proud of, an institution where you'll feel good about devoting your time and your talents.

At NYU Langone Health, we are committed to supporting our workforce and their loved ones with a comprehensive benefits and wellness package. Our offerings provide a robust support system for any stage of life, whether it's developing your career, starting a family, or saving for retirement. The support employees receive goes beyond a standard benefit offering, where employees have access to financial security benefits, a generous time-off program and employee resources groups for peer support. Additionally, all employees have access to our holistic employee wellness program, which focuses on seven key areas of well-being: physical, mental, nutritional, sleep, social, financial, and preventive care. The benefits and wellness package is designed to allow you to focus on what truly matters. Join us and experience the extensive resources and services designed to enhance your overall quality of life for you and your family.

NYU Langone Health is an equal opportunity employer and committed to inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration. We require applications to be completed online.

View Know Your Rights: Workplace discrimination is illegal.

NYU Langone Health provides a salary range to comply with the New York state Law on Salary Transparency in Job Advertisements. The salary range for the role is $101,493.51 - $160,000. Annually. Actual salaries depend on a variety of factors, including experience, specialty, education, and hospital need. The salary range or contractual rate listed does not include bonuses/incentive, differential pay or other forms of compensation or benefits.

To view the Pay Transparency Notice, please click here