Network Security Engineer

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.Network Security Engineer is responsible for the development and maintenanceofresilient, sophisticated, modern, and secure network solutions that serveCoverMyMeds'critical businesses and customers. The engineer will develop, build, and deploy network security technologies, capabilities, and roadmaps to drive improvements in defense-in-depth and zero-trust security posture.Responsibilities include:Design and implement network security solutions within the enterprise datacenters and cloud platformsProduce detailed designs and cost estimates for network security solutions, adhering to network architectural standardsEngage in Business Unit projects to elicit network requirements, specifications, and project scopeImplement network security to company policyDevelop and document network operations and monitoring processes and proceduresResearch and test network management and monitoring products and tools to maintain currency and enhance functionalityProvide Level 3 diagnosis and advanced troubleshooting when required, participates in on-call rotationPerform short-term and long-term network security capacity planningMinimum Qualifications:5+ years of experience working in complex IP network environments with heavy security focus.Significant experience designing, implementing, and maintaining network firewalls (Palo Alto, Cisco Firepower and F5)3-5 years of experience designing, implementing, and maintaining intrusion detection/prevention systems (Palo Alto / Cisco Firepower/FMC)Experience with NGFW Palo Alto/Panorama technologies: Threat Prevention, URL Filtering, Wildfire, Global Protect, DNS securityExperience designing, implementing, and maintaining VPN Solutions (Global Protect, and Cisco Meraki)Experience designing, implementing, and maintaining Identity Access/Multi-factor solutions (Cisco ISE, Aruba Clearpass, Okta), Network forensics (Wireshark, SIEM, packet capture, TCP/SSL dumps)5-7 years' experience of TCP/IP networking knowledge including security, sub-netting, switching, routing, load-balancing, and troubleshooting techniquesFamiliarity with emerging network technologies: cloud adoption (cloud providers Azure or GCP), containerization (Kubernetes), automation and orchestration (Ansible, Python, Terraform)Working knowledge of load-balancers and ADCs such as F5 products (LTM, Big-IP DNS, ASM, APM, Big-IQ,etc), NGINX, and Citrix NetScaler appliancesCritical Skills:Self-driven and able to take ownership of strategic and internal infrastructure projects and tasksEffective communication skills: candidate in this role must be able to clearly and successfully communicate with management personnel, project managers, technical personnel, internal/external customers, and third partiesCan work under limited supervisionStrong analytical, design, engineering, planning and problem-solving skillsPreferred Skills:Experience with web application firewalls (F5 ASM, NetScaler WAF, Imperva)Aruba ClearPass Access Management system deployment and support a plusWide-ranging knowledge of Network Management tools and utilitiesEducation:Bachelor's degree or equivalent experience in a related discipline is requiredCertifications:Palo Alto, Cisco, F5, or othe

Created: 2025-09-06