Job description

ABOUT THIS POSITION Waystar is seeking an experienced Senior Network Engineer to design, implement, secure, and support a complex multi-site enterprise network infrastructure. This role will serve as a senior technical resource responsible for network architecture, security, performance optimization, and strategic modernization initiatives across corporate offices, data centers, and cloud-connected environments. The ideal candidate will possess deep expertise in enterprise routing and switching, VPN technologies, firewall administration, network access control (NAC), and Zero Trust Network Architecture (ZTNA). This individual will help maintain secure, resilient connectivity while driving modernization efforts that improve scalability, supportability, and the end-user experience. WHAT YOU LL DO Network Architecture & Engineering Design, implement, and maintain enterprise network infrastructure across multiple locations. Develop scalable architectures supporting on-premises, cloud, and hybrid environments. Lead network modernization initiatives focused on resiliency, security, and operational efficiency. Evaluate networking technologies and recommend standards aligned with business and security requirements. Create and maintain network diagrams, configuration standards, runbooks, and technical documentation. Routing, Switching & Wireless Administer enterprise routing, switching, and wireless platforms. Configure and support Layer 2 and Layer 3 networking services, including VLANs, routing protocols, redundancy, and QoS. Perform capacity planning, performance tuning, and lifecycle management of network infrastructure. Firewall & Security Engineering Design, implement, and manage enterprise firewall platforms and network security controls. Develop segmentation strategies, access policies, and least-privilege connectivity models. Partner with cybersecurity teams to investigate threats, remediate vulnerabilities, and improve security posture. Review and implement firewall rule changes in accordance with change management standards. VPN & Secure Remote Access Design and support site-to-site, client-based, and remote-access VPN solutions. Troubleshoot secure connectivity for employees, contractors, partners, and third-party integrations. Optimize remote access services for security, performance, reliability, and user experience. Network Access Control (NAC) Administer and enhance Network Access Control solutions. Develop policies for device authentication, posture validation, onboarding, and dynamic segmentation. Integrate NAC capabilities with identity, endpoint management, and security platforms. Support secure access for corporate, BYOD, contractor, and partner devices. Zero Trust Network Architecture (ZTNA) Lead the design and adoption of Zero Trust networking principles and technologies. Implement identity-aware access, segmentation, continuous validation, and least-privilege controls. Partner with security, endpoint, identity, and cloud teams to expand ZTNA capabilities. Develop roadmaps that advance secure access and reduce reliance on traditional network trust boundaries. Operations, Incident Response & Leadership Serve as an escalation point for complex network incidents, outages, and performance issues. Participate in on-call rotation, major incident response, root cause analysis, and corrective action planning. Plan and execute changes using established change management and maintenance processes. Provide technical leadership and mentorship to engineers and collaborate across infrastructure, security, cloud, and application teams. WHAT YOU LL NEED Bachelor s degree in Information Technology , Computer Science, Engineering, or equivalent practical experience. 8 years of enterprise network engineering experience, including 5 years supporting large-scale, multi-site environments. Advanced experience with enterprise firewalls, VPN technologies, routing and switching, network segmentation, NAC, and Zero Trust concepts. Strong understanding of TCP/IP, DNS, DHCP, VLANs, QoS, high availability, and dynamic routing protocols. Experience supporting highly available production environments and using network monitoring and troubleshooting tools. Excellent analytical, communication, collaboration, and technical documentation skills. Preferred Qualifications Experience with Fortinet technologies such as FortiGate, FortiSwitch , FortiManager , FortiAuthenticator , FortiNAC , and FortiClient. Experience with Arista networking platforms and enterprise wireless solutions. Experience implementing Zero Trust Network Access solutions and cloud networking in Microsoft Azure . Experience supporting mergers, acquisitions, data center transitions, or large-scale infrastructure migrations. Experience in healthcare, financial technology, or another regulated industry. Familiarity with SOC 2, HITRUST, HIPAA, PCI DSS, or similar compliance frameworks. Measures of Success Improve network availability, performance, and resiliency across enterprise locations. Advance the organization’s Zero Trust networking and secure remote access strategy. Enhance network segmentation, firewall governance, and access control maturity. Increase visibility and control of network-connected devices through NAC capabilities. Reduce operational risk through standardization, automation, lifecycle planning, and high-quality documentation. Deliver secure and scalable solutions that improve the employee technology experience. ABOUT WAYSTAR Through a smart platform and better experience, Waystar helps providers simplify healthcare payments and yield powerful results throughout the complete revenue cycle. Waystar’s healthcare payments platform combines innovative, cloud-based technology, robust data, and unparalleled client support to streamline workflows and improve financials so providers can focus on what matters most: their patients and communities. Waystar is trusted by 1M providers, 1K hospitals and health systems, and is connected to over 5K commercial and Medicaid/Medicare payers. We are deeply committed to living out our organizational values: honesty; kindness; passion; curiosity; fanatical focus; best work, always; making it happen; and joyful, optimistic & fun. Waystar products have won multiple Best in KLAS® or Category Leader awards since 2010 and earned multiple #1 rankings from Black Book™ surveys since 2012. The Waystar platform supports more than 500,000 providers, 1,000 health systems and hospitals, and 5,000 payers and health plans. For more information, visit waystar.com or follow Waystar on Twitter. WAYSTAR PERKS Competitive total rewards (base salary bonus, if applicable) Customizable benefits package (3 medical plans with Health Saving Account company match) We offer generous paid time off for our non-exempt team members, starting with 3 weeks 13 paid holidays, including 2 personal floating holidays. We also offer flexible time off for our exempt team members 13 paid holidays Paid parental leave (including maternity paternity leave) Education assistance opportunities and free LinkedIn Learning access Free mental health and family planning programs, including adoption assistance and fertility support 401(K) program with company match Pet insurance Employee resource groups Waystar is proud to be an equal opportunity workplace. We celebrate, value, and support diversity and inclusion. Qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, marital status, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Requirements

