UNKNOWN

FEED

Work authorization: Due to the nature of the work and access to Controlled Unclassified Information (CUI) in support of U.S. Department of Defense-related programs, candidates must qualify as a U.S. Person (USPER), including U.S. Citizens, U.S. Nationals, or Lawful Permanent Residents (Green Card holders), and must meet all applicable requirements for access to CUI-regulated environments. KORE1, a nationwide provider of staffing and recruiting solutions, has an immediate opening for a Network Security Engineer / Architect (Fortinet, FortiGate, Enterprise IT, Segmentation & Zero Trust) - CUI Environment / US Persons Only.

HOUR

<div style="line-height:1"><img class="fr-fic fr-dii" src="http://search10.smartsearchonline.com/koreone/clientimages/Kore1%20email%20logo.png"/></div><div style="line-height:1"><strong>No 3rd party firm / C2C candidates. </strong>No sub-vendors, layers, or candidate ownership by another staffing or consulting firm.<br/></div><div style="line-height:1"><br/></div><div style="line-height:1"><strong>Location: </strong>Hybrid onsite in Fountain Valley, CA. We prefer 3-5 days a week on-site for the 1st 2 weeks, then you can work fully remote (from the US/Pacific Time Zone).</div><div style="line-height:1"><br/></div><div style="line-height:1"><strong>Work authorization:</strong> Due to the nature of the work and access to Controlled Unclassified Information (CUI) in support of U.S. Department of Defense-related programs, candidates must qualify as a U.S. Person (USPER), including <strong>U.S. Citizens, U.S. Nationals, or Lawful Permanent Residents (Green Card holders),</strong> and must meet all applicable requirements for access to CUI-regulated environments. This may include background screening, completion of required security/privacy training, and execution of non-disclosure agreements (NDAs) in accordance with federal compliance standards.</div><div style="line-height:1"><br/></div><div style="line-height:1">KORE1, a nationwide provider of staffing and recruiting solutions, has an immediate opening for a <strong>Network Security Engineer / Architect (Fortinet, FortiGate, Enterprise IT, Segmentation & Zero Trust) - CUI Environment / US Persons Only</strong></div><div style="line-height:1"><br/></div><div style="line-height:1">We are seeking a highly experienced Network Engineer with deep expertise in the Fortinet ecosystem, specifically Fortinet FortiGate firewalls and FortiSwitch infrastructure. This role requires an expert-level engineer who understands the full Fortinet stack, security best practices, advanced routing/switching, VPN technologies, segmentation, wireless networking, and enterprise cybersecurity operations.</div><div style="line-height:1"><br/>The ideal candidate will be hands-on, capable of architecting, implementing, troubleshooting, securing, and optimizing complex enterprise environments across multiple locations. This individual must be able to work independently, lead projects, mentor junior IT staff, and provide high-level escalation support.<br/><br/></div><div style="line-height:1"><strong>Key Responsibilities</strong><br/></div><ul style="list-style-type:disc"><li style="line-height:1">Design, deploy, manage, and optimize enterprise Fortinet environments</li><li style="line-height:1">Configure and support:<ul style="list-style-type:circle"><li>FortiGate Firewalls</li><li style="line-height:1">FortiSwitch<br/></li><li style="line-height:1">FortiAP Wireless</li><li style="line-height:1">FortiAnalyzer</li><li style="line-height:1">FortiManager</li><li style="line-height:1">FortiClient VPN</li></ul></li><li style="line-height:1">Implement and maintain:<ul style="list-style-type:circle"><li>VLAN segmentation</li><li style="line-height:1">Site-to-site IPSec VPNs</li><li style="line-height:1">Remote access VPNs</li><li style="line-height:1">SD-WAN<br/></li><li style="line-height:1">High Availability (HA) clusters<br/></li><li style="line-height:1">NAC and network access policies<br/></li></ul></li><li style="line-height:1">Perform advanced firewall policy design and security hardening<br/></li><li style="line-height:1">Troubleshoot complex routing, switching, ARP, NAT, DNS, and connectivity issues<br/></li><li style="line-height:1">Configure dynamic and static routing protocols including:<ul style="list-style-type:circle"><li>BGP<br/></li><li style="line-height:1">OSPF<br/></li><li style="line-height:1">RIP</li><li style="line-height:1">Policy-based routing</li></ul></li><li style="line-height:1">Maintain a secure enterprise wireless infrastructure using WPA2/WPA3 Enterprise and