Network and Security Administrator

At Virginia Garcia Memorial Health Center, we honor all members of our community and acknowledge the dignity of each person we serve. Our purpose is to provide high quality, comprehensive primary health care to the communities of Washington and Yamhill counties with a special emphasis on migrant and seasonal farm workers and a view to removing barriers to health care. We strive to provide an environment that welcomes and values the people we employ and serve.

If you are unsure whether you meet all the required qualifications for this role but are interested and passionate about this potential position, we encourage you to apply.

Job Summary: Under direction, the Network and Security Administrator is responsible for the design, implementation, maintenance, monitoring, and security of VGMHC's network infrastructure across clinical, administrative, and remote locations. This role ensures stable, secure, and high-performing network services that support patient care, clinical workflows, and business operations.

This position requires a balance of hands-on technical expertise, proactive risk identification, disciplined execution, and strong documentation practices within a regulated healthcare environment. The Network and Security Administrator is expected to resolve issues, anticipate risks, improve systems, and contribute to long-term infrastructure resilience and security.

Essential Duties and Responsibilities:

• Administer, configure, monitor, and maintain LAN, WAN, wireless, and VPN infrastructure across all VGMHC locations.
• Configure, maintain, and support routers, switches, firewalls, and secure remote access solutions.
• Design and manage VLANs, subnetting, routing, and network segmentation for clinical, administrative, guest, and medical device networks.
• Monitor network performance and proactively address capacity, latency, reliability, and availability concerns impacting clinical operations.
• Perform firmware updates, security patching, and lifecycle maintenance of network and security infrastructure.
• Maintain secure connectivity with external healthcare partners and HIEs, including OCHIN.
• Implement and manage firewall rules, intrusion detection and prevention systems, VPNs, and network access controls.
• Enforce cybersecurity best practices including least-privilege access, MFA, conditional access, and secure segmentation.
• Monitor security alerts and logs, from various systems; respond to incidents and coordinate remediation efforts.
• Perform vulnerability scanning, remediation tracking, and network hardening activities.
• Conduct comprehensive network and system security risk assessments using frameworks like NIST; develop and manage robust remediation tracking workflows to ensure timely mitigation of identified vulnerabilities.
• Serve as an escalation point for advanced network and security issues originating from the Help Desk.
• Diagnose and resolve network issues across multiple layers including connectivity, DNS, DHCP, routing, VPN, and wireless.
• Conduct root cause analysis and document corrective actions for recurring or high-impact incidents.
• Participate in network rollouts, hardware installations, site expansions, and infrastructure upgrades.
• Utilize monitoring tools to track network health, uptime, performance, and security events.
• Conduct routine system checks, backup verification, and failover testing supporting patient care continuity.
• Maintain accurate network diagrams, configurations, firewall rules, and security documentation.
• Follow established change management, ticketing, and documentation standards.
• Communicate clearly with clinical staff, operational leaders, and IT leadership regarding issues, risks, and recommendations.
• Translate technical network and security issues into operational and clinical impact when required.
• Assist with disaster recovery and business continuity planning and testing.
• Contribute to infrastructure improvement initiatives and standardization efforts.
• Perform other duties and projects assigned by the IT Director, IT leadership and other members of the VGMHC management team.
• Handle protected health information (PHI) in a manner consistent with the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
• Perform other duties as assigned.

Healthcare-Specific Systems, Tools, and Technologies

• Electronic Health Record (EHR) environments and secure clinical connectivity requirements.
• Health Information Exchanges (HIEs) and third-party healthcare partner integrations.
• Network segmentation strategies for medical devices, clinical systems, administrative systems, and guest networks.
• Security controls for dental, imaging, and diagnostic devices.
• HIPAA-aligned logging, monitoring, auditing, and incident response systems.
• Endpoint Detection and Response (EDR/XDR) platforms used in healthcare environments.
• Secure wireless infrastructure supporting exam rooms, mobile workstations, mobile vehicle units and tablets.
• Backup, disaster recovery, and business continuity platforms supporting patient care operations.
• Vendor risk management and security assessments for healthcare applications and cloud services.

HIPAA Requirements:

The Network and Security Administrator has access to PHI to create and maintain an accurate and up-to-date health record. Applying the minimum necessary standard of HIPAA, the designated record sets to which this employee will have access include all sections of the dental and medical record, patient demographic information in the practice management system, incoming records, reports, results, consultations, etc. The [position title] should read the content of these records only to the extent needed to accomplish the assigned task (e.g. filing or disclosure).

Knowledge, Skills and Abilities Required:

• Strong understanding of TCP/IP, DNS, DHCP, VLANs, routing, VPNs, and wireless networking.
• Hands-on experience with firewall platforms, network security controls, and incident response.
• Familiarity with Windows Server and Linux environments as they relate to network services.
• Experience supporting mission-critical or real-time systems where uptime and latency are essential.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to manage multiple priorities while maintaining compliance and attention to detail.
• Demonstrated planning and organizational skills.
• High degree of confidentiality, integrity, and professionalism.
• Commitment and alignment to the organization's mission, vision, and values.

Education and Experience Required:

• Bachelor's degree in computer science or a related field. Minimum three (3) years of experience in network administration and security required.
• Relevant certifications such as CompTIA Network+, Security+, CCNA, or Fortinet certifications preferred.
• Microsoft certifications (or equivalent training/experience) preferred.
• Experience with Cisco routers and switches, Fortinet firewalls, Wireless systems, Cloud technologies and network architecture.
• Experience with Artificial Intelligence (AI) tools in a healthcare environment preferred.
• Experience with vendor management or vendor collaboration preferred.
• Valid driver's license, reliable transportation, safe driving record, and insurance coverage required.

Behavioral Competencies

• Accountability: Role model the organization's mission, vision, and shared values.
• Customer Focus: Listen to the voice of the customer and strive to delight them by exceeding their expectations.
• Teamwork: If someone needs help, help them.
• Initiative: Be innovative, apply fresh ideas, and continuously improve how you do your work.
• Confidentiality: Maintain strict confidentiality and respect the privacy of others.
• Ethical: Demonstrate integrity, honesty, and stewardship in all encounters at work.
• Respect: Demonstrate consideration and appreciation for co-workers and clients.
• Communication: Demonstrate the ability to convey thoughts and ideas as well as understand the perspective of others.

Physical Requirements

• Sitting: 50%
• Walking: 30%
• Standing: 10%
• Must be able to lift/carry up to 40 lbs (i.e., computer monitors, CPUs, printers, etc.)
• Bend, reach, and stoop: 10%

Working Environment

• Work in well-lighted and ventilated environments.
• Requires travel to various locations and working flexible hours.
• Potential exposure to hazardous materials (e.g., cleaning chemicals, electrical components).

Immunization:

Staff members must meet immunization requirements as stated in VGMHC's immunization policy and state and federal guidelines.

Job descriptions represent a general outline of the essential and major job duties, functions and qualifications required. They cannot be all-inclusive and comprehensive due to the dynamic nature of work performed to accomplish VGMHC's Mission.

VGMHC is an Equal Opportunity Employer. No person is unlawfully excluded from consideration for employment because of race, color, religious creed, national origin, ancestry, sex, age, veteran status, marital status, or physical challenges. The policy applies not only to recruitment and hiring practices, but also includes fairness in placement, promotion, transfer, rate of pay, and termination.