Senior Network Security Engineer, Platform Engineering, Baptist Medical Center

Job Summary

Senior Network Security Engineer, Platform Engineering, Baptist Medical Center (On-site only)

As a Security Engineer on the Platform Engineering team, you will play a critical role in safeguarding and optimizing the organization’s network and cloud infrastructure. Working collaboratively with experienced peers, you will be responsible for maintaining and enhancing firewall VPN tunnels, ensuring the stability and security of the enterprise’s expansive cloud environment, and supporting the resilience of a large-scale network ecosystem.

A key focus area for this role involves supporting the implementation of a new VPN solution, including the migration of all existing tunnels and the integration of new firewalls in partnership with a Fortinet Engineer consultant as part of the Arista Transition. This initiative will require both technical expertise and strong coordination skills to ensure a smooth, secure, and efficient rollout.

In addition to project-based work, you will actively monitor, troubleshoot, and optimize the organization’s security posture across cloud and on-prem environments.

For more than 25 years, health care consumers have named Baptist Health the "most preferred healthcare provider" in the region. At Baptist Health, we are proud to be local, providing multigenerational care to our community. We are the hospital Jacksonville trusts most. Our employees can take pride in their Baptist badge, knowing the impact they make on their friends, family, and neighbors. Baptist was recently recognized by Forbes magazine as one of America's top employers for diversity.

Baptist Health offers competitive pay & comprehensive benefits packages as well as opportunities for professional growth & advancement. At Baptist Health, we provide an exceptional employment experience where team members can bring their authentic selves and belong to a larger purpose together. By fostering connections with our team members and our community, we offer a fulfilling and personal career.

As a Network Security Engineer (on-site), you will be responsible for:

• The Security Engineer will work to evaluate, test, recommend, coordinate, monitor, and maintain information systems (IS) and cybersecurity policies, procedures, and systems, including access management for hardware, firmware, and software.
• This role will ensure that IS and cyber security plans, controls, processes, standards, policies, and procedures are aligned with IS standards and overall IS and cyber security.
• The Security Engineer will identify security risks and exposures, determine the causes of security violations, and suggest procedures to halt future incidents and improve security.
• The Security Engineer will develop techniques and procedures for conducting IS and cyber security risk assessments and compliance audits, evaluating and testing hardware, firmware, and software for possible impact on system security, and investigating and resolving security incidents such as intrusion, fraud, attacks, or leaks.
• This role requires working knowledge and experience in one's own job discipline.
• The Security Engineer will work to broaden their own capabilities by continuing to build knowledge of the organization, processes, and customers.
• Performs a range of assignments using guidelines or policies.
• Analyzes and solves straightforward problems as they occur but typically requires guidance on complex or unusual problems.
• This role will have a moderate level of guidance and direction from more experienced team members.

If you are interested in the Security Engineer role located at Baptist Jacksonville, apply today or contact andrew.foran@bmcjax.com

Education Required

Bachelor's Degree or Equivalent Experience

Education Preferred

Bachelor's Degree

Experience

• Minimum 5 years of related experience Required

• Proven expertise with Fortinet firewalls, VPN solutions, and related migration/implementation projects.

• Strong background in cloud security (Azure, AWS, or equivalent), including secure connectivity, identity, and compliance controls.

• Experience supporting large-scale enterprise networks, including segmentation, routing, and high-availability architectures.

• Proficiency with network protocols (TCP/IP, BGP, OSPF, IPsec, SSL, etc.) and secure tunneling technologies.

• Practical knowledge of Arista Networks or similar enterprise-grade networking platforms.

• Familiarity with SIEM tools, vulnerability management, and incident response workflows.

• Demonstrated ability to analyze, troubleshoot, and resolve complex security and networking issues in production environments.

• Experience coordinating with consultants, vendors, and cross-functional teams on security infrastructure projects.

• Strong understanding of cybersecurity frameworks and compliance standards (HIPAA, NIST, ISO 27001, etc.).

License and Certification

• Cisco Certified Network Professional (CCNP) Preferred Or
• Microsoft Officer User Specialist (MOUS) Preferred Or
• Microsoft Certified Systems Engineer (MCSE) Preferred Or
• Cisco Certified Security Professional (CCSP) Preferred Or
• Fortinet Professional Certification

Location

Location Overview

Baptist Health, founded in 1955, is North Florida’s most comprehensive health care system and the area’s only non-profit, mission-driven, locally governed health care provider. Baptist Health has over 200 points of care throughout the Northeast Florida region, including our six award-winning hospitals: Baptist Medical Center Jacksonville, Wolfson Children’s Hospital, Baptist Medical Center Beaches, Baptist Medical Center Clay, Baptist Medical Center Nassau and Baptist Medical Center South. The most preferred health care system in the region, Baptist Health also includes 57 primary care offices, as well as home health, behavioral health, pastoral care, rehabilitation services, occupational health and urgent care.