certificate-based authentication<br/></li><li style="line-height:1">Monitor network performance, logs, and security events<br/></li><li style="line-height:1">Conduct firmware upgrades, vulnerability remediation, and lifecycle management<br/></li><li style="line-height:1">Support disaster recovery and business continuity planning<br/></li><li style="line-height:1">Create and maintain detailed network diagrams and documentation<br/></li><li style="line-height:1">Provide Tier 3 escalation support for critical outages and incidents<br/></li><li style="line-height:1">Collaborate with vendors, ISPs, and managed security providers</li></ul><br/><br/><div style="line-height:1"><strong>Required Qualifications</strong></div><ul style="list-style-type:disc"><li style="line-height:1">Fortinet Certified Professional (FCP) is a plus</li><li style="line-height:1">5+ years of hands-on Fortinet experience</li><li style="line-height:1">Expert-level knowledge of:<ul style="list-style-type:circle"><li>FortiGate</li><li style="line-height:1">FortiSwitch</li><li style="line-height:1">FortiAP</li><li style="line-height:1">FortiAnalyzer</li><li style="line-height:1">FortiManager<br/></li></ul></li><li style="line-height:1">Strong understanding of:<ul style="list-style-type:circle"><li>Enterprise networking<br/></li><li style="line-height:1">Cybersecurity</li><li style="line-height:1">Firewall architecture</li><li style="line-height:1">Zero Trust principles</li></ul></li><li style="line-height:1">Experience with:<ul style="list-style-type:circle"><li>Multi-site enterprise environments</li><li style="line-height:1">Network segmentation</li><li style="line-height:1">IPS/IDS</li><li style="line-height:1">SSL inspection</li><li style="line-height:1">MFA integration</li><li style="line-height:1">VPN troubleshooting</li></ul></li><li style="line-height:1">Advanced knowledge of:<ul style="list-style-type:circle"><li>TCP/IP<br/></li><li style="line-height:1">DNS</li><li style="line-height:1">DHCP<br/></li><li style="line-height:1">NAT<br/></li><li style="line-height:1">QoS<br/></li><li style="line-height:1">STP</li><li style="line-height:1">LACP<br/></li></ul></li><li style="line-height:1">Experience supporting Microsoft environments:<br/><ul style="list-style-type:circle"><li>Active Directory</li><li style="line-height:1">Entra ID<br/></li><li style="line-height:1">Microsoft 365<br/></li><li style="line-height:1">NPS/RADIUS</li></ul></li><li style="line-height:1">Strong documentation and communication skills<br/><br/></li></ul><div style="line-height:1"><strong>Preferred Experience</strong><br/></div><ul style="list-style-type:disc"><li style="line-height:1">Experience in regulated environments such as:<ul style="list-style-type:circle"><li>Defense<br/></li><li style="line-height:1">Aerospace<br/></li><li style="line-height:1">Manufacturing</li></ul></li><li style="line-height:1">Experience with:<ul style="list-style-type:circle"><li>CMMC compliance<br/></li><li style="line-height:1">ITAR/CUI environments</li><li style="line-height:1">SOC/SIEM integrations<br/></li><li style="line-height:1">Datacenter networking</li><li style="line-height:1">VMware or Nutanix environments</li></ul></li><li style="line-height:1">Familiarity with:<ul style="list-style-type:circle"><li>Meraki</li><li style="line-height:1">Cisco<br/></li><li style="line-height:1">Aruba<br/></li><li style="line-height:1">Veeam<br/></li><li style="line-height:1">Datto RMM<br/><br/></li></ul></li></ul><div style="line-height:1">Compensation depends on experience but is typically $75-85/hr </div><div style="line-height:1"><br/></div><div style="line-height:1">ABOUT KORE1<br/>Specializing in professional and technical recruiting, KORE1 is committed to supporting top IT, Engineering, Creative, Scientific, Accounting and Finance professionals in their career paths. We build deep relationships with leading companies, connecting them to exceptional talent every day. With extensive industry expertise and unmatched opportunities, our goal is to provide a unique experience for our contractors and consultants as they prepare for their next role. We are passionate about matching the right people with the right companies.</div><div style="line-height:1"><br/></div><div style="line-height:1"><strong>Kore1 provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Kore1 complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. Kore1 expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of Kore1's employees to perform their job duties may result in discipline up to and including discharge.</strong><strong><br/><br/></strong></div>

