IT Network Engineer III

Paradigm is an accountable specialty care management organization focused on improving the lives of people with complex injuries and diagnoses. The company has been a pioneer in value-based care since 1991 and has an exceptional track record of generating the very best outcomes for patients, payers, and providers. Deep clinical expertise is the foundation for every part of Paradigm’s business: risk-based clinical solutions, case management, specialty networks, home health, shared decision support, and payment integrity programs.

We’re proud to be recognized—again!  For the fourth year in a row, we’ve been certified by Great Place to Work®, and for the third consecutive year, we’ve earned a spot on Fortune's Best Workplaces in Health Care™ list. These honors reflect our unwavering commitment to fostering a positive, inclusive, and employee-centric culture where people thrive.

Watch this short video for a brief introduction to Paradigm.

We are seeking a full-time, remote IT Network Engineer III. This position will perform enterprise network engineering, administration, and support functions within a hybrid on‑premises and cloud environment. The Network Engineer III is accountable for the analysis, design, implementation, administration, and support of Paradigm’s firewall and network infrastructure. This role operates as a senior individual contributor within the IT organization, helping to build, maintain, secure, and troubleshoot enterprise networking platforms in a dynamic and evolving environment. The position requires strong technical competency, reliability in delivering mission‑critical infrastructure, and a continued focus on availability, performance, and security. Specific areas of emphasis within firewall and network responsibilities may vary by assignment, with some Network Engineer III roles serving as primary firewall owners and others serving as secondary firewall contributors while maintaining primary responsibility for core network platforms. Demonstrates a customer-first mindset through a commitment to delivering the best possible outcomes for our customers, which include; injured workers, payors, clients, providers, stakeholders, and internal teams. By fully leveraging Paradigm’s solutions, delivering consistently high‑quality service, and collaborating effectively with internal and external partners, we create an exceptional customer experience.

RESPONSIBILITIES:

Firewall & Network Engineering

• Design, implement, administer, and support enterprise firewall‑centric network infrastructure, including firewall platforms, routing, switching, and wireless technologies.
• Engineer, configure, and maintain firewall policies, NAT rules, VPNs, and network segmentation to support business, security, and compliance requirements.
• Implement secure network connectivity solutions across on‑premises data centers, cloud environments, and third‑party integrations.
• Evaluate and improve network designs to enhance resiliency, scalability, and security posture.

Operations & Platform Support

• Monitor firewall and network performance, availability, and capacity to ensure optimal operation of the enterprise environment.
• Perform system tuning, troubleshooting, and maintenance of multi‑site network infrastructure.
• Serve as a senior escalation point for complex firewall and network incidents.
• Perform root cause analysis and implement corrective and preventive actions.

Security & Compliance

• Implement and maintain network security controls aligned with Paradigm security standards and Zero Trust principles.
• Partner with Information Security and GRC teams to support audits, risk assessments, and compliance initiatives.
• Identify and remediate network vulnerabilities, misconfigurations, and security risks.
• Participate in firewall and network‑related security incident response and remediation efforts.

Project Delivery & Change Management

• Identify tasks necessary to achieve project goals and provide accurate work effort estimates.
• Lead or contribute to complex network initiatives including upgrades, migrations, firewall refreshes, and modernization projects.
• Execute network changes in accordance with established change management and operational processes.
• Coordinate activities with internal teams and external vendors to ensure successful delivery of network solutions.

Documentation, Standards & Continuous Improvement

• Create and maintain accurate documentation of firewall & network architectures, firewall configurations, and operational procedures.
• Contribute to the development and enforcement of network standards, best practices, and lifecycle management processes.
• Remain current on networking, firewall, and security technologies and recommend improvements aligned with business needs.

Collaboration & Mentorship

• Work as part of a team of infrastructure engineers who collectively demonstrate strong technical competency and operational reliability.
• Provide guidance and mentorship to junior network engineers.
• Collaborate closely with server, cloud, application, and security teams to deliver integrated infrastructure solutions.

