---
title: IT Network & Security Engineer at Astiva Health
description: Astiva Health is hiring for the IT Network & Security Engineer role in Orange,
  CA. Pays $85K–$130K per year. See the full description and apply.
type: job
url: https://www.foundrole.com/jobs/it-network-and-security-engineer-at-astiva-health-01a1c7cc-429c-7dd1-819e-905c50c4edaa
date: 2026-11-11T00:15:05Z
og_description: Join Astiva Health as IT Network & Security Engineer in Orange, CA. Pays $85K–$130K
  per year. Full-time, on-site role.
og_image: https://www.foundrole.com/og/cl7opr.png
breadcrumbs:
  - label: Home
    url: https://www.foundrole.com/
  - label: Search
    url: https://www.foundrole.com/jobs
---

| | |
|---|---|
| **Company** | [Astiva Health](https://www.foundrole.com/companies/astiva-health?utm_source=ai_markdown) |
| **Location** | Orange, CA |
| **Salary** | $85K/yr - $130K/yr |
| **Type** | Full Time |
| **Posted** | Nov 10, 2026 |

## Is this job real?

**Ghost job check:** A · Low risk. Probably a real opening.

## Visa sponsorship

- **H-1B:** No H-1B sponsorship on record for Astiva Health.
- **E-Verify:** No E-Verify enrollment on record for Astiva Health.

## Pay for similar jobs

Most similar jobs pay $140,000 – $195,000 a year (median $170,000).

## Description

About Us

Astiva Health, Inc., located in Orange, CA is a premier healthcare provider specializing in Medicare and HMO services. With a focus on delivering comprehensive care tailored to the needs of our diverse community, we prioritize accessibility, affordability, and quality in all aspects of our services. Join us in our mission to transform healthcare delivery and make a meaningful difference in the lives of our members.

Job Summary

Astiva Health is a Medicare Advantage organization dedicated to delivering high-quality, coordinated care to its members. The IT Network & Security Engineer designs, maintains, and secures the enterprise network infrastructure and cloud environments connecting our offices, staff, and core health data systems against cyber threats. Working closely with IT, security, and business leadership, this role owns network reliability and defense-in-depth security controls, enforcing the HIPAA Security Rule, protecting Protected Health Information (PHI), and ensuring compliance with CMS and healthcare regulatory standards.

Key Responsibilities

- Network Infrastructure & Operations: Install, configure, and maintain network infrastructure, including routers, switches, firewalls, wireless access points, VPNs, and structured cabling.
- Perimeter & Cyber Defense: Design, configure, and monitor next-generation firewalls, Web Application Firewalls (WAF), secure VPN tunnels, and Intrusion Detection/Prevention Systems (IDS/IPS).
- Performance & Troubleshooting: Monitor network performance, availability, and capacity; troubleshoot and resolve connectivity issues for staff, core business systems, and clinical integrations.
- HIPAA & PHI Security: Manage firewall policies, micro-segmentation, and zero-trust remote access to protect PHI and strictly comply with HIPAA Security Rule requirements.
- Cloud Security & Architecture: Support secure connectivity and cloud security guardrails between on-premises offices and Microsoft Azure (VNets, ExpressRoute/VPN gateways, Network Security Groups, and Entra ID).
- Vulnerability & Incident Management: Apply firmware updates and security patches; run vulnerability scans, remediate findings, analyze SIEM logs, and respond promptly to network security incidents.
- Access Control & Zero Trust: Administer Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and Privileged Access Management (PAM) frameworks for network infrastructure.
- Change & Maintenance Management: Follow strict change management for network/security modifications: schedule within maintenance windows, back up configurations, and maintain tested rollback plans.
- On-Call & Emergency Response: Participate in scheduled after-hours maintenance windows and an on-call rotation to address emergency network outages, critical security alerts, and system incidents.
- Audit Readiness & Vendor Risk: Partner with compliance teams to gather technical evidence for HIPAA, HITRUST, NIST CSF, and CMS security audits; perform technical security evaluations for First-Tier, Downstream, and Related Entities (FDRs).
- Unified Communications & QoS: Support VoIP and unified communications systems, ensuring proper Quality of Service (QoS) for voice and video traffic.
- Vendor & Inventory Management: Coordinate with ISPs, telecom providers, and hardware vendors; maintain detailed inventory of network equipment, circuits, and licenses.
- Documentation & Disaster Recovery: Maintain up-to-date network topology maps, security policies, incident runbooks, and disaster recovery architectures.

