Network & Infrastructure Architect/Engineer DIS is seeking a hands-on Network & Infrastructure Architect/Engineer to support and enhance the connectivity, reliability, and observability of our enterprise EHR integration ecosystem. In this role, you will architect cloud and on-premises network patterns, ensure secure and stable interface connectivity, monitor integration engines, and deploy telemetry that delivers end-to-end visibility across HL7/FHIR transactions, application workflows, and infrastructure components. You will contribute to Zero Trust-aligned controls, implement comprehensive logging and monitoring across OCI and connected systems, and collaborate closely with interface, platform, and identity teams to ensure safe, performant, and compliant integrations.
Key ResponsibilitiesInfrastructure & Network Engineering (OCI)- Build and maintain OCI VCN architectures, including non-overlapping CIDRs, public/private subnets, route tables, gateways (Internet/NAT/Service), DRG, and peering required for EHR interface connectivity.
- Implement segmentation across perimeter boundaries, production/non-production environments, and tenancy/VCN constructs using NSGs for fine-grained VNIC-level control.
- Maintain network diagrams, address plans, baselines, and documentation supporting resilience, scalability, and hybrid connectivity between on-premises systems and OCI.
Integration-Focused Observability (Logging, Monitoring, Analytics)- Configure and manage comprehensive logging across multiple domains:
- Application/Solution Logs: HL7/FHIR engine logs, middleware logs, interface transaction logs.
- Network Logs: VCN flow logs, gateway traffic logs, firewall/NSG events.
- Asset Logs: compute instance logs, patch/compliance data, system performance metrics.
- Security Logs: IAM events, anomaly detections, audit trails, endpoint telemetry.
- Implement and manage logging platforms including OCI Logging, Splunk, CrowdStrike Falcon, and related SIEM/SOAR integrations.
- Deploy monitoring and alerting across metrics, alarms, events, and dashboards; integrate with Grafana/Prometheus and route alerts to operational teams.
- Define and analyze KPIs/SLOs for HL7/FHIR interfaces (latency, error rates, retries), and use OpenTelemetry to perform distributed tracing and end-to-end message correlation.
Identity, Access, and Zero Trust Support- Apply network and infrastructure controls that align with IAM requirements including phishing-resistant authentication, least-privilege access, and continuous session enforcement.
- Support Zero Trust advancement by implementing network-level controls mapped to CISA's pillars and cross-cutting capabilities.
- Maintain event logging and auditability mapped to NIST SP 800-53 Rev. 5, especially for integration-related assets.
Part Time support to adjacent team performing the following:- Retroactive analysis of previous networking projects for purposes of assessing issues and making recommendations.
- Communication of current network issues and gaps (e.g., lack of redundancy).
- Recommendation of solutions for detected problems.
- Provide comprehensive documentation of the DMM network infrastructure. Need to use Visio to draw maps.
- Assist in the development of proposals and supporting documentation for submission to upper management.
- Explain network device functions, interconnections, and ensure clarity on roles of supporting staff (e.g., why do we need to buy these).
- Maintain access and deep understanding of client network devices and interconnections.
- Possess thorough knowledge of connections and their integration.
- Ensure up-to-date awareness of device linkages, operational status, and hardware/software expiration dates.
- Advice on project success factors and best practices.
- Validate and authorize the procurement of equipment and services required for network projects.
- Support go-live activities and provide ongoing operational support.
- Identify key operating staff and understand their roles and functions.
- Facilitate communication with relevant personnel when specialized topics or issues arise.
- Interface with external partners for collaborative information exchange.
Required Qualifications- 8-12+ years of network or infrastructure engineering experience, including 5+ years in cloud networking with hands-on experience in OCI (VCNs, subnets, gateways, NSGs, flow logs).
- Experience deploying observability platforms, including centralized logging, metrics, alarms, dashboards, and analytics across high-compliance workloads.
- Knowledge of Identity & Access concepts including MFA/Passkey/PKI, policy-based access, and integration with enforcement mechanisms aligned to NIST SP 800-207.
- Direct experience with healthcare integrations: HL7 v2/FHIR, interface engines, and EHR platforms (Oracle Health, Epic, etc.).
- Hands-on experience with enterprise logging tools such as Splunk, OCI Logging, and security telemetry platforms like CrowdStrike Falcon.
Preferred Qualifications- Health IT experience with standards implementing distributed tracing for HL7/FHIR interfaces using OpenTelemetry; ability to design interface-focused SLOs and failure budgets.
- Experience with OCI observability tools (Log Analytics, Stack Monitoring, OPSI) or analogous monitoring/automation platforms.
- Background supporting security architecture in federal environments with experience applying CISA ZTMM v2.0 for Zero Trust maturity assessment.
Core Competencies- Excellence in engineering documentation: diagrams, address plans, segmentation models, control mappings.
- Proficiency in telemetry design-turning raw logs, network traces, and metrics into actionable dashboards, alarms, and operational runbooks.
- Strong understanding of Zero Trust components (Policy Engine, Policy Administrator, Policy Enforcement Point) and their application to integration layers.
- Change-safe engineering practices: canary deployments, rollback criteria, operator playbooks, and audit trail integrity.
Certifications (Nice to Have)- Oracle Cloud Infrastructure Architect Professional (or Associate)
- CISSP, CCSP, or CISA
- Azure or AWS cloud networking or security certifications (for hybrid expertise)
Deliverables- A current-state visibility map of OCI network topology, identity integrations, interface catalogs, and logging sources (application, network, asset, security).
- Future-state roadmap(s) with the progression of migration and evolution of landscape.
- A foundational observability baseline: audit/service/custom logs, VCN flow logs, Splunk/CrowdStrike integrations, core dashboards, and operational alarm routing.
- Patterns of issues and common problem areas.
- A Zero Trust maturity scorecard (CISA ZTMM v2.0) and an actionable roadmap aligned to NIST SP 800-207, focused on network, logging, and integration control priorities.
Physical and Cognitive RequirementsThe physical demands described below are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform essential functions.
Physical
- Frequently required to sit and work at desk/computer for extended periods of time of up to 8 hours a day.
- While performing the responsibilities of the job, the employee is required to talk and hear.
- Must be able to have repetitive wrist/hand/finger movement to work on computer and/or related office equipment.
- Vision abilities required by this job include close vision.
Cognitive
- Ability to learn new tasks.
- Ability to maintain focus and complete tasks independently.
- Ability to remember processes.
- Ability to complete tasks in situations that have a speed or productivity quota.
Salary is commensurate with experience. 