Must-haves

Network Architecture & Engineering
Design, implement, and maintain enterprise network infrastructure across multiple locations.
Develop scalable architectures supporting on-premises, cloud, and hybrid environments.
Lead network modernization initiatives focused on resiliency, security, and operational efficiency.
Evaluate networking technologies and recommend standards aligned with business and security requirements.
Create and maintain network diagrams, configuration standards, runbooks, and technical documentation.
Routing, Switching & Wireless
Administer enterprise routing, switching, and wireless platforms.
Configure and support Layer 2 and Layer 3 networking services, including VLANs, routing protocols, redundancy, and QoS.
Perform capacity planning, performance tuning, and lifecycle management of network infrastructure.
Firewall & Security Engineering
Design, implement, and manage enterprise firewall platforms and network security controls.

Nice-to-haves

Experience with Fortinet technologies such as FortiGate, FortiSwitch , FortiManager , FortiAuthenticator , FortiNAC , and FortiClient.
Experience with Arista networking platforms and enterprise wireless solutions.
Experience implementing Zero Trust Network Access solutions and cloud networking in Microsoft Azure .
Experience supporting mergers, acquisitions, data center transitions, or large-scale infrastructure migrations.
Experience in healthcare, financial technology, or another regulated industry.
Familiarity with SOC 2, HITRUST, HIPAA, PCI DSS, or similar compliance frameworks.
Measures of Success
Improve network availability, performance, and resiliency across enterprise locations.
Advance the organization’s Zero Trust networking and secure remote access strategy.
Enhance network segmentation, firewall governance, and access control maturity.
Increase visibility and control of network-connected devices through NAC capabilities.
Reduce operational risk through standardization, automation, lifecycle planning, and high-quality documentation.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azure

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

401(K)

Paid Time Off

Parental Leave