Required Qualifications

- Bachelor's degree in information technology, Computer Science, Cybersecurity, Network Engineering, or related field (or equivalent practical experience).
- 3+ years of hands-on experience in network administration, network engineering, or enterprise network security.
- Strong working knowledge of TCP/IP, routing and switching, VLAN segregation, DNS security, and IPsec/SSL VPN tunnels.
- Proven experience configuring and managing enterprise firewalls and VPN solutions (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower, Meraki).
- Experience with network monitoring, diagnostic tools, and security log analysis (e.g., Wireshark, PRTG, SolarWinds, SIEM platforms).
- Solid understanding of network security best practices, including firewall policy management, network segmentation, MFA, and security log reviews.
- Practical understanding of HIPAA Security Rule compliance, data privacy principles, and standard security frameworks (e.g., NIST CSF, HITRUST).
- Flexibility and willingness to participate in periodic weekend/after-hours maintenance windows and emergency on-call rotations.

Preferred Qualifications

- Active industry security or networking certifications such as CISSP, CCNA, CCNP, CCSP, CompTIA Security+, or vendor-specific credentials (e.g., PCNSA/PCNSE).
- Prior experience working in a healthcare, managed care, healthcare payer, or Medicare Advantage (MAPD) environment.
- Deep technical knowledge of HIPAA compliance, CMS guidelines, and FDR vendor security oversight.
- Hands-on experience with Microsoft Azure networking, Network Security Groups, ExpressRoute, Windows Server, Active Directory, or Microsoft Entra ID.
- Scripting skills for network automation, security reporting, and task execution (PowerShell or Python).
- Comfortable using AI-assisted tools (e.g., Claude, ChatGPT, GitHub Copilot) for network scripting, threat analysis, and documentation.

BENEFITS:

- 401(k)
- Dental Insurance
- Health Insurance
- Life Insurance
- Vision Insurance
- Paid Time Off
- Free Lunch On-Site

LANGUAGE: Ability to read and interpret documents such as safety rules, operating and maintenance instructions, and procedure manuals. Ability to write routine reports and correspondence. Ability to speak effectively before groups and customers or employees of the organization.

MATHEMATICS: Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals. Ability to compute rate, ratio, and percent and to draw and interpret bar graphs.

REASONING ABILITY: Ability to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, diagram or schedule form.

EEO/AFFIRMATIVE ACTION STATEMENT: It is the policy of Astiva Health to provide equal employment opportunities without regard to race, color, religion, sex, national origin, age, disability, marital status, veteran status, sexual orientation, genetic information or any other protected characteristic under applicable law. This policy relates to all phases of employment, including but not limited to recruiting, employment, placement, promotion, transfer, demotion, reduction of workforce and termination, rates of pay or other forms of compensation, selection for training, the use of all facilities, and participation in all company sponsored employee activities. Provisions in applicable laws providing for bona fide occupational qualifications, business necessity or age limitations will be adhered to by the organization where appropriate. Please refer to Standard Operating Procedure 100 for more information about the organization’s Affirmative Action/EEO statement.

PHYSICAL DEMANDS: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is frequently required to sit and complete work while on a computer. The employee occasionally is required to stand, walk, use hands to finger, handle or feel, reach with hands and arms, stoop, kneel, crouch or crawl, climb or balance, talk and hear.

While performing the duties of this job, the employee is occasionally required to lift or exert force up to 10 pounds.

