On behalf of our healthcare client, Affinity Healthcare Solutions is looking for a Network Security Engineer to serve as a trusted advisor to our client, guiding them through the planning, design, and implementation of a network segmentation strategy. Your expertise will help mitigate risks, improve visibility, and ensure secure data flow in a complex healthcare environment. This role involves collaborating with client stakeholders, assessing current infrastructure, and recommending best practices and tools to achieve segmentation.

Responsibilities:

• Provide strategic guidance and technical expertise on network segmentation initiatives, including architecture design, implementation roadmaps, and risk assessments tailored to healthcare environments.

• Evaluate the client's existing network infrastructure, identify vulnerabilities, and propose segmentation solutions to enhance security and compliance.

• Advise on the integration and utilization of Forescout for device visibility, policy enforcement, and network access control within segmented environments.

• Conduct workshops, presentations, and documentation to educate client teams on segmentation best practices and tool capabilities.

• Collaborate with cross-functional teams (e.g., IT, security, and compliance) to align segmentation strategies with business objectives and regulatory requirements.

• Perform gap analyses and recommend remediation steps to address network security challenges.

• Stay updated on emerging threats, technologies, and industry standards relevant to network security in healthcare.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).

• 7+ years of hands-on experience in network engineering and security, with a proven track record in designing and managing enterprise-level networks.

• Demonstrated experience leading or contributing to network segmentation projects, including micro-segmentation, VLANs, firewalls, and zero-trust architectures.

• Experience with Forescout, including deployment, configuration, policy management, and integration for network visibility and control.

• Experience with creating high level to low level diagrams to represent the network requirements to business and technical stakeholders.

• Strong understanding of network protocols, topologies, and security principles (e.g., OSI model, TCP/IP, firewalls, IDS/IPS).

• Strong hands-on experience in layer 2/3 switch, router and next-generation firewalls.

• Excellent communication and presentation skills, with the ability to translate complex technical concepts to non-technical stakeholders.

• Ability to work independently in a client-facing advisory role, with strong problem-solving and analytical skills.

Preferred Qualifications

• Certifications such as CCNP, Palo Alto, Juniper or Forescout-specific certifications (e.g., Forescout Certified Administrator)

Affinity Earn:

Know someone who’s great for this, or any of our open roles? Earn up to $4,000/year for each successful referral through Affinity Earn. You can also earn up to $50,000 for helping us find new clients. Learn about our referral program at or browse our jobs & follow us at

About Affinity:

Affinity Group is a technology and business consulting and services company. We believe in creating long term relationships between clients and consultants that foster a mutually beneficial partnership. Affinity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided on the basis of qualifications, merit and business need.

For more information on Affinity, please visit

Job Number: 12462

@LI-Remote