Network Administrator (Cybersecurity-Focused)Location: Southfield, MI
Employment Type: Full-Time, On-Site
* At this moment we are not considering any applications outside of Michigan.
Position OverviewWe are seeking a highly skilled
Network Administrator with strong cybersecurity expertise to design, secure, and support our enterprise network infrastructure. This role is critical to protecting organizational data, ensuring network reliability, and proactively defending against cyber threats.
This is a
hands-on, engineering-focused role-not a policy-only or compliance-only position. The ideal candidate must be comfortable troubleshooting firewalls, VPN tunnels, routing issues, and real-time security events in production environments.
This role will also support and optimize our
Rapid7 (InsightIDR) platform, including agent deployment, log ingestion, alert investigation, and integration with network and endpoint systems.
Key ResponsibilitiesNetwork Infrastructure & Operations- Design, deploy, monitor, and maintain LAN, WAN, VPN, wireless, and cloud-connected networks
- Ensure performance, scalability, uptime, and security
- Troubleshoot complex issues and lead root-cause analysis
Cybersecurity & Risk Management- Act as a frontline defender against cyber threats
- Implement security controls (IDS/IPS, segmentation, zero-trust)
- Investigate threats using logs from firewalls, endpoints, and SIEM tools
- Identify and remediate issues like brute force attacks, VPN abuse, and DNS anomalies
Firewall & WatchGuard Administration- Own firewall architecture and policy design
- Configure and manage WatchGuard firewalls
- Troubleshoot site-to-site VPN issues (e.g., Phase 1 up / Phase 2 down)
SIEM / Rapid7 Operations- Deploy and manage Rapid7 Insight Agent (via GPO, scripts, or RMM)
- Maintain log ingestion from AD, servers, firewalls, and endpoints
- Investigate alerts and tune detections in InsightIDR
What You BringExperience- 3-5+ years of hands-on network and security experience
- Strong experience with firewalls, VPNs, and real-time troubleshooting
Technical Skills- Solid knowledge of TCP/IP, DNS, DHCP, VLANs, routing, and VPNs
- Experience with SIEM tools (Rapid7 preferred)
- Familiarity with Active Directory and endpoint security
Certifications- WatchGuard experience strongly preferred (certification a plus)
- Preferred: Security+, Network+, CCNA, or similar
Core Competencies- Strong problem-solving and analytical skills
- Ability to work independently in high-pressure environments
- Detail-oriented with a strong security-first mindset
- Clear communication and cross-team collaboration
Ready to Make an Impact?Apply today and help secure the future of healthcare at EPIC Health.
Visit
www.epichs.org* Background checks are required for this role.