KORE1 Technologies

Network Security Engineer / Architect (Fortinet, FortiGate, Enterprise IT, Segmentation & Zero Trust) – CUI - US Persons ONLY

ARP (Address Resolution Protocol)

Access Control

Accounting

Aerospace and Defense

Authentication

Best Practices

Business Continuity Planning (BCP)

Cisco Network Systems

Communication Skills

Computer Firmware

Consulting

DHCP (Dynamic Host Configuration Protocol)

DNS (Domain Name System)

Disaster Recovery

Documentation

Ecosystems

Finance

Firewalls

High Availability

IPsec (IP Security)

Identify Issues

Internet Security

Internet Service Providers

Intrusion Detection Systems

Intrusion Prevention Systems

Link Aggregation Control Protocol (LACP)

Manufacturing

Mentoring

Microsoft Active Directory

Microsoft Product Family

NAT (Network Address Translation)

Network Administration/Management

Network Architecture/Engineering

Network Operations Center

Network Performance/Analysis

Network Routing

Network Security

Network Switching

Open Shortest Path First Protocol (OSPF)

Performance Analysis

QoS (Quality of Service)

RADIUS (Remote Authentication Dial-In User Service)

RIP (Routing Information Protocol)

Remote Access

Routing Protocols

SSL-TLS (Secure Socket Layer - Transport Layer Security)

Security Attacks

Security Information and Event Management (SIEM)

Security Monitoring

Security Policy

TCP/IP (Transmission Control Protocol/Internet Protocol)

Technical Recruiting

Technical Support

United States Department of Defense (DoD)

VLAN (Virtual Local Area Network)

VMWare

VPN (Virtual Private Network)

Wide Area Network (WAN)

Wireless Communications

SmartSearch

GCP Security Architecture: Lead the design of security controls within Google Cloud Platform, specifically for Vertex AI, BigQuery, VPC Service Controls, IAM, and Security Command Center. Incident Response: Lead the technical response to complex security incidents, using SQL/KQL to query logs and forensics data to ensure rapid recovery and root cause elimination.