• Utilizes AI tools to support day-to-day tasks, improve efficiency, and enhance output quality. Adopts new technologies as trained and applies them in alignment with established processes and guidelines.
• Demonstrates a customer-first mindset by developing a broad and deep (where appropriate) understanding of Paradigm organization, products, operations, and customers. Prioritizes collaboration to meet customer needs and expectations and takes personal accountability for service quality.

QUALIFICATIONS:

Education

• Bachelor’s degree in Information Technology, Computer Science, Engineering, or a related field preferred, or equivalent experience.

Experience

• 6+ years of progressive experience in enterprise network engineering roles, with demonstrated senior‑level responsibility for firewall and network platforms.
• Proven experience designing, implementing, and operating firewall‑centric network solutions in production environments.
• Experience serving as a technical lead or primary owner for firewall and network initiatives, including upgrades, policy redesigns, or security‑driven changes.
• Demonstrated experience supporting enterprise‑scale, multi‑site, or regulated environments.

Technical Competencies

• Owning and operating next‑generation enterprise firewall platforms (e.g., Palo Alto, Fortinet, Check Point, or equivalent), including policy lifecycle management, platform upgrades, and high‑availability designs.
• Advanced, hands‑on expertise with enterprise firewall platforms, including:
  • Security policy design and lifecycle management
  • VPN technologies (site‑to‑site and remote access)
  • NAT, segmentation, and traffic inspection
• Strong expertise in enterprise networking fundamentals, including:
  • Routing and switching architectures
  • Network resiliency and high‑availability design
  • Core network services (DNS, DHCP)
• Demonstrated ability to independently design and execute firewall and network changes in production environments.
• Experience integrating on‑premises firewall and network infrastructure with cloud platforms (Azure and/or AWS).
• Proficiency with network monitoring, logging, troubleshooting, and packet analysis tools.

Security & Operational Competencies

• Experience making risk‑based decisions related to firewall policy, segmentation, and network security controls in partnership with Information Security teams.
• Strong understanding of network security principles, including Zero Trust concepts and defense‑in‑depth.
• Experience assessing risk, implementing security controls, and participating in security incident response related to firewall and network infrastructure.
• Ability to perform root cause analysis and implement long‑term corrective actions following incidents or outages.

Preferred Experience

• Experience operating firewall and network platforms in regulated or compliance‑driven environments.
• Experience leading or materially influencing firewall policy redesigns, segmentation initiatives, or security‑driven network changes.
• Familiarity with firewall or network automation, configuration standardization, or infrastructure‑as‑code approaches.
• Experience acting as a technical mentor or escalation resource for junior network engineers.
• Relevant industry certifications, including firewall vendor certifications and/or CCNP‑level networking certifications.

Paradigm Benefits:

• Health and wellness– We want our people to be and stay healthy, so we offer PPO, HDHP, and HMO health insurance options with Cigna and Kaiser (CA employees only).
• Financial incentives – Paradigm’s financial benefits help prepare you for the future: competitive salaries, 401(k) matching contributions, employer-paid life and disability insurance, flexible spending and commuter accounts, and employer-matched HSA contributions.
• Vacation - We believe strongly that work-life balance is good for you and for our company. Our paid time off and personal holiday programs give you the flexibility you need to live your life to the fullest.
• Volunteer time– We want our employees to engage with and give back to their communities in meaningful ways.  Full and part-time employees receive one paid day per calendar year.
• Learning and development: One of Paradigm’s core values is expertise, so we encourage our employees to continually learn and grow. We support this in a variety of ways, including our new Learning Excellence at Paradigm (LEAP) program.

Paradigm believes that fostering a diverse and inclusive workplace is central to our mission of helping more people and transforming lives. We’re striving to build a culture that better reflects the society we live in and empowers our team to deliver the highest levels of compassion and care to those we serve. For us, achieving this goal requires a workforce that respectfully embraces differences and commits to positive change, creating an environment where everyone is able to bring their whole self to work.

Paradigm complies with federal and state disability laws and makes reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Leave Management at [email protected].  

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class.

As a contractor with the State of Wisconsin, Paradigm complies with Wisconsin Contract Compliance Law (§16.765). Poster link: Contract Compliance Law Poster

#LI-Remote