WORK ENVIRONMENT: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

The noise level in the work environment is usually moderate.
## Skills

- Quality of Service
- Transport Layer Security (Tls)
- Network Security
- Network Segmentation
- Firewall Configuration
- HIPAA / PHI Data Security
- Firmware
- CompTIA Security+
- GitHub Copilot
- Network Security Group (Nsg)
- Network Topology
- Open Web Application Security Project (Owasp)
- Internet Protocol Security (Ip Sec)
- Balance Sheet
- Scripting
- Cyber Security
- Wireless Access Points
- Azure ExpressRoute
- Data Privacy
- Intrusion Detection And Prevention
- Active Directory
- Information Technology
- Cisco Certified Network Associate
- Patch Management
- Cisco Certified Network Professional
- Emergency Response
- Palo Alto Networks
- Routing and Switching
- Web Application Firewall (Waf)
- Network Engineering
- Managed Care
- Python
- Remote Access
- Palo Alto Networks Certified Network Security Engineer (Pcnse)
- Health Insurance Portability And Accountability Act (Hipaa) Compliance
- Wireshark
- Cisco
- Audit Readiness
- Electrical Equipment Components
- DNS Security
- Role-Based Access Control (Rbac)
- Virtual Local Area Network (Vlan)
- Intrusion Detection Systems (Ids)
- Artificial Intelligence
- Firewall
- Communications Systems
- Certified Information Systems Security Professional
- Microsoft Azure
- SolarWinds
- Microsoft Windows Server
- Privileged Access Management
- Network Infrastructure
- Fortinet
- Virtual Private Networks (Vpn)
- Network Routing
- OpenAI ChatGPT
- Vendor Risk Management
- Windows PowerShell
- Safety Procedures
- Structured Cabling
- Cisco Meraki
- Multi-Factor Authentication
- VoIP
- Security Policies
- PRTG Network Monitor
- Security Auditing
- On-Premises Infrastructure
- Vulnerability Scanning
- NIST Cybersecurity Framework
- Content Management System (Cms)
- Medicare
- Zero Trust Security
- Policy Management
- Runbook Development
- Telecommunications Networks
- Distributed Directory Information Services
- Microsoft Entra ID
- Claude (Ai Model)
- Network Administration
- Diagnostics
- Log Analysis
- Maintenance
- Inventory Management
- Threat Analysis
- Computer Science
- Incident Management
- Network Automation
- Domain Name System
- Network Monitoring
- Cloud Security and Compliance
- Healthcare Payer Operations
- Protected Health Information (Phi) Compliance
- On-Call Coverage
- Disaster Recovery
- Communication
- SIEM
- HITRUST Certification
- Flexibility
- Transmission Control Protocol (Tcp)
- Change Management
- TCP/IP
## Benefits

- Health Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Paid Time Off (Pto)
- 401(k) Plans
- Food and Meals

## Related

- [More jobs at Astiva Health](https://www.foundrole.com/companies/astiva-health?utm_source=ai_markdown)
- [Technology & Software jobs](https://www.foundrole.com/careers/technology-and-software?utm_source=ai_markdown)- [Cybersecurity jobs](https://www.foundrole.com/careers/technology-and-software/cybersecurity?utm_source=ai_markdown)- [Security Engineer jobs](https://www.foundrole.com/careers/technology-and-software/cybersecurity/security-engineer?utm_source=ai_markdown)- [Browse all companies](https://www.foundrole.com/companies?utm_source=ai_markdown)

## Explore this job market

- [California](https://www.foundrole.com/locations/us/california?utm_source=ai_markdown) — 283021 jobs
- [Insurance Carriers](https://www.foundrole.com/sectors/insurance/insurance-carriers-2?utm_source=ai_markdown) — 50873 jobs
- [Astiva Health](https://www.foundrole.com/companies/astiva-health?utm_source=ai_markdown) — 21 jobs

## Related pages

- [California](https://www.foundrole.com/locations/us/california?utm_source=ai_markdown) — 283021 jobs
- [Insurance Carriers](https://www.foundrole.com/sectors/insurance/insurance-carriers-2?utm_source=ai_markdown) — 50873 jobs
- [Astiva Health](https://www.foundrole.com/companies/astiva-health?utm_source=ai_markdown) — 21 jobs

## Browse

- [Companies](https://www.foundrole.com/companies?utm_source=ai_markdown)
- [Jobs by country](https://www.foundrole.com/locations?utm_source=ai_markdown)
- [Jobs in the United States by state and city](https://www.foundrole.com/locations/us?utm_source=ai_markdown)
- [H1B sponsors by location](https://www.foundrole.com/h1b-sponsors?utm_source=ai_markdown)
- [H1B salaries](https://www.foundrole.com/h1b-salaries?utm_source=ai_markdown)
- [Sectors and industries](https://www.foundrole.com/sectors?utm_source=ai_markdown)
- [Jobs by career field](https://www.foundrole.com/careers?utm_source=ai_markdown)
- [Latest jobs](https://www.foundrole.com/jobs/latest?utm_source=ai_markdown)