<div class="content-intro"><p>Tebra only initiates contact with candidates via email from an official Tebra email address (@<a class="c-link" href="http://tebra.com/" rel="nofollow noopener noreferrer" target="_blank">tebra.com</a>, @<a class="c-link" href="http://patientpop.com/" rel="nofollow noopener noreferrer" target="_blank">patientpop.com</a>, or @<a class="c-link" href="http://kareo.com/" rel="nofollow noopener noreferrer" target="_blank">kareo.com</a>) or through our applicant tracking system, Greenhouse. We will only ask you to provide sensitive personal information through our official application portal — not via social media or text message. We do not conduct interviews via instant messaging.</p></div><h1>About the Role</h1><p>The Security Architect is a technical, hands-on senior role responsible for designing and implementing robust security architectures across Tebra's hybrid and cloud environments. You will drive the strategy to strengthen our overall security posture, ensure compliance (SOC2, HITRUST, PCI DSS), and proactively manage risk. You will have the unique opportunity to embed security into the DNA of our platform, shifting left through DevSecOps integration and enabling engineering teams to build securely by default in GCP.</p><h1>Key Responsibilities</h1><ul><li><strong>Cloudflare & Edge Defense:</strong> Own the strategy and execution for the Cloudflare ecosystem to secure the network edge. This includes architecting WAF rules (using <strong>RegEx</strong>), DDoS protection, Bot Management, and writing custom edge logic using <strong>Cloudflare Workers (JS/TS)</strong>.</li><li><strong>GCP Security Architecture:</strong> Lead the design of security controls within Google Cloud Platform, specifically for <strong>Vertex AI</strong>, <strong>BigQuery</strong>, VPC Service Controls, IAM, and Security Command Center.</li><li><strong>Kubernetes & Container Security:</strong> Architect and verify security for GKE environments, including container hardening, securing <strong>Helm</strong> charts, and implementing runtime security policies.</li><li><strong>DevSecOps & Automation:</strong> Embed security into CI/CD pipelines (Cloud Build, GitHub Actions) using Infrastructure as Code (<strong>Terraform</strong>). Orchestrate security workflows using <strong>Workato</strong>, building custom <strong>Python</strong> API endpoints to expose internal security logic to the platform.</li><li><strong>Threat Modeling & Risk:</strong> Lead threat modeling for critical applications and feature releases, proactively identifying design-level flaws before deployment.</li><li><strong>Mentorship & Culture:</strong> Be a role model for security best practices; mentor engineers on secure coding standards and up-level the organization's understanding of cloud security.</li><li><strong>Incident Response:</strong> Lead the technical response to complex security incidents, using <strong>SQL/KQL</strong> to query logs and forensics data to ensure rapid recovery and root cause elimination.</li><li><strong>Governance:</strong> Conduct regular risk assessments to identify control gaps and ensure technical alignment with SOC2, HITRUST, and PCI DSS requirements.</li></ul><h1>Your Professional Qualifications</h1><ul><li>Experience: 7+ years of experience in Information Security with deep hands-on expertise in network Architecture.</li><li>Education & Certifications: Master's degree in Cybersecurity required. GCP Professional Cloud Security Engineer certification is highly preferred.</li><li>GCP & AI Depth: Deep experience securing Google Cloud Platform, including specific experience with Vertex AI services and BigQuery analytics controls.</li><li>Core Security Stack: Proven ability to manage and tune Cloudflare (WAF/Zero Trust) and CrowdStrike Falcon (EDR/XDR).</li><li>Technical & Automation Fluency: Expert proficiency in Python for building custom automation APIs and Workato for orchestration. Working knowledge of HCL for Terraform code review, JavaScript/TypeScript for Cloudflare Workers, SQL for BigQuery analysis, and RegEx for custom WAF rule creation.</li><li>Kubernetes Mastery: Strong understanding of Kubernetes (GKE) security, including node pools, network policies, and securing Helm deployments.</li><li>Compliance: Solid understanding of risk assessment methodologies (NIST RMF) and mandatory compliance frameworks (SOC2, HITRUST, PCI DSS).</li></ul><p><strong><em>(For Recruiter use only)</em></strong><strong> #LI-SS1 #LI-Remote</strong></p><div class="content-pay-transparency"><div class="description" style="padding-top:0px"><p>We are dedicated to attracting and retaining top talent with competitive and fair compensation. For this position, this range reflects our Zone 1 (National Average) pay band. Your specific compensation is thoughtfully determined by your experience, qualifications, the specific requirements of the role, and your Geo Zone. Our geo-zone system ensures your pay is competitive for your location, recognizing varying costs of labor across regions.