Senior Cybersecurity & Network Security Engineer (On-Site)

About AmeriPharma
AmeriPharma Specialty Care is a national specialty pharmacy and home infusion provider serving patients with complex and rare conditions, including IVIG and SCIG therapy, TPN, biologics, oncology support, and rare disease therapies.
AmeriPharma operates accredited ambulatory infusion centers and provides home-based infusion nationwide, supported by a fully integrated intake, clinical, and revenue cycle infrastructure. The MedBox division extends AmeriPharma’s mission to senior, home-based, and long-term care populations through medication adherence and multi-dose packaging services.
Why Join Us?
We're a rapidly growing digital pharmacy where you will have the opportunity to contribute to our joint success on a daily basis. We value new ideas, creativity, and productivity. We like people who are passionate about their roles and people who like to grow and change as the company evolves.
At AmeriPharma, you'll have access to:
Competitive pay and generous compensation structures
Full benefits package including medical, dental, vision, and life that fits your lifestyle and goals
Employee assistance program to assist with mental health, legal questions, financial counseling, and more!
401k program
Comprehensive PTO and sick leave options
Opportunities for growth and advancement
Casual Fridays
Job Summary
AmeriPharma is seeking a Senior Cybersecurity & Network Security Engineer to lead the protection of enterprise systems, safeguard sensitive data, and ensure compliance with healthcare regulations such as HIPAA and HITECH. This is a senior, hands-on role responsible for executing security strategies across infrastructure, applications, cloud environments, and endpoints.
As the technical security lead under IT, this role owns risk reduction, identity and access management, centralized monitoring, and data protection. The ideal candidate is proactive, detail-oriented, and experienced in building secure, scalable, and audit-ready environments, playing a key role in protecting systems that directly support patient care.
Key Responsibilities
Identity & Access Management (IAM)
Design and enforce secure access controls using SSO, MFA, RBAC, and least-privilege principles
Manage full user lifecycle, including provisioning, de-provisioning, and access reviews
Ensure secure and auditable access to PHI systems, applications, and databases
Security Monitoring & Logging
Build and maintain centralized logging across systems (Google Workspace, endpoints, servers, firewalls, etc.)
Develop real-time alerting, dashboards, and automated response workflows
Monitor for suspicious activity, unauthorized access, and potential data breaches
Data Security & Governance
Classify and protect sensitive data, including PHI, across cloud and on-prem environments
Implement Data Loss Prevention (DLP) policies and monitor data access and sharing
Define and enforce data retention, archiving, and secure disposal policies
Network & Infrastructure Security
Secure network environments, including firewalls, VPNs, and remote access
Enforce network segmentation across clinical, corporate, IoT, and guest environments
Protect RDS environments and distributed workforce infrastructure
Cloud & Application Security
Secure AWS, Azure, and Google Cloud environments
Protect APIs, internal applications, and data flows
Ensure end-to-end protection of sensitive healthcare data
Risk Management & Compliance
Maintain a centralized risk register and lead risk assessments
Align security controls with HIPAA, HITECH, and internal policies
Support audits and maintain proper documentation and evidence
Security Operations & Incident Response
Lead incident response efforts including detection, containment, and remediation
Conduct forensic investigations and root cause analysis
Perform vulnerability scanning, threat hunting, and remediation tracking
Security Testing & Tool Optimization
Support penetration testing and validate remediation efforts
Optimize and integrate security tools (SIEM, EDR/XDR, endpoint protection, etc.)
Automate workflows and continuously improve system visibility and protection
Endpoint & Automation Security
Enforce endpoint compliance and patch management
Secure automation platforms and API integrations
Prevent unauthorized data access and system misuse

Employment type
Exempt full-time

Work arrangement
No