</p><p>Our four geo zones are designed to reflect this:<br/>Zone 1: National Average<br/>Zone 2: Moderately Higher Cost Regions<br/>Zone 3: High-Cost Regions<br/>Zone 4: Lower-Cost Regions</p><p>Beyond base compensation, Tebra offers eligible employees the opportunity for variable pay and a robust benefits package, reflecting our commitment to your overall well-being. In compliance with California pay transparency laws, the specific compensation range applicable to your Geo Zone will be shared during your initial talent screen.</p></div><div class="title" style="font-weight:600;padding-top:8px">Zone 1 (National Average)</div><div class="pay-range">$178,500—$203,500 USD</div></div><div class="content-conclusion"><p/><h1>About Tebra</h1><p>Kareo and PatientPop have joined forces to become Tebra, the digital backbone for practice well-being. While our teams are still supporting both products, our new hires and current employees are now united as Team Tebra. </p><p>Tebra aims to unlock better healthcare by helping independent practices bring modernized care to patients everywhere. Well over 100,000 providers trust Tebra to elevate their patient experience, and help them grow their practice. At Tebra, we're building the future of well-being together. That shared vision for tomorrow begins with compassion and humanity today.</p><h1>Our Values</h1><h2>Start with the Customer </h2><p>We get to know our customers - and their patients - and look at the world through their lens.</p><h2>Keep It Simple</h2><p>Healthcare is too complex. We aim to simplify it for everyone.</p><h2>Stay Entrepreneurial </h2><p>We reject the status quo and solve problems with creativity, perseverance, and a bias to action.</p><h2>Better Together</h2><p>We are diverse, humble, and collaborative. We put the team first and win together.</p><h2>Celebrate Success</h2><p>Life is short and joy is underrated. We take time to have fun and celebrate success.</p><h1>Perks & Benefits </h1><p>United States: In addition to our healthcare benefits, we also offer amazing perks! Need work from home basics? We offer a discount through Dell! We also offer a number of resources to help you keep your mind and body healthy. Check out Gympass for a great workout, or TelusEmployee Assistance Program to find mental health resources, along with other resources for everyday occurrences.</p><p>Costa Rica: To assist with all of life's needs, Tebra also offers a wellness and childcare subsidy and a University/Education discount! We also offer a number of resources to help you keep your mind and body healthy. Check out Gympass for access to health and fitness apps, or Telus Employee Assistance Program to find mental health resources, along with other resources for everyday occurrences.</p><h1>Compliance & Privacy Disclosures</h1><p><em>NOTE: Tebra is an equal opportunity employer. All applicants will be considered for employment without attention to age, race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.</em></p><p><em>California residents who apply or are recruited for a job with us: please carefully review our California-specific Privacy Notice under the California Consumer Protection Act here: <a href="https://www.tebra.com/privacy-policy/california-supplemental-notice/" rel="nofollow noopener noreferrer" target="_blank">https://www.tebra.com/privacy-policy/california-supplemental-notice/</a></em></p><p><em>If you would like to report a fraudulent Tebra job posting, please contact us at </em></p><p>talentacquisition@tebra.com</p> and consider reporting your experience to the FBI's Internet Crime Complaint Center or the Better Business Bureau to help keep others safe online, too.<p/><p><em>As part of our commitment to a fair and efficient hiring process, Tebra utilizes BrightHire, an interview intelligence platform, for our phone and video screenings. This technology records and transcribes interviews to help us ensure consistency, reduce bias, and make more informed hiring decisions. By applying for this position, you acknowledge that your interview may be recorded.</em></p></div>

Hybrid Security Jobs in Santa Ana, CA

Resume Resources

Get noticed by top employers!

Hybrid Security Jobs in Santa Ana, CA

Network Security Engineer / Architect (Fortinet, FortiGate, Enterprise IT, Segmentation & Zero Trust) – CUI - US Persons ONLY KORE1 Technologies

Security Architect Tebra

Resume Resources